Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          VRY9zOw2Hdf/kYEf0piM86DeS28Ux9+UN57iT8RQNQM=
Subject key identifier:   9D:00:BB:49:C0:BB:E3:32:1D:9F:2E:56:F8:F9:94:4E:64:EE:B2:96
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019E1FECF5AB22D638E34248E2DA64B94EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          06B5
Signing time:             Wed 13 May 2026 06:01:23 +0000
Manifest this update:     Wed 13 May 2026 06:01:23 +0000
Manifest next update:     Thu 14 May 2026 06:01:23 +0000
Files and hashes:         1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
                          2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: YKcDRCapKd4BeJMaPvCtTZVcT9aPzFVxrlaASzQV9xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:f5:ab:22:d6:38:e3:42:48:e2:da:64:b9:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: May 13 06:01:23 2026 GMT
            Not After : May 14 06:01:23 2026 GMT
        Subject: CN=9d00bb49c0bbe3321d9f2e56f8f9944e64eeb296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:7d:8a:4c:1e:64:d8:17:df:3c:b5:a3:ad:
                    78:4c:44:1b:8a:b0:21:52:7b:4b:6e:bd:3f:8d:e5:
                    17:0f:8b:c0:d3:e1:79:e4:db:0d:29:87:7f:4a:c5:
                    2f:0e:db:ac:5b:78:aa:c6:7a:7a:9a:dd:15:b3:43:
                    23:b1:e4:3c:96:b3:2b:1d:8c:c9:4b:8d:4b:de:df:
                    d4:03:eb:17:4e:1a:70:08:92:14:06:6b:33:2a:56:
                    c3:c6:ac:16:53:ca:60:e8:b7:3d:a4:09:e0:16:f3:
                    ed:4c:e2:4e:6c:e8:a9:6b:8e:5d:ad:e2:2f:a3:ae:
                    ca:26:b2:a5:be:e8:a2:db:3e:69:0f:f0:bf:f4:de:
                    e2:28:3e:59:d7:91:3c:b0:0c:19:a3:03:f5:1e:d3:
                    d2:12:04:fa:a9:03:6e:b1:49:87:bc:ce:66:a3:58:
                    19:d2:61:0c:4c:2b:c2:5c:95:43:89:42:c4:cb:52:
                    86:bf:1c:af:16:e6:79:79:69:2f:b5:54:44:84:c8:
                    00:81:97:72:3f:30:c4:b0:ae:04:90:c0:f0:5a:39:
                    56:f3:c8:78:00:01:45:b5:87:32:49:3e:6e:3e:76:
                    50:34:02:86:db:30:b4:19:7e:e7:4e:a2:30:c0:54:
                    a1:38:94:52:b6:a5:21:03:a5:10:d6:03:c6:82:32:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:BB:49:C0:BB:E3:32:1D:9F:2E:56:F8:F9:94:4E:64:EE:B2:96
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:72:e3:57:5d:1f:93:54:33:6a:41:86:62:4f:c3:09:d5:c4:
         10:57:05:23:2c:10:be:cd:4b:12:f6:c6:f5:ae:99:14:92:c7:
         2a:5d:1a:00:51:97:97:d1:d0:2d:c2:1d:df:5e:cd:55:57:1b:
         47:6a:d0:ff:51:58:f5:47:ed:8b:8b:b2:63:9c:86:81:95:1c:
         92:8a:db:67:90:dd:30:6d:85:57:01:b1:61:cf:3c:b0:50:17:
         ae:45:6e:3f:a4:15:24:c8:24:e7:b8:1d:73:c8:5f:79:ca:a6:
         e9:a3:aa:fc:d5:c1:de:c4:ba:18:ba:18:7c:67:b1:e8:dd:29:
         51:df:d1:12:9f:02:e1:7f:92:de:b2:fc:d8:12:24:39:96:85:
         af:0c:33:9e:4c:3e:9e:98:fe:31:fe:ad:b6:25:d6:4d:66:6b:
         71:5d:c3:78:eb:a3:32:6d:c6:46:5b:f1:44:92:2e:7b:0f:95:
         86:b2:54:e3:9f:d8:7c:ee:1a:74:b8:24:39:7b:c6:9a:9d:2b:
         bc:79:2e:8a:fe:94:c0:1b:99:40:7b:b4:5a:dc:96:27:5a:5e:
         78:c4:2c:da:3d:bb:41:a3:c4:9f:e9:94:4a:56:83:e0:6d:c8:
         90:fb:a2:3e:4d:be:47:3b:7e:a2:ca:6c:87:e0:53:52:a0:de:
         71:b4:1d:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7PWrItY440JI4tpkuU6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh
OTE3YjMwHhcNMjYwNTEzMDYwMTIzWhcNMjYwNTE0MDYwMTIzWjAzMTEwLwYDVQQD
Eyg5ZDAwYmI0OWMwYmJlMzMyMWQ5ZjJlNTZmOGY5OTQ0ZTY0ZWViMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiN9ikweZNgX3zy1o614TEQbirAh
UntLbr0/jeUXD4vA0+F55NsNKYd/SsUvDtusW3iqxnp6mt0Vs0MjseQ8lrMrHYzJ
S41L3t/UA+sXThpwCJIUBmszKlbDxqwWU8pg6Lc9pAngFvPtTOJObOipa45dreIv
o67KJrKlvuii2z5pD/C/9N7iKD5Z15E8sAwZowP1HtPSEgT6qQNusUmHvM5mo1gZ
0mEMTCvCXJVDiULEy1KGvxyvFuZ5eWkvtVREhMgAgZdyPzDEsK4EkMDwWjlW88h4
AAFFtYcyST5uPnZQNAKG2zC0GX7nTqIwwFShOJRStqUhA6UQ1gPGgjJIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0Au0nAu+MyHZ8uVvj5lE5k7rKWMB8GA1UdIwQY
MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt
MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1
LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3LjV10f
k1QzakGGYk/DCdXEEFcFIywQvs1LEvbG9a6ZFJLHKl0aAFGXl9HQLcId317NVVcb
R2rQ/1FY9Ufti4uyY5yGgZUckorbZ5DdMG2FVwGxYc88sFAXrkVuP6QVJMgk57gd
c8hfecqm6aOq/NXB3sS6GLoYfGex6N0pUd/REp8C4X+S3rL82BIkOZaFrwwznkw+
npj+Mf6ttiXWTWZrcV3DeOujMm3GRlvxRJIuew+VhrJU45/YfO4adLgkOXvGmp0r
vHkuiv6UwBuZQHu0WtyWJ1peeMQs2j27QaPEn+mUSlaD4G3IkPuiPk2+Rzt+osps
h+BTUqDecbQdZw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:26:37 2026 by rpki-client