Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File:                     6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier:          sfCwn0xIQLWy4Y/byM97u2gFE/aS4XDYzW/o1PyVlBc=
Subject key identifier:   9C:DC:35:8A:E3:AE:64:2F:47:A3:5D:2C:A3:EA:18:D2:48:95:BE:8A
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer:       /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial:       019E1D5993685C09D63E91955DEE1A64517A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number:          BD
Signing time:             Tue 12 May 2026 18:01:10 +0000
Manifest this update:     Tue 12 May 2026 18:01:10 +0000
Manifest next update:     Wed 13 May 2026 18:01:10 +0000
Files and hashes:         1: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: fA9LPFYP91RcQ8FXrfaFUNsirlnatAJahbmmDSxO+Rw=)
                          2: k8zQtdqeD4eCbj4bxGVWhtUSVqQ.roa (hash: mGgxLJKpdU4bJS/C0UsU5pVevvLL/1XTeMzy2EPtfmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:93:68:5c:09:d6:3e:91:95:5d:ee:1a:64:51:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
        Validity
            Not Before: May 12 18:01:10 2026 GMT
            Not After : May 13 18:01:10 2026 GMT
        Subject: CN=9cdc358ae3ae642f47a35d2ca3ea18d24895be8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:3a:cb:e2:26:65:a5:fb:3c:a8:67:e4:67:
                    82:52:54:df:99:d8:f5:43:a1:a0:04:1d:ef:dc:91:
                    d9:14:c9:8a:f8:ea:ee:30:ec:e4:dc:c5:fe:2a:8f:
                    a9:1b:ee:11:86:bb:23:aa:63:c4:87:97:17:8a:8d:
                    95:9d:1c:b0:c3:8c:91:90:d9:32:45:d3:c4:b2:4b:
                    de:11:54:08:23:34:ef:5d:e6:1a:c7:88:49:90:e2:
                    78:0e:08:2f:c4:6d:0a:4b:5d:ad:ab:6c:e9:ea:47:
                    f4:d2:ec:5a:31:4b:0a:fa:bb:04:da:94:00:cf:21:
                    23:e6:ff:a6:94:ea:b1:cf:42:8d:9f:2f:d0:2f:46:
                    a5:33:3b:99:b2:a4:44:7a:f0:79:6a:5e:13:6c:c3:
                    10:e7:43:0d:5c:a9:0e:93:7a:0c:42:2d:eb:24:29:
                    3d:c0:3e:68:55:8a:00:61:6b:b4:08:f5:7b:c1:75:
                    48:d0:fa:7d:b3:92:3a:6f:1b:3b:d2:9d:24:e2:bb:
                    17:0f:92:34:49:dc:1d:52:4f:15:95:1b:65:b2:26:
                    07:cc:c0:39:d9:9b:23:25:27:36:b2:76:70:79:0a:
                    d3:02:fe:88:c6:c1:d7:c2:14:a9:41:d4:a5:d7:fb:
                    97:d1:1f:d1:b8:69:2c:13:9d:d4:96:db:2e:fd:86:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:35:8A:E3:AE:64:2F:47:A3:5D:2C:A3:EA:18:D2:48:95:BE:8A
            X509v3 Authority Key Identifier:
                keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:35:a3:a4:f4:a9:db:d6:ea:e8:20:92:1f:1a:d7:81:16:c1:
         14:30:2d:9a:21:ca:2a:cf:2a:1b:80:de:5e:25:63:13:1b:f8:
         8d:1a:e7:00:00:00:bf:04:8e:f1:eb:68:7b:ff:24:2d:aa:63:
         e2:56:98:28:84:21:f8:9b:ac:a7:28:6a:46:bb:17:02:84:94:
         d3:25:34:89:45:0f:9e:4c:69:cb:38:10:9f:f3:f7:ac:44:40:
         4d:af:db:19:da:3e:b8:db:f6:cd:79:a6:2f:ee:37:9e:e6:29:
         50:30:63:ee:30:e6:02:a2:ad:31:60:e8:7c:32:2d:cf:5e:6f:
         36:17:ea:64:98:6a:06:98:05:86:19:f8:bf:a9:bf:fe:59:32:
         69:75:2b:5c:22:34:d6:4c:cf:db:df:38:ef:39:4c:7b:72:1b:
         ad:fc:b1:89:49:35:85:73:00:de:0b:a0:4b:b6:cd:17:d3:f4:
         49:9d:13:5d:be:67:db:35:21:de:2b:04:e0:e6:5e:0a:3a:8a:
         43:86:50:e9:24:24:cb:03:01:5b:5a:a9:3b:a8:18:75:34:fe:
         1b:87:c8:67:1c:da:53:6a:83:ab:6f:16:db:7b:f8:3e:45:5f:
         d7:98:8f:47:4a:99:0a:1c:fc:8d:30:a9:d9:61:74:f3:45:03:
         e1:c7:16:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWZNoXAnWPpGVXe4aZFF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzk3MjBiYmY0NTA2MTEwZjkwM2QzNWVkMTI0OWJkNDkx
ZWE4YmIwHhcNMjYwNTEyMTgwMTEwWhcNMjYwNTEzMTgwMTEwWjAzMTEwLwYDVQQD
Eyg5Y2RjMzU4YWUzYWU2NDJmNDdhMzVkMmNhM2VhMThkMjQ4OTViZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzQ6y+ImZaX7PKhn5GeCUlTfmdj1
Q6GgBB3v3JHZFMmK+OruMOzk3MX+Ko+pG+4RhrsjqmPEh5cXio2VnRyww4yRkNky
RdPEskveEVQIIzTvXeYax4hJkOJ4DggvxG0KS12tq2zp6kf00uxaMUsK+rsE2pQA
zyEj5v+mlOqxz0KNny/QL0alMzuZsqREevB5al4TbMMQ50MNXKkOk3oMQi3rJCk9
wD5oVYoAYWu0CPV7wXVI0Pp9s5I6bxs70p0k4rsXD5I0SdwdUk8VlRtlsiYHzMA5
2ZsjJSc2snZweQrTAv6IxsHXwhSpQdSl1/uX0R/RuGksE53Ultsu/YZJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzcNYrjrmQvR6NdLKPqGNJIlb6KMB8GA1UdIwQY
MBaAFOs5cgu/RQYRD5A9Ne0SSb1JHqi7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMt
Yjg4N2UzMjIyMjllLzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMtYjg4N2UzMjIyMjll
LzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDWjpPSp
29bq6CCSHxrXgRbBFDAtmiHKKs8qG4DeXiVjExv4jRrnAAAAvwSO8etoe/8kLapj
4laYKIQh+JuspyhqRrsXAoSU0yU0iUUPnkxpyzgQn/P3rERATa/bGdo+uNv2zXmm
L+43nuYpUDBj7jDmAqKtMWDofDItz15vNhfqZJhqBpgFhhn4v6m//lkyaXUrXCI0
1kzP29847zlMe3IbrfyxiUk1hXMA3gugS7bNF9P0SZ0TXb5n2zUh3isE4OZeCjqK
Q4ZQ6SQkywMBW1qpO6gYdTT+G4fIZxzaU2qDq28W23v4PkVf15iPR0qZChz8jTCp
2WF080UD4ccWXw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:22 2026 by rpki-client