Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          wNYELblvueWXG+qa0yoPl0RncSGLc+0Sm9a8iDrWTF0=
Subject key identifier:   46:0C:90:C3:02:A4:49:04:2C:19:B9:14:75:A3:B7:77:AD:0E:37:07
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       019E1D2255F9472913C871D54B123688E6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          05FF
Signing time:             Tue 12 May 2026 17:00:49 +0000
Manifest this update:     Tue 12 May 2026 17:00:49 +0000
Manifest next update:     Wed 13 May 2026 17:00:49 +0000
Files and hashes:         1: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (hash: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ=)
                          2: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: qtfTgn1ATCVt0mgjLf5Iqh+56NmxBjiD8D6V/BAk52A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:55:f9:47:29:13:c8:71:d5:4b:12:36:88:e6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: May 12 17:00:49 2026 GMT
            Not After : May 13 17:00:49 2026 GMT
        Subject: CN=460c90c302a449042c19b91475a3b777ad0e3707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:45:7c:a8:7e:39:c0:12:29:ae:82:b0:6f:
                    a0:1b:68:bd:3f:7f:8c:93:e0:29:79:83:87:7d:4a:
                    33:42:5c:a7:c2:11:fa:e6:ee:90:37:2f:59:8c:15:
                    b2:e8:da:2b:5e:55:fa:d6:d9:5c:d2:af:a9:3d:07:
                    80:9c:1d:58:eb:85:52:60:71:b0:02:9f:d0:2f:e3:
                    4c:1c:e4:ce:dc:06:8a:01:d4:8a:39:99:63:19:db:
                    b4:da:3f:67:a8:fd:bc:57:d3:51:8f:11:c7:38:d2:
                    12:07:04:67:bc:be:a8:13:97:eb:45:cd:d1:56:33:
                    c7:a7:46:7b:04:27:a5:a2:9d:c2:07:78:34:6d:4a:
                    ee:da:36:e1:ec:35:ec:4b:f3:50:34:2f:e4:36:16:
                    b1:42:cc:da:cb:59:3e:01:e7:71:a9:72:0c:09:b4:
                    4b:8b:a2:94:e9:19:84:1c:fc:c3:dc:80:1e:23:ce:
                    92:8b:38:f9:9c:9b:f9:31:3e:21:a7:ff:8e:f7:f9:
                    98:5c:1a:48:e9:0e:9e:f9:69:19:f9:1b:bb:28:6f:
                    17:56:9a:1e:23:e8:35:dc:57:a7:46:33:dd:10:3a:
                    3e:36:97:fa:0f:04:3e:06:67:97:9d:bd:94:26:b3:
                    dc:82:e6:a2:80:ab:61:2b:d1:b7:26:ab:ae:ac:a3:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:90:C3:02:A4:49:04:2C:19:B9:14:75:A3:B7:77:AD:0E:37:07
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:42:b0:64:c3:a9:86:6e:58:8d:6a:7d:b2:94:02:15:b9:
         f9:7d:22:36:d2:70:57:c5:87:7b:05:5b:46:c9:a9:24:38:06:
         8b:a2:7d:3d:ce:60:af:97:64:50:db:87:10:20:cb:27:e4:bc:
         31:b8:0c:4d:29:34:39:0e:c5:a2:c3:e0:94:b2:8c:6b:60:7b:
         59:cb:de:b2:5d:c2:8e:f0:92:d5:c0:2a:b3:d0:1f:0a:ea:d2:
         c8:56:61:2b:41:0d:2d:17:91:48:2a:ac:97:4c:4a:46:4b:cb:
         c6:17:81:e8:a4:42:32:da:56:c2:17:2b:42:9c:ff:b4:e9:e6:
         db:db:b0:9a:c4:91:75:e2:9c:60:b3:e5:b3:ea:f6:fb:be:9e:
         52:65:32:97:dd:c1:c6:68:95:1c:cb:74:64:20:73:fa:25:39:
         69:36:24:30:c6:c0:28:22:c7:4e:5c:be:ef:ae:4f:6f:ef:aa:
         b5:30:8d:31:c7:d3:1a:35:6e:85:9b:24:75:4f:13:e0:de:75:
         ce:0d:a1:94:0f:33:33:58:4e:4f:76:f3:21:c7:8b:d2:71:3c:
         37:12:5e:d2:08:50:73:da:98:e9:69:c9:c8:fe:9d:53:02:f7:
         10:06:ef:86:f0:c6:33:62:0e:25:84:c3:0d:52:a4:06:64:e9:
         db:a6:7d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIlX5RykTyHHVSxI2iObRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw
Y2YwNGEwHhcNMjYwNTEyMTcwMDQ5WhcNMjYwNTEzMTcwMDQ5WjAzMTEwLwYDVQQD
Eyg0NjBjOTBjMzAyYTQ0OTA0MmMxOWI5MTQ3NWEzYjc3N2FkMGUzNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFdFfKh+OcASKa6CsG+gG2i9P3+M
k+ApeYOHfUozQlynwhH65u6QNy9ZjBWy6NorXlX61tlc0q+pPQeAnB1Y64VSYHGw
Ap/QL+NMHOTO3AaKAdSKOZljGdu02j9nqP28V9NRjxHHONISBwRnvL6oE5frRc3R
VjPHp0Z7BCelop3CB3g0bUru2jbh7DXsS/NQNC/kNhaxQszay1k+AedxqXIMCbRL
i6KU6RmEHPzD3IAeI86Sizj5nJv5MT4hp/+O9/mYXBpI6Q6e+WkZ+Ru7KG8XVpoe
I+g13FenRjPdEDo+Npf6DwQ+BmeXnb2UJrPcguaigKthK9G3JquurKPYDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYMkMMCpEkELBm5FHWjt3etDjcHMB8GA1UdIwQY
MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt
Njk1ZDgyOTk5MjZlLzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl
LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLBCsGTD
qYZuWI1qfbKUAhW5+X0iNtJwV8WHewVbRsmpJDgGi6J9Pc5gr5dkUNuHECDLJ+S8
MbgMTSk0OQ7FosPglLKMa2B7Wcvesl3CjvCS1cAqs9AfCurSyFZhK0ENLReRSCqs
l0xKRkvLxheB6KRCMtpWwhcrQpz/tOnm29uwmsSRdeKcYLPls+r2+76eUmUyl93B
xmiVHMt0ZCBz+iU5aTYkMMbAKCLHTly+765Pb++qtTCNMcfTGjVuhZskdU8T4N51
zg2hlA8zM1hOT3bzIceL0nE8NxJe0ghQc9qY6WnJyP6dUwL3EAbvhvDGM2IOJYTD
DVKkBmTp26Z9QQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:16 2026 by rpki-client