Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File:                     b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier:          ucqLVyytsxZ8cF+r4T70EEnDHS2lO8dEf1ujXBgOGBM=
Subject key identifier:   11:FB:B8:A1:85:14:61:08:50:4B:59:B8:35:A9:29:98:EB:71:59:ED
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer:       /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial:       019D2928E5DEF8ABE1A05022B17BE8A7B7DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 08:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:39 +0000
Files and hashes:         1: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: +04+kNE3xlbry9jDM7X8oC/BvAf71Hai2qFvIrFuNUs=)
                          2: qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa (hash: +/UEoQ8DkmQntw0ZyYufnau70EapjulIrEn1Jx0czaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:e5:de:f8:ab:e1:a0:50:22:b1:7b:e8:a7:b7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
        Validity
            Not Before: Mar 26 08:00:39 2026 GMT
            Not After : Mar 27 08:00:39 2026 GMT
        Subject: CN=11fbb8a185146108504b59b835a92998eb7159ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:f9:ed:1a:92:38:0e:67:1a:e0:dd:d7:5d:
                    04:b0:1b:9b:d9:dd:01:3e:fa:76:65:77:11:e7:71:
                    c7:1c:fa:fc:99:f8:aa:cf:f7:ff:46:f4:c1:1a:26:
                    b3:58:65:55:3f:cc:f8:69:c2:d8:05:db:33:10:9f:
                    94:7c:ea:6c:b9:f2:a7:c1:24:69:4f:a9:a1:0d:ac:
                    da:15:ba:f8:01:dd:ea:5b:08:11:c9:a6:13:88:c7:
                    af:5d:85:41:7e:b7:29:b3:ff:16:57:12:ef:c5:09:
                    09:e9:37:d8:bb:a0:ef:ff:1d:e4:ff:a4:e0:2e:b8:
                    e2:5c:03:bd:e6:ff:6e:54:6e:1e:43:5c:a4:da:91:
                    41:30:12:54:a0:4e:34:9b:eb:a0:63:4d:63:32:68:
                    96:03:5c:16:87:fb:15:51:4f:a5:a6:46:ee:98:0e:
                    7b:83:20:f5:c5:19:9e:6b:2c:d1:58:42:fd:c4:40:
                    76:4b:06:30:e8:d0:12:d2:33:6e:7b:52:ab:54:da:
                    0c:93:a5:11:d6:83:43:c3:d4:f9:ef:fb:d3:73:10:
                    dc:0a:62:0d:7b:bb:a4:e8:11:58:6d:56:2a:43:04:
                    84:d0:ed:9e:52:85:6d:6c:fa:cb:7e:18:9c:66:91:
                    ee:58:6b:9b:d8:4a:e9:83:25:2b:4f:12:09:ae:8d:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:B8:A1:85:14:61:08:50:4B:59:B8:35:A9:29:98:EB:71:59:ED
            X509v3 Authority Key Identifier:
                keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:db:e3:3c:0f:d3:19:27:b6:a5:be:ac:a5:e1:ef:ec:7c:6b:
         4a:ee:c4:4c:2c:2c:ed:eb:c1:89:47:f2:cf:bc:6f:c3:70:62:
         47:9b:c0:cb:9a:5c:1c:40:58:7e:aa:84:93:63:10:64:f4:3a:
         7c:6e:df:c7:7c:fe:69:c1:6e:80:2b:a5:f2:b4:ed:7b:61:a0:
         cd:0c:e4:f1:0f:0c:6b:46:21:28:bd:8c:da:c2:4f:db:b5:a1:
         cd:9c:13:0c:0d:3c:ae:a3:01:23:c9:dd:e8:6b:62:ce:41:6b:
         7e:85:2f:dd:f0:a3:9c:fb:e2:5f:b7:7a:5f:5d:86:7c:3d:0c:
         25:f3:f3:7a:25:9e:1d:e7:72:54:b4:69:da:1a:e4:63:c6:92:
         98:1a:e1:d3:f0:c7:99:84:23:11:45:98:59:8c:7a:d3:e0:7f:
         9e:43:f8:c1:62:15:7d:35:ad:24:e6:ad:22:e5:36:19:5f:98:
         99:f6:72:9f:0b:af:d0:70:b9:77:c6:0f:34:b4:de:ee:a5:fc:
         e8:29:e2:05:b4:88:8f:e6:ab:06:2f:67:37:b7:da:42:95:4c:
         91:bb:97:5a:e5:ed:4d:5c:46:1c:c2:51:2e:16:68:79:79:87:
         93:65:3a:1b:5b:82:59:80:e6:00:3f:f8:b7:08:eb:01:18:71:
         fa:e9:5a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKOXe+KvhoFAisXvop7fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz
ZmIyOGIwHhcNMjYwMzI2MDgwMDM5WhcNMjYwMzI3MDgwMDM5WjAzMTEwLwYDVQQD
EygxMWZiYjhhMTg1MTQ2MTA4NTA0YjU5YjgzNWE5Mjk5OGViNzE1OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWP57RqSOA5nGuDd110EsBub2d0B
Pvp2ZXcR53HHHPr8mfiqz/f/RvTBGiazWGVVP8z4acLYBdszEJ+UfOpsufKnwSRp
T6mhDazaFbr4Ad3qWwgRyaYTiMevXYVBfrcps/8WVxLvxQkJ6TfYu6Dv/x3k/6Tg
LrjiXAO95v9uVG4eQ1yk2pFBMBJUoE40m+ugY01jMmiWA1wWh/sVUU+lpkbumA57
gyD1xRmeayzRWEL9xEB2SwYw6NAS0jNue1KrVNoMk6UR1oNDw9T57/vTcxDcCmIN
e7uk6BFYbVYqQwSE0O2eUoVtbPrLfhicZpHuWGub2ErpgyUrTxIJro2IOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH7uKGFFGEIUEtZuDWpKZjrcVntMB8GA1UdIwQY
MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt
N2Y2NzQ0MmY5ZjMyLzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy
LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdvjPA/T
GSe2pb6speHv7HxrSu7ETCws7evBiUfyz7xvw3BiR5vAy5pcHEBYfqqEk2MQZPQ6
fG7fx3z+acFugCul8rTte2GgzQzk8Q8Ma0YhKL2M2sJP27WhzZwTDA08rqMBI8nd
6GtizkFrfoUv3fCjnPviX7d6X12GfD0MJfPzeiWeHedyVLRp2hrkY8aSmBrh0/DH
mYQjEUWYWYx60+B/nkP4wWIVfTWtJOatIuU2GV+YmfZynwuv0HC5d8YPNLTe7qX8
6CniBbSIj+arBi9nN7faQpVMkbuXWuXtTVxGHMJRLhZoeXmHk2U6G1uCWYDmAD/4
twjrARhx+ulaWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:52 2026 by rpki-client