Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File:                     Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier:          iuOkesnQKckyprQLZSAL9PKwM0wQenLl2VFs4UWFX4Q=
Subject key identifier:   C6:03:B7:1F:13:1D:1F:CA:DE:76:09:09:E3:1B:CC:B3:5E:35:04:F7
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer:       /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial:       019E1D59237E0A8B3EBD40D64D2581E5BEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number:          1515
Signing time:             Tue 12 May 2026 18:00:41 +0000
Manifest this update:     Tue 12 May 2026 18:00:41 +0000
Manifest next update:     Wed 13 May 2026 18:00:41 +0000
Files and hashes:         1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: XkFB4gx8BfWrfQJbQWBsqsQBZrV6tdF53dHMNUZx41k=)
                          2: R-APQP12CW3pOeqttqzgTwcLAV8.roa (hash: vRFhqSINrQiolsddF1f5Cpv/fz0FXcpiwczjaOz8Gbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:23:7e:0a:8b:3e:bd:40:d6:4d:25:81:e5:be:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
        Validity
            Not Before: May 12 18:00:41 2026 GMT
            Not After : May 13 18:00:41 2026 GMT
        Subject: CN=c603b71f131d1fcade760909e31bccb35e3504f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:30:0a:d5:55:63:1e:b1:8b:2b:48:f0:cf:
                    3f:df:6d:85:aa:7c:b3:85:fd:bc:fb:0f:04:e7:9d:
                    fc:7b:98:3a:65:7c:99:34:be:d3:b7:83:75:a9:9e:
                    34:e1:2c:69:f6:88:62:52:7d:47:2f:fd:f9:fe:ff:
                    46:54:92:52:42:e8:31:29:b6:b0:c2:4a:28:56:0e:
                    fd:f2:c6:8c:3b:2d:27:b7:aa:d7:60:ed:0f:4a:3f:
                    fd:02:02:05:15:df:07:d5:29:f6:76:d5:e1:53:4a:
                    1e:bb:9d:1f:0a:31:6d:ff:8d:6a:6a:12:90:71:99:
                    7e:93:fe:ed:0c:e0:6c:11:f3:fa:1a:a2:de:a4:3c:
                    f8:19:5e:6a:a2:da:c4:30:c0:85:dc:26:b5:ca:18:
                    c5:fc:4d:41:70:74:62:97:e3:d5:21:c9:4e:e3:d5:
                    96:07:35:13:12:7c:fc:90:1d:7e:c1:90:00:38:48:
                    35:0d:97:fa:2d:00:02:41:ee:bc:ea:41:52:08:d0:
                    a9:bf:e7:5a:00:8b:fd:0e:e0:2a:fe:71:50:22:f6:
                    a9:7f:54:55:b3:bb:99:4e:bf:76:52:20:ae:73:bd:
                    19:7c:09:76:74:f7:3e:d7:cc:25:4d:65:1f:ba:37:
                    23:ec:e5:f8:4e:47:8f:c8:da:fa:0c:22:a6:b3:82:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:B7:1F:13:1D:1F:CA:DE:76:09:09:E3:1B:CC:B3:5E:35:04:F7
            X509v3 Authority Key Identifier:
                keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:ac:7c:07:a5:44:15:2a:75:e5:5e:92:b9:35:ee:a7:31:
         41:85:89:eb:4b:86:19:e6:b4:f8:74:9c:c8:e8:5f:68:a4:e1:
         f1:9b:dd:e7:d9:6d:c5:41:04:9f:5b:ef:3f:7c:4e:27:a1:de:
         71:ce:e0:d3:32:50:72:7d:26:f1:63:bf:ad:53:08:2e:46:93:
         b7:4e:d7:65:16:c4:1c:7d:21:a1:16:91:50:24:b5:be:ab:45:
         ac:7d:e9:a3:14:5b:a3:7f:d7:17:e3:0f:05:3e:b5:31:ef:16:
         c4:75:f7:00:f0:35:f9:96:7c:8c:ee:05:ab:b0:48:9a:fb:85:
         dd:51:53:81:8c:9a:9c:55:da:3b:29:b4:9c:67:f1:5b:e0:ba:
         55:c4:ea:27:33:01:f5:1e:8c:d4:e9:d6:8f:8e:4c:71:c1:04:
         09:61:54:30:c9:3e:5f:a5:d1:30:e3:93:e6:c9:7d:82:37:93:
         30:c4:3e:63:51:08:6e:28:93:67:ed:7f:5d:b3:c2:b2:cb:59:
         4f:8d:d1:3f:fa:ab:3b:7a:fc:4f:cf:9e:3f:1a:e1:4f:2c:ae:
         6f:03:58:bb:4d:ec:1b:a9:58:8d:c2:c0:5d:50:8c:ab:90:71:
         de:81:b0:17:17:0d:39:3f:7f:11:46:34:30:26:ae:94:0d:42:
         8a:f2:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:18 2026 by rpki-client