Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File:                     BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier:          MIoqODVC0If0KvWRsxK1/AvmyZdKbM3SJaHMOtbIDoQ=
Subject key identifier:   D6:22:8F:A1:A5:6A:9B:99:5D:EC:A5:EC:4A:A6:6D:F5:96:23:65:0F
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer:       /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial:       019E1D592129F16ACA546FEFB89983AC3BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 18:00:40 +0000
Manifest this update:     Tue 12 May 2026 18:00:40 +0000
Manifest next update:     Wed 13 May 2026 18:00:40 +0000
Files and hashes:         1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: MyYj4HkElJEqFrA8Gr4Kdlvj6f1JEYuQKhR9zhL0pg0=)
                          2: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (hash: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:21:29:f1:6a:ca:54:6f:ef:b8:99:83:ac:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
        Validity
            Not Before: May 12 18:00:40 2026 GMT
            Not After : May 13 18:00:40 2026 GMT
        Subject: CN=d6228fa1a56a9b995deca5ec4aa66df59623650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:39:a2:a5:32:14:98:f9:95:80:4a:5a:c1:
                    f7:36:2a:d9:19:b6:c4:0a:c9:40:f1:0b:a2:d4:4e:
                    03:c8:4a:74:56:2c:9f:47:92:56:99:8e:d6:f5:4c:
                    49:0e:5e:0c:6b:11:c6:e5:fa:08:2d:97:d6:c8:e5:
                    59:e2:07:c4:7c:22:b6:f2:36:6b:76:40:fc:62:d7:
                    15:38:ff:61:9d:bf:0f:6d:6a:6e:63:1b:54:c6:23:
                    70:a3:b4:46:5a:df:92:e1:2e:ba:97:b9:1d:d9:86:
                    26:7c:c6:00:af:19:64:27:be:7e:76:dc:74:fe:09:
                    df:f5:0a:76:3d:87:c1:0f:97:ad:ba:57:09:5b:e8:
                    79:d2:30:bb:a6:89:6f:69:b6:86:fc:a0:45:33:42:
                    78:2b:f3:2f:aa:b3:bc:65:1b:e5:c9:22:e3:4e:c0:
                    f3:7d:3d:33:02:85:51:96:60:c5:41:30:cc:f8:ec:
                    f2:5b:4c:a9:bf:aa:58:bc:5a:f3:34:97:f8:67:a0:
                    93:76:b4:7a:2f:fc:7a:2b:7f:ff:e7:56:8b:fe:59:
                    0b:b8:d2:4c:4e:aa:33:e5:66:b5:1e:3d:ae:07:35:
                    43:78:cb:f8:34:ec:ad:f2:6a:29:00:3b:1b:ec:c1:
                    f1:fa:65:7f:49:64:30:d8:e1:c8:f3:94:1e:e1:0a:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:8F:A1:A5:6A:9B:99:5D:EC:A5:EC:4A:A6:6D:F5:96:23:65:0F
            X509v3 Authority Key Identifier:
                keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:2d:22:02:71:05:8b:7c:d7:8b:9c:b0:3c:f2:94:bc:1c:
         6e:b0:a3:c7:f0:2e:42:b9:4a:72:8b:f6:14:71:a5:15:1c:10:
         a4:45:35:42:40:c6:cd:df:5b:c2:4e:e2:0e:92:60:98:0f:eb:
         37:56:53:17:6b:e5:0f:c3:18:37:2c:9b:c6:2f:2c:1d:a4:fa:
         5d:f7:ef:46:98:31:e1:9e:14:67:65:d3:80:e1:c8:b0:2b:cd:
         09:1a:f2:c8:61:73:7a:46:9f:f3:6e:3f:23:57:c4:e7:9a:7f:
         d1:79:b8:44:36:5a:d6:99:26:56:ae:44:d2:d2:fb:6e:e9:9b:
         4d:cd:af:28:75:6c:e7:e5:83:f2:18:4a:66:51:31:6f:d7:6f:
         aa:5a:b6:b8:a4:d2:bd:5c:58:8c:33:d8:a0:c3:89:59:ad:0a:
         65:22:ce:03:5b:6d:35:4b:9e:e9:a9:e1:fa:0b:9e:ee:61:5b:
         af:34:3f:9c:24:3c:db:a9:bf:9f:99:6a:cf:f9:46:a4:76:f6:
         59:35:7a:b9:a9:e0:1d:1e:01:d6:29:1f:d6:5f:bc:85:ce:db:
         83:1c:e5:32:68:07:8a:bb:eb:f1:51:22:1f:77:ca:95:83:13:
         72:49:e1:4b:81:6e:8e:5a:0f:b9:ca:1f:43:34:60:ce:da:ee:
         6c:d3:7b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWSEp8WrKVG/vuJmDrDveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjYwNTEyMTgwMDQwWhcNMjYwNTEzMTgwMDQwWjAzMTEwLwYDVQQD
EyhkNjIyOGZhMWE1NmE5Yjk5NWRlY2E1ZWM0YWE2NmRmNTk2MjM2NTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCg5oqUyFJj5lYBKWsH3NirZGbbE
CslA8Qui1E4DyEp0ViyfR5JWmY7W9UxJDl4MaxHG5foILZfWyOVZ4gfEfCK28jZr
dkD8YtcVOP9hnb8PbWpuYxtUxiNwo7RGWt+S4S66l7kd2YYmfMYArxlkJ75+dtx0
/gnf9Qp2PYfBD5etulcJW+h50jC7polvabaG/KBFM0J4K/MvqrO8ZRvlySLjTsDz
fT0zAoVRlmDFQTDM+OzyW0ypv6pYvFrzNJf4Z6CTdrR6L/x6K3//51aL/lkLuNJM
Tqoz5Wa1Hj2uBzVDeMv4NOyt8mopADsb7MHx+mV/SWQw2OHI85Qe4Qr6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYij6GlapuZXeyl7EqmbfWWI2UPMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc4tIgJx
BYt814ucsDzylLwcbrCjx/AuQrlKcov2FHGlFRwQpEU1QkDGzd9bwk7iDpJgmA/r
N1ZTF2vlD8MYNyybxi8sHaT6XffvRpgx4Z4UZ2XTgOHIsCvNCRryyGFzekaf824/
I1fE55p/0Xm4RDZa1pkmVq5E0tL7bumbTc2vKHVs5+WD8hhKZlExb9dvqlq2uKTS
vVxYjDPYoMOJWa0KZSLOA1ttNUue6anh+gue7mFbrzQ/nCQ826m/n5lqz/lGpHb2
WTV6uangHR4B1ikf1l+8hc7bgxzlMmgHirvr8VEiH3fKlYMTcknhS4FujloPucof
QzRgztrubNN7mA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:30:16 2026 by rpki-client