Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File:                     bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier:          a5GZasAfljgPShd7usdcVpsRkMkGZRj0IRGR8sasf60=
Subject key identifier:   F5:3A:8C:80:73:A5:28:C6:68:97:53:D8:8C:C4:E5:7B:4F:BE:90:66
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer:       /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial:       019E1D222E2600EACC4B82DB9B2A5E326BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number:          0A06
Signing time:             Tue 12 May 2026 17:00:39 +0000
Manifest this update:     Tue 12 May 2026 17:00:39 +0000
Manifest next update:     Wed 13 May 2026 17:00:39 +0000
Files and hashes:         1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
                          2: EKOknUpftnx0Q7axH9neRzx4NSA.roa (hash: n+4PMTNbAHk9TtNsZ242IVt0Y1GiuJ2mxezao/gIwZc=)
                          3: _A6QNXxL5haXYGnIWjTWFpFJgfw.roa (hash: wBYoGVK+AJbrNsBKUYrwucKaBV6UAGbmCu6gl1XSKOY=)
                          4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: tJcFLk/9wJYtuJWB2qnHNhTScXvbFEL+D6MNUnxWkSo=)
                          5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:2e:26:00:ea:cc:4b:82:db:9b:2a:5e:32:6b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
        Validity
            Not Before: May 12 17:00:39 2026 GMT
            Not After : May 13 17:00:39 2026 GMT
        Subject: CN=f53a8c8073a528c6689753d88cc4e57b4fbe9066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:5f:3c:5c:3e:76:5b:dc:9f:87:41:bc:cf:
                    bf:24:a2:0c:06:27:7a:88:59:f8:ab:06:46:a8:01:
                    e0:71:3a:c9:ca:8c:7d:74:33:f3:e8:b0:b9:b1:d9:
                    4c:8b:d9:e1:0b:9a:bd:fd:0f:d5:4f:10:c5:41:b0:
                    c4:d8:24:7a:0a:c6:62:41:73:f3:da:b9:a9:33:ec:
                    9c:24:4e:92:5d:3d:d1:b4:a7:a9:3b:94:99:11:0c:
                    3c:fc:d4:96:65:b6:d8:bf:86:7c:58:df:2a:68:f7:
                    2d:e5:15:67:a8:e8:4a:d7:17:98:d0:3d:32:d4:f7:
                    f4:32:2b:80:95:4c:cb:a5:8b:28:76:f2:72:4c:92:
                    49:54:e2:a9:ff:15:13:79:3e:35:13:01:fe:8b:00:
                    ef:9b:ec:18:87:f6:0c:27:cd:16:2f:f9:0c:54:b9:
                    8a:68:8c:01:a6:24:29:40:3f:bf:c6:a0:15:c7:2a:
                    56:9d:c6:5f:20:7c:26:29:db:3b:98:e8:3c:08:5c:
                    21:f9:d0:62:ae:6f:fb:a5:29:c3:b2:75:46:06:f2:
                    29:01:5e:ca:48:8e:ef:46:01:d2:b2:87:e5:1d:03:
                    ef:a6:6d:04:31:95:a4:df:15:c4:cb:ab:7d:64:b6:
                    63:c4:d9:d3:59:01:f7:7b:1f:f4:65:b7:7d:29:62:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:8C:80:73:A5:28:C6:68:97:53:D8:8C:C4:E5:7B:4F:BE:90:66
            X509v3 Authority Key Identifier:
                keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:b8:dc:05:db:5c:fd:01:34:37:3f:f3:79:22:af:2e:4d:
         f3:f0:6f:95:72:b5:bf:30:76:57:f0:22:58:82:92:aa:c1:26:
         ba:09:8c:d4:e3:2e:70:cd:17:52:a2:d4:fc:56:85:d2:81:bc:
         6a:b9:17:5b:84:17:15:d5:a5:01:72:b1:1a:16:20:15:09:ee:
         f3:d8:a1:87:01:e8:b0:bc:86:10:ee:ad:7a:6c:1c:76:0a:b6:
         ac:30:33:4b:96:28:17:cf:6d:ff:9d:01:b6:e6:c9:c3:c3:0e:
         1c:67:a9:de:bc:2f:66:b2:6d:25:84:56:0a:8c:3a:62:0a:47:
         9a:ab:5e:de:69:14:72:76:e4:41:f3:4c:17:0c:a1:5f:8a:6b:
         91:79:75:1e:6f:03:21:0f:ad:88:8b:4b:af:18:2a:4e:2e:8c:
         61:22:05:36:a7:ef:28:71:4b:d3:1b:b6:29:5d:65:07:e5:4e:
         cf:50:8d:50:c4:12:d5:98:aa:5e:a2:14:6b:f8:8c:58:83:e0:
         c9:0e:0c:35:47:80:3b:43:67:e5:e8:8a:84:76:5e:d3:cd:9a:
         a3:3a:6c:d3:d9:c2:07:5e:5e:fd:8c:34:86:53:ea:fe:fb:d7:
         39:65:27:70:5b:49:15:ab:fe:23:22:20:87:cf:9d:9d:8f:d7:
         a4:23:65:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIi4mAOrMS4LbmypeMmvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1
NzA4YTIwHhcNMjYwNTEyMTcwMDM5WhcNMjYwNTEzMTcwMDM5WjAzMTEwLwYDVQQD
EyhmNTNhOGM4MDczYTUyOGM2Njg5NzUzZDg4Y2M0ZTU3YjRmYmU5MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhxfPFw+dlvcn4dBvM+/JKIMBid6
iFn4qwZGqAHgcTrJyox9dDPz6LC5sdlMi9nhC5q9/Q/VTxDFQbDE2CR6CsZiQXPz
2rmpM+ycJE6SXT3RtKepO5SZEQw8/NSWZbbYv4Z8WN8qaPct5RVnqOhK1xeY0D0y
1Pf0MiuAlUzLpYsodvJyTJJJVOKp/xUTeT41EwH+iwDvm+wYh/YMJ80WL/kMVLmK
aIwBpiQpQD+/xqAVxypWncZfIHwmKds7mOg8CFwh+dBirm/7pSnDsnVGBvIpAV7K
SI7vRgHSsoflHQPvpm0EMZWk3xXEy6t9ZLZjxNnTWQH3ex/0Zbd9KWKxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU6jIBzpSjGaJdT2IzE5XtPvpBmMB8GA1UdIwQY
MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt
MWFlYjZhNGU0NWFkLzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk
LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu+43AXb
XP0BNDc/83kiry5N8/BvlXK1vzB2V/AiWIKSqsEmugmM1OMucM0XUqLU/FaF0oG8
arkXW4QXFdWlAXKxGhYgFQnu89ihhwHosLyGEO6temwcdgq2rDAzS5YoF89t/50B
tubJw8MOHGep3rwvZrJtJYRWCow6YgpHmqte3mkUcnbkQfNMFwyhX4prkXl1Hm8D
IQ+tiItLrxgqTi6MYSIFNqfvKHFL0xu2KV1lB+VOz1CNUMQS1ZiqXqIUa/iMWIPg
yQ4MNUeAO0Nn5eiKhHZe082aozps09nCB15e/Yw0hlPq/vvXOWUncFtJFav+IyIg
h8+dnY/XpCNl5g==
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:55 2026 by rpki-client