Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File:                     xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier:          1VCFYHgm4oD8Ft0kXH0fAF9X9EV2LsINWHymBNczwO4=
Subject key identifier:   31:9F:1C:AA:ED:1F:95:65:23:1E:6D:86:CD:18:FE:08:2C:64:95:25
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       019E2023F4CC3CDE7086105B9EE525693729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number:          0E6A
Signing time:             Wed 13 May 2026 07:01:27 +0000
Manifest this update:     Wed 13 May 2026 07:01:27 +0000
Manifest next update:     Thu 14 May 2026 07:01:27 +0000
Files and hashes:         1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
                          2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: OYSnIyye04d/JIbv1VAP1lXpC4ig4AXbY6EOdOwVtLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:f4:cc:3c:de:70:86:10:5b:9e:e5:25:69:37:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: May 13 07:01:27 2026 GMT
            Not After : May 14 07:01:27 2026 GMT
        Subject: CN=319f1caaed1f9565231e6d86cd18fe082c649525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:a3:02:f3:a1:34:c2:85:42:f7:23:6a:e1:
                    03:eb:6f:08:ac:c5:17:ce:75:a7:6e:1f:db:80:28:
                    1d:88:af:22:a8:e0:11:ee:d8:15:80:73:55:ff:e8:
                    ab:7e:3c:f9:60:1c:8f:8a:7e:49:f3:20:c2:14:d6:
                    c9:e5:ac:05:c3:6b:1d:f7:9c:ec:93:47:53:c9:8b:
                    81:7c:f3:5a:09:34:56:3a:64:53:27:c5:b1:aa:26:
                    93:fd:5e:e9:3e:b9:f6:db:23:c3:bd:80:6a:59:e7:
                    9c:a2:5c:d3:58:b2:eb:fa:28:b0:e0:c4:08:c0:32:
                    ce:19:79:7b:c2:39:3f:a8:1d:69:cf:e5:d3:af:25:
                    62:2a:c5:56:3b:b5:9a:a7:4b:7f:5e:0e:db:24:1d:
                    db:52:54:ff:89:5b:dd:d3:e5:5f:fb:28:8b:81:ba:
                    16:f2:9e:64:6d:2c:e6:90:11:fa:2b:2e:b3:00:b5:
                    f1:af:62:f2:e4:22:31:ee:84:0c:cf:75:4a:e4:92:
                    fd:c4:82:28:2e:3a:ab:76:d2:8f:40:e5:e6:d4:29:
                    72:b4:a9:dc:c7:47:79:ad:f3:f3:91:95:5e:1d:8b:
                    fa:d6:b4:fe:ea:b5:63:b7:dd:4c:b9:aa:81:3f:71:
                    46:09:7f:cc:42:85:c3:46:91:af:38:89:1d:38:c0:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:1C:AA:ED:1F:95:65:23:1E:6D:86:CD:18:FE:08:2C:64:95:25
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:d7:8a:84:85:92:38:27:14:d3:84:36:b1:05:83:78:fa:
         f8:7c:d2:06:a8:2d:83:50:07:4b:f7:b7:97:07:51:fd:72:9b:
         69:b1:22:bc:ee:d0:f3:a0:8b:ea:32:12:c3:af:f9:a2:3c:b0:
         64:bf:4e:d9:05:32:a9:53:fa:c3:1d:97:95:e0:de:71:2e:c4:
         99:d6:65:c1:95:2d:b8:84:8f:a5:99:02:27:67:bb:a4:17:c8:
         85:80:ec:9e:52:fb:9d:97:94:f9:50:12:eb:92:28:44:e7:84:
         f5:64:9a:87:eb:1e:9e:8d:97:d1:f6:d4:ec:e2:aa:5b:c4:a5:
         7a:53:81:34:a2:72:14:af:10:04:c3:cd:05:25:83:28:00:48:
         3f:90:c8:f7:27:9e:9f:31:e1:2b:27:7f:3f:4d:e9:1e:f5:07:
         86:cb:4d:31:50:5b:6c:6b:ef:09:11:82:8a:fc:8f:59:61:5e:
         7a:42:49:07:ec:06:fd:59:41:91:bb:22:ba:9d:d6:dc:47:ac:
         e9:be:ff:a7:62:91:96:5f:cc:76:e8:75:74:60:cc:40:72:df:
         5b:a5:bb:c3:ce:33:d6:45:7a:de:c6:5a:bd:5f:ee:da:88:d1:
         10:2a:c6:ef:55:02:2d:aa:87:22:d3:fc:ab:78:44:19:5c:e8:
         9c:90:e3:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI/TMPN5whhBbnuUlaTcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3
MDZmODQwHhcNMjYwNTEzMDcwMTI3WhcNMjYwNTE0MDcwMTI3WjAzMTEwLwYDVQQD
EygzMTlmMWNhYWVkMWY5NTY1MjMxZTZkODZjZDE4ZmUwODJjNjQ5NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA096jAvOhNMKFQvcjauED628IrMUX
znWnbh/bgCgdiK8iqOAR7tgVgHNV/+irfjz5YByPin5J8yDCFNbJ5awFw2sd95zs
k0dTyYuBfPNaCTRWOmRTJ8WxqiaT/V7pPrn22yPDvYBqWeecolzTWLLr+iiw4MQI
wDLOGXl7wjk/qB1pz+XTryViKsVWO7Wap0t/Xg7bJB3bUlT/iVvd0+Vf+yiLgboW
8p5kbSzmkBH6Ky6zALXxr2Ly5CIx7oQMz3VK5JL9xIIoLjqrdtKPQOXm1ClytKnc
x0d5rfPzkZVeHYv61rT+6rVjt91MuaqBP3FGCX/MQoXDRpGvOIkdOMAQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGfHKrtH5VlIx5ths0Y/ggsZJUlMB8GA1UdIwQY
MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt
ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4
LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPPXioSF
kjgnFNOENrEFg3j6+HzSBqgtg1AHS/e3lwdR/XKbabEivO7Q86CL6jISw6/5ojyw
ZL9O2QUyqVP6wx2XleDecS7EmdZlwZUtuISPpZkCJ2e7pBfIhYDsnlL7nZeU+VAS
65IoROeE9WSah+seno2X0fbU7OKqW8SlelOBNKJyFK8QBMPNBSWDKABIP5DI9yee
nzHhKyd/P03pHvUHhstNMVBbbGvvCRGCivyPWWFeekJJB+wG/VlBkbsiup3W3Ees
6b7/p2KRll/Mduh1dGDMQHLfW6W7w84z1kV63sZavV/u2ojRECrG71UCLaqHItP8
q3hEGVzonJDjnQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:21:41 2026 by rpki-client