Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          ORKR2Y0eMMI0EHf2XQT/tOhu518Km+jgap2MsY4PLZU=
Subject key identifier:   11:5A:95:63:B4:60:5C:CF:58:9F:F5:3B:88:C5:DB:B8:5A:AC:5A:36
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       019ED31870EC3E53027006197EDA09D3D602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          187E
Signing time:             Wed 17 Jun 2026 01:00:54 +0000
Manifest this update:     Wed 17 Jun 2026 01:00:54 +0000
Manifest next update:     Thu 18 Jun 2026 01:00:54 +0000
Files and hashes:         1: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
                          2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=)
                          3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
                          4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
                          5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
                          6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
                          7: EfWuRA4xuDAvflS5tv0JhzSei28.roa (hash: SAzMnIbvWnao7wpDdbRqrdkwbQWMAO6Jj0G8Oc5qkbI=)
                          8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
                          9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
                          10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
                          11: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
                          12: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
                          13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: JAexQqS3Az5icoNqdX5eqvSXSxv7nrKMq/eMHyfKdo0=)
                          14: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
                          15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
                          16: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
                          17: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
                          18: u_DOEx2r_J3BkCywvogfeZZkNpA.roa (hash: oEGf5LtDawHz/AlzF45DhMZpwO1j9J3oHupUypQDU5Q=)
                          19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
                          20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:70:ec:3e:53:02:70:06:19:7e:da:09:d3:d6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Jun 17 01:00:54 2026 GMT
            Not After : Jun 18 01:00:54 2026 GMT
        Subject: CN=115a9563b4605ccf589ff53b88c5dbb85aac5a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:33:de:28:df:e7:af:97:20:3f:20:6c:8e:e3:
                    06:d2:92:3a:98:13:75:70:83:95:e1:d7:32:d4:0d:
                    8c:8c:4c:76:3c:22:7a:04:0d:8c:d0:72:35:ae:54:
                    0c:23:13:49:a7:ed:a7:87:67:7b:26:c6:ff:33:96:
                    43:17:1e:4e:6d:c7:65:86:47:f0:f8:e9:19:84:b1:
                    9c:62:ef:c7:82:8f:ad:96:43:b4:02:a1:f9:5d:88:
                    41:55:59:ab:fa:db:6d:2c:a6:96:15:44:0b:8f:e5:
                    5a:df:e6:40:fb:c0:40:22:c6:1b:5d:0c:2b:b9:39:
                    46:81:37:69:4c:11:41:a0:46:1b:d2:04:06:d0:e4:
                    91:93:1f:40:29:1b:83:19:8d:00:f7:09:15:7a:e6:
                    74:55:12:cf:f4:30:b5:46:85:f2:d1:73:9a:26:36:
                    55:f0:ee:52:2a:72:63:53:11:d0:32:b4:60:f7:ed:
                    6b:3e:2d:9f:3d:d7:4b:e4:cb:95:e3:26:fb:9d:e0:
                    1a:ec:07:ff:10:41:8b:5f:10:f6:a9:03:b4:91:0d:
                    c6:88:b4:91:b4:20:df:b6:57:fe:56:eb:72:29:76:
                    5b:49:88:d6:93:df:99:0b:f9:05:cf:bb:15:0c:2b:
                    da:26:9f:92:00:61:ee:bc:14:f8:bf:c0:2b:a1:b7:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5A:95:63:B4:60:5C:CF:58:9F:F5:3B:88:C5:DB:B8:5A:AC:5A:36
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:70:be:74:56:23:d1:56:8e:0b:a8:23:5c:73:2d:f5:76:
         6a:d3:9e:4a:02:7c:cf:ff:02:a9:e3:56:38:e4:b6:42:60:53:
         b0:e5:35:70:96:df:72:34:fa:f1:df:d6:3c:c8:e3:17:a3:85:
         ec:bd:ad:f5:0f:72:36:0c:8e:fb:f0:8b:6b:c7:df:cb:ce:60:
         c4:dc:1e:c3:36:dc:00:fd:e3:db:d8:24:89:4f:71:8d:3a:4f:
         63:c6:3a:0b:8e:ca:36:ff:e7:49:ff:3a:80:8a:f3:11:f5:ff:
         98:a3:51:5b:55:3d:e2:f1:e7:ec:f9:fe:d7:8b:ad:dc:76:df:
         ed:db:92:90:08:9d:f0:84:03:62:67:7d:f1:c1:23:63:14:8c:
         a7:2c:b5:92:f4:1c:82:d5:86:24:46:3b:91:c3:21:a8:58:16:
         77:f6:bb:8a:4a:f5:22:9a:3c:9f:9d:d4:8c:55:3a:0a:bb:97:
         13:17:b3:fc:92:b0:66:0f:d9:4d:83:f9:ae:17:a8:e0:51:9f:
         46:90:4e:fd:e6:cd:db:51:3f:c1:01:3d:da:db:68:a2:0c:b9:
         e6:d4:2a:c4:aa:06:a9:6d:c8:54:39:35:d5:1c:8b:06:81:e8:
         47:d0:f5:8f:12:1c:ac:d1:6e:37:82:d2:44:f5:0e:bb:2e:c6:
         d8:d1:36:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGHDsPlMCcAYZftoJ09YCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwNjE3MDEwMDU0WhcNMjYwNjE4MDEwMDU0WjAzMTEwLwYDVQQD
EygxMTVhOTU2M2I0NjA1Y2NmNTg5ZmY1M2I4OGM1ZGJiODVhYWM1YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DPeKN/nr5cgPyBsjuMG0pI6mBN1
cIOV4dcy1A2MjEx2PCJ6BA2M0HI1rlQMIxNJp+2nh2d7Jsb/M5ZDFx5Obcdlhkfw
+OkZhLGcYu/Hgo+tlkO0AqH5XYhBVVmr+tttLKaWFUQLj+Va3+ZA+8BAIsYbXQwr
uTlGgTdpTBFBoEYb0gQG0OSRkx9AKRuDGY0A9wkVeuZ0VRLP9DC1RoXy0XOaJjZV
8O5SKnJjUxHQMrRg9+1rPi2fPddL5MuV4yb7neAa7Af/EEGLXxD2qQO0kQ3GiLSR
tCDftlf+VutyKXZbSYjWk9+ZC/kFz7sVDCvaJp+SAGHuvBT4v8ArobedjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFalWO0YFzPWJ/1O4jF27harFo2MB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqlwvnRW
I9FWjguoI1xzLfV2atOeSgJ8z/8CqeNWOOS2QmBTsOU1cJbfcjT68d/WPMjjF6OF
7L2t9Q9yNgyO+/CLa8ffy85gxNwewzbcAP3j29gkiU9xjTpPY8Y6C47KNv/nSf86
gIrzEfX/mKNRW1U94vHn7Pn+14ut3Hbf7duSkAid8IQDYmd98cEjYxSMpyy1kvQc
gtWGJEY7kcMhqFgWd/a7ikr1Ipo8n53UjFU6CruXExez/JKwZg/ZTYP5rheo4FGf
RpBO/ebN21E/wQE92ttoogy55tQqxKoGqW3IVDk11RyLBoHoR9D1jxIcrNFuN4LS
RPUOuy7G2NE26A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:56:14 2026 by rpki-client