Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          n8Wd9c17Ux421CbQP2wCGoxowHdMK8wyZfy1Zp07yi8=
Subject key identifier:   F9:6B:B5:4A:45:88:06:3D:4C:A5:5F:1E:1D:2C:68:0E:C4:F9:0D:82
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019E1D59A54C9C85A84FB814B8DBFC2494C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          15E1
Signing time:             Tue 12 May 2026 18:01:14 +0000
Manifest this update:     Tue 12 May 2026 18:01:14 +0000
Manifest next update:     Wed 13 May 2026 18:01:14 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: /B8YfkyONa3RIicZhHKnQfGp6Y9RqMl3qzwfCtnNMRE=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a5:4c:9c:85:a8:4f:b8:14:b8:db:fc:24:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: May 12 18:01:14 2026 GMT
            Not After : May 13 18:01:14 2026 GMT
        Subject: CN=f96bb54a4588063d4ca55f1e1d2c680ec4f90d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:7a:cb:34:b4:ce:6c:80:9d:ff:60:f8:f7:
                    40:83:ba:27:c7:eb:e8:87:64:9a:37:8e:dc:42:21:
                    d5:11:71:03:c1:59:82:29:c4:d6:e5:b4:2f:1d:fb:
                    23:89:bd:f3:ce:a2:a2:7f:a2:d5:e1:d3:c1:50:3f:
                    58:39:e5:3b:c5:53:b7:3f:97:39:57:03:3d:5f:7d:
                    af:e5:98:13:c4:3f:0b:c1:0c:4f:d5:2e:a1:83:e7:
                    ca:62:42:57:7f:bf:4b:81:c0:c9:d2:26:0b:f2:f4:
                    21:94:15:0d:b9:6e:2b:30:21:06:db:46:75:f7:26:
                    53:a8:b1:44:7d:20:4e:e4:c5:13:af:3d:d3:00:e1:
                    71:4c:f9:b5:15:01:75:f3:8c:f7:b9:99:c3:dd:c3:
                    a2:58:1e:26:3a:3a:7f:c4:34:5d:1e:7a:af:95:26:
                    2c:8b:d0:82:a5:de:a0:fb:c1:68:8f:07:c7:d0:cc:
                    0d:6b:1b:84:a2:ab:66:79:46:9c:01:e7:05:ea:68:
                    ea:79:8a:e8:29:90:9e:f7:7d:11:74:53:d0:ab:91:
                    e5:35:79:de:88:15:b2:61:4d:b6:ce:46:f0:07:3c:
                    aa:20:a4:ff:9b:7e:15:21:fa:76:dc:19:6b:a5:05:
                    0d:55:ce:9a:19:b8:83:9a:28:55:9e:41:c3:78:af:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:B5:4A:45:88:06:3D:4C:A5:5F:1E:1D:2C:68:0E:C4:F9:0D:82
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:58:62:50:20:35:11:1e:95:90:59:94:2e:4d:36:16:b0:3f:
         c6:b4:91:4e:c3:15:14:f6:a2:11:d8:00:85:ef:d0:7c:3d:a3:
         a5:bc:16:50:99:0f:85:6d:31:ab:57:a0:7d:5f:43:da:11:b6:
         0b:e9:ce:4a:25:d9:e1:fd:1a:bb:74:48:60:91:a7:96:dc:fa:
         74:ff:db:f6:08:a3:a0:5c:12:95:0d:87:5d:5d:db:7c:d8:9d:
         a1:46:38:db:72:ba:ff:e7:31:45:b7:a5:2a:1f:a9:f4:eb:09:
         b3:f9:0f:4f:6c:23:5c:aa:3d:bd:f2:13:f5:09:76:01:5a:af:
         1a:d4:58:01:02:7f:c7:14:9d:12:8a:2b:ff:23:68:4d:01:d5:
         6e:83:cb:f8:1d:5c:a5:4a:f4:be:83:56:b0:19:81:e4:bb:7f:
         be:d1:b0:b8:fa:cf:2e:68:3b:ce:65:91:7a:7f:90:24:79:59:
         55:90:ab:b2:ea:3e:f3:88:0c:7e:63:db:95:08:eb:61:c2:cb:
         a9:30:02:6d:c5:e2:0b:fe:53:8d:ba:10:0d:e4:84:bc:bd:97:
         40:fb:a1:f4:5e:18:65:f6:08:28:e0:5e:57:4e:ae:c0:ad:0e:
         28:96:a9:31:97:e0:ff:a4:1b:5c:15:a5:86:53:04:dd:73:75:
         15:2a:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:51 2026 by rpki-client