Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          0HOGfP25kGao5B/ZLOAB7CF8wUyDmi0+7RrDRTNgADo=
Subject key identifier:   A4:B7:50:8F:45:7C:04:7A:26:D5:61:0E:6D:A1:C4:6F:E2:56:1D:23
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       019E1EA2D71117283F015800171F103EFD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          10CE
Signing time:             Wed 13 May 2026 00:00:48 +0000
Manifest this update:     Wed 13 May 2026 00:00:48 +0000
Manifest next update:     Thu 14 May 2026 00:00:48 +0000
Files and hashes:         1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: X82HFHqnSV53GRd1iMFwhc03ludU3CQp6g+w3h0/YM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d7:11:17:28:3f:01:58:00:17:1f:10:3e:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: May 13 00:00:48 2026 GMT
            Not After : May 14 00:00:48 2026 GMT
        Subject: CN=a4b7508f457c047a26d5610e6da1c46fe2561d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:82:8a:ed:0e:06:ca:f1:f0:dc:15:83:f0:
                    37:80:df:b6:06:0e:e5:39:98:ca:3d:df:b5:8f:56:
                    79:fc:80:ef:ff:0c:b0:5a:11:94:fc:ef:b7:db:bf:
                    22:31:1e:28:6e:bd:27:1c:3e:16:67:b0:d2:39:08:
                    09:bc:31:97:2e:77:e6:bf:7c:fe:41:ea:52:fd:ec:
                    d5:c1:db:6d:df:1c:90:4c:30:24:68:24:b2:d5:7c:
                    a7:a6:2b:0a:61:f1:47:2e:f5:4a:00:a4:2e:73:7e:
                    91:0b:42:d6:a9:c3:e9:05:c4:62:0e:d7:31:68:c7:
                    a5:70:54:fb:03:1c:fb:01:ab:f6:d1:00:17:c7:4b:
                    74:d9:41:73:25:2d:ee:00:a0:9d:57:b0:e2:a3:1b:
                    73:51:e4:85:54:8c:70:60:a2:4f:ed:b3:b4:5e:49:
                    71:02:d5:80:7d:8c:e6:00:7a:d9:42:93:1a:5c:bc:
                    11:29:0c:a5:17:0e:7b:2b:0a:cf:de:2a:39:e6:1c:
                    f6:80:96:a0:55:b4:d4:ea:ab:11:9d:67:62:64:5f:
                    4c:ac:d7:9d:c6:87:d5:43:67:b2:e1:b9:d7:ab:14:
                    05:7a:a0:da:62:69:54:45:7f:c3:78:11:83:e4:ed:
                    a5:7e:dd:6a:0c:fa:43:80:43:dc:79:ba:e7:22:40:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:50:8F:45:7C:04:7A:26:D5:61:0E:6D:A1:C4:6F:E2:56:1D:23
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:70:fb:d4:33:00:f0:b3:73:12:5b:f2:90:c6:bf:e7:ec:
         f1:d7:0b:0b:a4:7f:61:a2:fb:e2:2d:0c:be:da:ca:4d:44:6f:
         65:44:c7:0b:0b:4e:98:0a:5a:06:f5:cb:f9:12:a0:d4:78:0d:
         0b:20:52:8b:26:9e:9b:14:f3:01:12:cd:6a:c9:2f:8b:1a:98:
         00:81:13:8a:00:a9:dd:d7:8f:1f:ae:80:46:3c:06:3a:ba:1f:
         69:ca:3c:ec:25:11:0a:71:de:d9:ca:d6:4f:66:10:93:90:73:
         91:af:78:f7:90:e3:ae:ee:3e:40:a7:44:34:9e:fa:aa:0d:c9:
         6b:2d:b8:29:67:ea:8e:ed:49:09:77:be:f8:d6:3c:6a:64:65:
         f0:4c:d0:35:01:2c:50:89:dd:4a:28:c9:d9:1c:cf:52:a0:94:
         9e:8c:5d:4e:bf:83:f6:55:33:11:9b:d1:89:ec:a5:94:90:ed:
         0c:0e:23:ed:45:1f:b8:90:22:4c:b3:f2:56:33:80:1b:72:bf:
         9a:88:80:ca:d7:32:25:35:df:49:f0:b3:02:c6:0f:ab:38:27:
         49:48:2b:2c:7c:63:7c:0e:1c:61:7e:21:1d:06:da:08:1f:ad:
         52:7b:bf:41:da:c5:5a:ca:19:1f:25:39:21:50:bb:9f:c1:23:
         bd:ea:ef:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotcRFyg/AVgAFx8QPv2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjYwNTEzMDAwMDQ4WhcNMjYwNTE0MDAwMDQ4WjAzMTEwLwYDVQQD
EyhhNGI3NTA4ZjQ1N2MwNDdhMjZkNTYxMGU2ZGExYzQ2ZmUyNTYxZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfqCiu0OBsrx8NwVg/A3gN+2Bg7l
OZjKPd+1j1Z5/IDv/wywWhGU/O+3278iMR4obr0nHD4WZ7DSOQgJvDGXLnfmv3z+
QepS/ezVwdtt3xyQTDAkaCSy1XynpisKYfFHLvVKAKQuc36RC0LWqcPpBcRiDtcx
aMelcFT7Axz7Aav20QAXx0t02UFzJS3uAKCdV7DioxtzUeSFVIxwYKJP7bO0Xklx
AtWAfYzmAHrZQpMaXLwRKQylFw57KwrP3io55hz2gJagVbTU6qsRnWdiZF9MrNed
xofVQ2ey4bnXqxQFeqDaYmlURX/DeBGD5O2lft1qDPpDgEPcebrnIkD4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS3UI9FfAR6JtVhDm2hxG/iVh0jMB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe9w+9Qz
APCzcxJb8pDGv+fs8dcLC6R/YaL74i0MvtrKTURvZUTHCwtOmApaBvXL+RKg1HgN
CyBSiyaemxTzARLNaskvixqYAIETigCp3dePH66ARjwGOrofaco87CURCnHe2crW
T2YQk5Bzka9495Djru4+QKdENJ76qg3Jay24KWfqju1JCXe++NY8amRl8EzQNQEs
UIndSijJ2RzPUqCUnoxdTr+D9lUzEZvRieyllJDtDA4j7UUfuJAiTLPyVjOAG3K/
moiAytcyJTXfSfCzAsYPqzgnSUgrLHxjfA4cYX4hHQbaCB+tUnu/QdrFWsoZHyU5
IVC7n8EjvervDQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:28 2026 by rpki-client