Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File:                     sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier:          eJMWtXuVM0b9ORzBYIhEJCx7AFZPUbk2zsyhTGJy4k4=
Subject key identifier:   B6:B8:07:EB:0C:4E:25:85:9B:60:7C:8A:3D:C1:88:38:DC:AD:4F:90
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer:       /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial:       019D254C8AAF9A221DD4797C4EB0124298C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number:          0B4F
Signing time:             Wed 25 Mar 2026 14:01:06 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:06 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:06 +0000
Files and hashes:         1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
                          2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: Su37aGFJpnNZfi4fv3g0n26VXsXvIvcoFW/UfU89odE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:8a:af:9a:22:1d:d4:79:7c:4e:b0:12:42:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
        Validity
            Not Before: Mar 25 14:01:06 2026 GMT
            Not After : Mar 26 14:01:06 2026 GMT
        Subject: CN=b6b807eb0c4e25859b607c8a3dc18838dcad4f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:21:4e:ce:81:95:95:3b:cd:34:d7:ed:33:
                    14:a3:4a:12:95:d9:61:e8:65:49:13:04:5d:c4:2b:
                    13:0f:7f:ae:12:3e:38:72:6d:ba:bc:a8:0f:34:b9:
                    fb:a0:f1:f4:24:d9:5e:a3:1b:72:39:09:6d:28:ff:
                    6c:1e:fa:49:74:fe:ad:e9:10:41:60:ba:6c:70:25:
                    87:38:bf:95:f6:b9:35:6d:54:46:1a:99:ef:e7:bb:
                    32:ec:58:a8:ff:82:18:fc:cd:d0:01:cc:55:04:5f:
                    3e:80:b2:e0:22:59:fb:41:80:c7:11:92:25:f2:e0:
                    72:b6:7d:9e:ae:8e:0e:df:ec:ac:be:c9:6e:56:20:
                    25:b4:51:8c:3c:0d:ae:da:11:49:0f:5d:73:47:6f:
                    a9:01:cf:39:f6:94:ed:36:31:14:75:3d:31:6e:7d:
                    5d:32:f7:72:6c:43:76:d6:3c:89:6e:93:ab:eb:83:
                    9a:bb:66:41:75:06:e0:5b:e0:f7:ef:7c:d3:b0:22:
                    db:a1:59:5f:84:e4:78:77:f6:cf:b7:aa:d3:a8:b5:
                    39:c7:a2:98:61:88:28:f6:15:c7:5f:3b:51:6c:d8:
                    1d:80:5c:43:55:35:9d:5f:a5:3f:11:c6:07:63:80:
                    6d:f4:e5:40:62:02:c7:8b:0c:b9:39:83:14:5a:4c:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:07:EB:0C:4E:25:85:9B:60:7C:8A:3D:C1:88:38:DC:AD:4F:90
            X509v3 Authority Key Identifier:
                keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d7:ce:ca:9e:e9:fb:4c:2f:24:29:14:31:b3:5d:13:5b:ad:
         9b:6a:42:e1:83:e9:ec:b3:fc:ab:92:0a:f1:91:2d:8e:0b:ac:
         d8:c7:08:c4:8c:a4:a5:5a:82:e4:76:66:eb:f3:a9:9c:54:65:
         d1:7d:b7:27:70:76:5c:72:b6:86:11:8b:9d:d6:5f:fa:b0:f1:
         8e:60:8b:e0:07:82:17:6b:34:34:1b:d8:d8:b8:e0:a9:5d:c2:
         30:ba:65:19:aa:84:05:6d:58:35:75:9a:69:86:36:58:ba:01:
         f8:c3:28:18:ac:b1:95:9d:59:c1:63:66:e4:bf:6c:07:5d:d7:
         ab:86:7f:75:29:a9:07:79:3c:72:59:ef:08:69:21:35:d8:ab:
         0c:23:19:21:4e:52:55:13:d2:01:04:ea:fc:92:47:80:ca:a1:
         1c:69:5f:02:e8:dc:49:b9:49:2e:25:82:df:9b:01:b2:94:50:
         bb:26:34:c2:4a:67:6e:4b:dd:31:de:b9:18:d2:f7:17:c6:66:
         3a:80:4a:2b:46:ca:d8:f0:d8:28:82:fd:6a:01:2d:c6:59:d5:
         4c:90:4e:f6:c6:6d:48:ed:20:d4:76:c1:d2:80:4b:d6:af:c4:
         67:3c:b2:25:71:57:8a:59:88:ad:b1:2e:3f:a3:39:e9:48:dc:
         00:a3:07:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTIqvmiId1Hl8TrASQpjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjYwMzI1MTQwMTA2WhcNMjYwMzI2MTQwMTA2WjAzMTEwLwYDVQQD
EyhiNmI4MDdlYjBjNGUyNTg1OWI2MDdjOGEzZGMxODgzOGRjYWQ0ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/4hTs6BlZU7zTTX7TMUo0oSldlh
6GVJEwRdxCsTD3+uEj44cm26vKgPNLn7oPH0JNleoxtyOQltKP9sHvpJdP6t6RBB
YLpscCWHOL+V9rk1bVRGGpnv57sy7Fio/4IY/M3QAcxVBF8+gLLgIln7QYDHEZIl
8uBytn2ero4O3+ysvsluViAltFGMPA2u2hFJD11zR2+pAc859pTtNjEUdT0xbn1d
MvdybEN21jyJbpOr64Oau2ZBdQbgW+D373zTsCLboVlfhOR4d/bPt6rTqLU5x6KY
YYgo9hXHXztRbNgdgFxDVTWdX6U/EcYHY4Bt9OVAYgLHiwy5OYMUWky4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa4B+sMTiWFm2B8ij3BiDjcrU+QMB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNfOyp7p
+0wvJCkUMbNdE1utm2pC4YPp7LP8q5IK8ZEtjgus2McIxIykpVqC5HZm6/OpnFRl
0X23J3B2XHK2hhGLndZf+rDxjmCL4AeCF2s0NBvY2LjgqV3CMLplGaqEBW1YNXWa
aYY2WLoB+MMoGKyxlZ1ZwWNm5L9sB13Xq4Z/dSmpB3k8clnvCGkhNdirDCMZIU5S
VRPSAQTq/JJHgMqhHGlfAujcSblJLiWC35sBspRQuyY0wkpnbkvdMd65GNL3F8Zm
OoBKK0bK2PDYKIL9agEtxlnVTJBO9sZtSO0g1HbB0oBL1q/EZzyyJXFXilmIrbEu
P6M56UjcAKMHWg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:59 2026 by rpki-client