Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File:                     P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier:          waOSyEkL4rny62niRZPjV9WxqRsB81iScE2gU+cPWgc=
Subject key identifier:   5E:E8:5C:95:32:18:4A:FD:9F:05:0F:DA:62:D2:DD:D0:33:60:B6:E8
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer:       /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial:       019E1F7E7640A257CEDB22B8898CCF392E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number:          0EF3
Signing time:             Wed 13 May 2026 04:00:41 +0000
Manifest this update:     Wed 13 May 2026 04:00:41 +0000
Manifest next update:     Thu 14 May 2026 04:00:41 +0000
Files and hashes:         1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: oH4dsYocEWozX/bVWi2fLq/uPrp3tdHCDJpgar2ou9g=)
                          2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:76:40:a2:57:ce:db:22:b8:89:8c:cf:39:2e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
        Validity
            Not Before: May 13 04:00:41 2026 GMT
            Not After : May 14 04:00:41 2026 GMT
        Subject: CN=5ee85c9532184afd9f050fda62d2ddd03360b6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:a9:ca:7b:64:ab:b7:02:91:c7:bc:9b:df:
                    7d:dc:82:09:e7:ae:25:7d:aa:0c:87:61:9a:c3:aa:
                    c9:e8:15:33:71:7e:79:be:3d:f8:72:16:35:73:68:
                    48:27:61:e6:8b:7a:e8:71:09:40:92:b1:41:85:2f:
                    75:2c:ea:5e:a8:96:b2:7a:be:1c:bf:57:fc:1b:53:
                    9d:a3:6c:b9:67:ab:10:54:45:45:50:7c:c4:25:43:
                    95:19:77:54:31:e7:90:e8:c6:43:64:44:16:b8:c1:
                    f9:83:b0:4d:18:94:6c:07:74:db:93:85:3c:20:ee:
                    10:5b:3f:58:c0:cd:38:78:71:bd:93:9a:45:93:06:
                    09:79:2d:5f:be:f8:8d:bc:36:31:d5:74:bc:f0:2d:
                    f0:12:b1:53:64:c1:ef:cf:17:e4:c1:72:e9:1d:f7:
                    9e:6b:bd:72:3f:25:59:28:03:d1:65:76:6c:f5:97:
                    03:a0:65:a0:7c:f3:59:7f:58:74:f9:82:d3:a8:fc:
                    ef:83:4e:7f:2d:fc:d1:87:47:af:00:19:36:e0:26:
                    22:f5:22:dc:06:d9:d3:d2:9a:17:0b:7f:02:59:f7:
                    f1:52:ef:43:7d:f4:f4:dc:2c:a4:f2:0e:9f:2f:5a:
                    ee:39:00:9e:1a:ec:a2:61:c5:53:9e:8a:bd:ea:2f:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:5C:95:32:18:4A:FD:9F:05:0F:DA:62:D2:DD:D0:33:60:B6:E8
            X509v3 Authority Key Identifier:
                keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:74:fe:0d:85:1d:5b:50:12:54:ff:e9:b1:1b:a5:89:34:43:
         12:03:c9:ce:f2:a3:9d:db:e4:f5:20:30:f2:0f:98:dd:3b:77:
         50:06:cc:9d:5a:5b:e7:a2:80:0d:e2:17:7d:af:54:c1:5b:e8:
         6c:92:73:aa:15:8a:21:96:89:59:8a:00:bc:ee:94:3e:45:f9:
         b7:a6:24:15:30:41:55:64:b9:37:ac:cf:45:5d:99:c9:d7:78:
         e9:1e:43:92:e5:7f:dc:ab:21:85:3d:5b:e5:56:85:4f:37:9c:
         c3:f9:1a:7f:32:dd:70:b1:0d:da:e2:24:01:58:4c:67:79:a1:
         9d:5b:e0:a9:ed:48:3c:c0:c9:65:05:c1:29:f3:40:19:51:0d:
         3a:e9:d4:8f:c0:94:a6:af:e3:ec:c0:ce:af:25:2d:d7:60:47:
         23:aa:42:2b:c9:96:e6:b9:8f:2e:41:42:b3:01:00:d9:79:d2:
         f0:40:17:21:40:dc:91:84:da:61:e6:04:78:f4:21:01:d0:46:
         f3:12:27:ec:8e:b2:3e:83:39:17:6f:aa:6a:aa:f0:83:73:82:
         03:ac:e3:2e:85:c8:77:75:40:d1:03:4e:6d:8f:80:bf:35:63:
         ca:e3:ba:3f:1d:ca:16:a3:d2:14:f2:e7:cd:09:25:fe:2e:ff:
         52:8f:2d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffnZAolfO2yK4iYzPOS5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmZjYmVjODg4YzEwNDdmMjIxZDdjZjkzOTZiZjE0MTJh
YmFmOWIwHhcNMjYwNTEzMDQwMDQxWhcNMjYwNTE0MDQwMDQxWjAzMTEwLwYDVQQD
Eyg1ZWU4NWM5NTMyMTg0YWZkOWYwNTBmZGE2MmQyZGRkMDMzNjBiNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Spyntkq7cCkce8m9993IIJ564l
faoMh2Gaw6rJ6BUzcX55vj34chY1c2hIJ2Hmi3rocQlAkrFBhS91LOpeqJayer4c
v1f8G1Odo2y5Z6sQVEVFUHzEJUOVGXdUMeeQ6MZDZEQWuMH5g7BNGJRsB3Tbk4U8
IO4QWz9YwM04eHG9k5pFkwYJeS1fvviNvDYx1XS88C3wErFTZMHvzxfkwXLpHfee
a71yPyVZKAPRZXZs9ZcDoGWgfPNZf1h0+YLTqPzvg05/LfzRh0evABk24CYi9SLc
BtnT0poXC38CWffxUu9DffT03Cyk8g6fL1ruOQCeGuyiYcVTnoq96i/BjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7oXJUyGEr9nwUP2mLS3dAzYLboMB8GA1UdIwQY
MBaAFD//y+yIjBBH8iHXz5OWvxQSq6+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2It
NjE2NjdjNzY5MWIyLzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2ItNjE2NjdjNzY5MWIy
LzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXT+DYUd
W1ASVP/psRuliTRDEgPJzvKjndvk9SAw8g+Y3Tt3UAbMnVpb56KADeIXfa9UwVvo
bJJzqhWKIZaJWYoAvO6UPkX5t6YkFTBBVWS5N6zPRV2Zydd46R5DkuV/3KshhT1b
5VaFTzecw/kafzLdcLEN2uIkAVhMZ3mhnVvgqe1IPMDJZQXBKfNAGVENOunUj8CU
pq/j7MDOryUt12BHI6pCK8mW5rmPLkFCswEA2XnS8EAXIUDckYTaYeYEePQhAdBG
8xIn7I6yPoM5F2+qaqrwg3OCA6zjLoXId3VA0QNObY+AvzVjyuO6Px3KFqPSFPLn
zQkl/i7/Uo8tiw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:27 2026 by rpki-client