Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File:                     v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier:          bU9Ld4ZJY0Q6rxzgSQapKlEFFsZjyxGliSUvMGsx5PA=
Subject key identifier:   75:E6:5E:A5:1C:E1:59:70:E8:E5:E0:5F:C0:E2:6F:72:E4:BB:1B:AB
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer:       /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial:       019E1FED1EC6FB91F2CECB40F1913CECE80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number:          020A
Signing time:             Wed 13 May 2026 06:01:34 +0000
Manifest this update:     Wed 13 May 2026 06:01:34 +0000
Manifest next update:     Thu 14 May 2026 06:01:34 +0000
Files and hashes:         1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
                          2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
                          3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: 0VFmilmCKQUbRAgIMTAhSb5SywxrpUG99lOyUNVbQrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:1e:c6:fb:91:f2:ce:cb:40:f1:91:3c:ec:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
        Validity
            Not Before: May 13 06:01:34 2026 GMT
            Not After : May 14 06:01:34 2026 GMT
        Subject: CN=75e65ea51ce15970e8e5e05fc0e26f72e4bb1bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:79:6e:bf:39:2f:58:fa:e3:cc:34:01:0a:
                    71:58:b4:fc:18:e6:1e:57:1e:67:c2:9e:78:54:a4:
                    61:c4:0b:4d:97:d3:fe:fc:dc:d1:36:f6:dc:2d:12:
                    89:c7:31:80:87:2f:02:ff:c1:f9:40:68:26:72:30:
                    94:ea:a9:1b:1b:01:66:db:30:dc:9a:ef:97:a5:68:
                    2a:2d:fa:29:2f:e4:53:6b:83:c6:cb:13:1d:b3:1f:
                    32:65:b2:09:57:00:c2:a8:8e:e8:7e:cb:e4:4b:ff:
                    0b:25:cb:6b:a0:d6:a7:68:36:75:29:39:c6:83:a9:
                    6c:1a:0e:b6:50:09:d2:d4:bd:d3:eb:2e:be:d0:c9:
                    2f:db:47:d0:ea:44:00:9e:4b:2c:56:f5:bf:6e:72:
                    e1:09:3a:63:c4:a2:6b:90:66:ba:e9:f9:11:9c:36:
                    99:04:09:ab:de:93:64:4b:d7:7e:5a:3a:53:30:28:
                    76:53:b7:b1:b3:e5:5b:73:9a:f7:39:87:31:dc:03:
                    fd:74:e3:b5:40:f3:d1:df:dc:2b:ba:7c:50:46:87:
                    4e:f4:e6:82:45:60:f9:0c:65:da:7f:c5:db:92:be:
                    2f:f5:6d:30:3a:6d:6a:41:b9:0a:e5:c2:c9:8e:91:
                    89:df:39:26:cc:75:fa:64:19:d6:38:86:5c:70:fd:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:5E:A5:1C:E1:59:70:E8:E5:E0:5F:C0:E2:6F:72:E4:BB:1B:AB
            X509v3 Authority Key Identifier:
                keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:86:63:99:77:11:75:25:2c:13:c4:a1:95:8c:29:a5:cf:
         50:f5:ef:e6:bc:c2:94:39:27:e6:8b:fc:e6:32:f8:2e:0a:db:
         c8:6e:8a:a8:58:b3:71:03:67:31:bd:db:18:ff:b1:28:85:27:
         4e:56:90:d8:f6:40:7b:e9:eb:4b:07:23:ac:9e:a2:86:39:00:
         49:b6:71:ac:97:62:04:95:ac:bc:d2:f7:53:56:0d:9d:8c:5c:
         1c:85:6b:6b:c8:8f:11:9e:9b:0e:fd:43:09:38:f5:20:ef:3d:
         c3:3a:58:c9:5e:ad:83:3b:03:8f:d7:4f:fa:12:e0:1c:92:1a:
         ef:43:6b:96:4b:60:b5:7c:88:1c:b7:bb:f6:27:47:d8:2a:a7:
         26:af:0d:78:7f:25:b7:a0:18:94:3a:80:44:f4:3f:76:af:f3:
         5c:9c:dc:84:4b:08:d8:2a:4f:73:d8:37:d9:85:61:81:1a:99:
         87:28:fb:09:12:e7:ed:de:97:1b:fd:55:ca:bc:04:15:0c:f8:
         3a:3b:3a:a1:61:95:4d:bf:13:c2:56:9f:54:c5:28:fb:5d:20:
         52:fb:93:3f:ad:64:c6:54:9f:a8:35:37:e4:46:dd:ff:95:28:
         bc:9a:21:58:dd:4a:eb:0c:f8:46:e4:2c:2a:80:13:78:60:7b:
         b1:b4:53:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7R7G+5HyzstA8ZE87OgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZjc2YTA2ZWFhMmEwM2M3OTkxMzQ3NTA5Yjg2MDhmNGE3
MTA3MWYwHhcNMjYwNTEzMDYwMTM0WhcNMjYwNTE0MDYwMTM0WjAzMTEwLwYDVQQD
Eyg3NWU2NWVhNTFjZTE1OTcwZThlNWUwNWZjMGUyNmY3MmU0YmIxYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSF5br85L1j648w0AQpxWLT8GOYe
Vx5nwp54VKRhxAtNl9P+/NzRNvbcLRKJxzGAhy8C/8H5QGgmcjCU6qkbGwFm2zDc
mu+XpWgqLfopL+RTa4PGyxMdsx8yZbIJVwDCqI7ofsvkS/8LJctroNanaDZ1KTnG
g6lsGg62UAnS1L3T6y6+0Mkv20fQ6kQAnkssVvW/bnLhCTpjxKJrkGa66fkRnDaZ
BAmr3pNkS9d+WjpTMCh2U7exs+Vbc5r3OYcx3AP9dOO1QPPR39wrunxQRodO9OaC
RWD5DGXaf8Xbkr4v9W0wOm1qQbkK5cLJjpGJ3zkmzHX6ZBnWOIZccP15pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXmXqUc4Vlw6OXgX8Dib3LkuxurMB8GA1UdIwQY
MBaAFL/3agbqoqA8eZE0dQm4YI9KcQcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjIt
OTQ5NjYyYjI3MWIyLzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjItOTQ5NjYyYjI3MWIy
LzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2SGY5l3
EXUlLBPEoZWMKaXPUPXv5rzClDkn5ov85jL4LgrbyG6KqFizcQNnMb3bGP+xKIUn
TlaQ2PZAe+nrSwcjrJ6ihjkASbZxrJdiBJWsvNL3U1YNnYxcHIVra8iPEZ6bDv1D
CTj1IO89wzpYyV6tgzsDj9dP+hLgHJIa70NrlktgtXyIHLe79idH2CqnJq8NeH8l
t6AYlDqARPQ/dq/zXJzchEsI2CpPc9g32YVhgRqZhyj7CRLn7d6XG/1VyrwEFQz4
Ojs6oWGVTb8TwlafVMUo+10gUvuTP61kxlSfqDU35Ebd/5UovJohWN1K6wz4RuQs
KoATeGB7sbRT3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:20:58 2026 by rpki-client