Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          MKfR7Pj6eytgkkrgFjGBPIkYgEhtnebcfPo4/28FJ0c=
Subject key identifier:   16:CB:9B:50:9F:2F:59:E0:AD:0C:9C:13:76:D9:FD:C1:2D:EE:77:68
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       019E1F7F0D33701BFF58BE45523A629D2347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:01:20 +0000
Manifest this update:     Wed 13 May 2026 04:01:20 +0000
Manifest next update:     Thu 14 May 2026 04:01:20 +0000
Files and hashes:         1: STaAwjJw5o5YD77UFMiE3P3OF-8.roa (hash: ZyDnnvOoabqOZyAYi7oZ+XdKWhqE0mG6Qq6YUwDEsw0=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: 85livTUbArqa6cp/EqJHKT/0+bW/21J/RBOXolP/qFM=)
                          3: bscFx-8WZDo1BLtY9Qu-MWUUme0.roa (hash: +4tdj917MYxkU3jVhML6xKHXxs+Te1nlf+Ukm7WotRQ=)
                          4: s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa (hash: DVgyuxaELvhEOBhDUYXg4JM856u4ROpCMZfu6veKFDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:0d:33:70:1b:ff:58:be:45:52:3a:62:9d:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: May 13 04:01:20 2026 GMT
            Not After : May 14 04:01:20 2026 GMT
        Subject: CN=16cb9b509f2f59e0ad0c9c1376d9fdc12dee7768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:00:0b:e3:0a:10:1a:a8:eb:f2:b0:81:3b:
                    f5:86:b0:64:52:f3:8b:0e:97:84:e3:c8:cb:92:91:
                    1e:9b:c8:d8:1c:28:2e:f3:f8:31:b8:bf:8c:5b:ef:
                    ca:a6:17:c7:54:c8:65:9b:8d:2f:cb:27:59:ae:0b:
                    38:a0:1d:1e:52:bd:18:4b:9b:e3:8f:cc:05:2a:68:
                    57:f8:b9:f7:b8:80:92:16:50:83:1e:5d:36:7e:85:
                    68:39:96:c4:25:cc:ad:62:df:30:e1:e4:fe:c8:1d:
                    91:da:68:52:95:9e:6e:c9:29:20:91:da:4f:1b:28:
                    99:58:66:b8:1d:b3:8f:9e:bb:a5:63:43:f1:32:4d:
                    12:6a:f4:9f:6a:da:c6:38:54:00:99:b9:d5:73:a1:
                    f1:04:bd:cb:5c:b7:09:11:a2:17:53:e1:79:a5:da:
                    9b:ac:4c:4a:2e:dc:31:44:3f:46:42:67:49:21:6d:
                    6b:c1:43:45:ee:ea:a5:6a:16:d9:60:27:57:ac:27:
                    8a:bc:73:f1:f0:ae:58:6d:4b:08:1c:2c:9c:c1:db:
                    0f:48:6d:9a:b4:69:76:de:52:e8:f5:1f:3e:78:a0:
                    ec:91:4f:9e:c9:2a:f1:09:25:f8:42:ae:a6:1d:6f:
                    59:28:f1:02:73:4d:ba:d9:05:59:e2:30:10:1a:2e:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:9B:50:9F:2F:59:E0:AD:0C:9C:13:76:D9:FD:C1:2D:EE:77:68
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:49:23:6d:8d:1a:d9:74:92:eb:06:e5:bb:04:ee:bc:e5:22:
         64:a2:a1:32:02:68:04:c8:be:c1:c1:d8:87:de:29:e9:2b:a0:
         8a:e2:e9:aa:d1:d8:92:c0:c2:12:71:ad:88:f2:7e:0d:22:08:
         0a:5c:c2:79:81:95:c0:70:ea:4f:4f:2a:02:99:f5:5f:9d:93:
         6f:2a:2f:69:95:1c:e6:7d:6a:bf:e3:c6:0e:3c:58:67:8f:6a:
         b0:b5:e7:48:33:6d:3b:10:45:86:45:8a:6b:5c:e8:7a:ee:1a:
         64:ea:33:70:c7:e8:d7:a4:ab:24:31:b4:90:e9:0e:0c:25:97:
         88:91:3a:9a:63:0f:55:b2:7d:32:62:7f:03:03:5e:43:24:e3:
         34:a7:c6:66:00:f5:a0:e7:26:13:2f:3b:81:cf:f2:37:5c:82:
         bb:d4:3c:49:06:28:2b:ac:28:20:b7:77:d9:43:d2:8f:96:29:
         83:4b:fc:07:39:77:c2:ab:5a:57:61:4f:a9:92:8f:2f:7a:b1:
         17:df:18:65:e0:d5:40:97:d7:3b:3e:c1:42:9a:27:95:51:b2:
         d0:8d:aa:92:74:0f:d6:93:dc:73:c1:99:50:77:23:b4:d5:34:
         7d:52:e8:cc:1d:95:3d:4b:a7:21:e8:22:6d:c6:a0:f3:d1:46:
         f8:82:05:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffw0zcBv/WL5FUjpinSNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjYwNTEzMDQwMTIwWhcNMjYwNTE0MDQwMTIwWjAzMTEwLwYDVQQD
EygxNmNiOWI1MDlmMmY1OWUwYWQwYzljMTM3NmQ5ZmRjMTJkZWU3NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq4AC+MKEBqo6/KwgTv1hrBkUvOL
DpeE48jLkpEem8jYHCgu8/gxuL+MW+/KphfHVMhlm40vyydZrgs4oB0eUr0YS5vj
j8wFKmhX+Ln3uICSFlCDHl02foVoOZbEJcytYt8w4eT+yB2R2mhSlZ5uySkgkdpP
GyiZWGa4HbOPnrulY0PxMk0SavSfatrGOFQAmbnVc6HxBL3LXLcJEaIXU+F5pdqb
rExKLtwxRD9GQmdJIW1rwUNF7uqlahbZYCdXrCeKvHPx8K5YbUsIHCycwdsPSG2a
tGl23lLo9R8+eKDskU+eySrxCSX4Qq6mHW9ZKPECc0262QVZ4jAQGi6wVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbLm1CfL1ngrQycE3bZ/cEt7ndoMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUkjbY0a
2XSS6wbluwTuvOUiZKKhMgJoBMi+wcHYh94p6SugiuLpqtHYksDCEnGtiPJ+DSII
ClzCeYGVwHDqT08qApn1X52TbyovaZUc5n1qv+PGDjxYZ49qsLXnSDNtOxBFhkWK
a1zoeu4aZOozcMfo16SrJDG0kOkODCWXiJE6mmMPVbJ9MmJ/AwNeQyTjNKfGZgD1
oOcmEy87gc/yN1yCu9Q8SQYoK6woILd32UPSj5Ypg0v8Bzl3wqtaV2FPqZKPL3qx
F98YZeDVQJfXOz7BQponlVGy0I2qknQP1pPcc8GZUHcjtNU0fVLozB2VPUunIegi
bcag89FG+IIFYw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:26 2026 by rpki-client