Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File:                     bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier:          8HHV/QVCLiOQG32CULTTck2W1XgZvxdtHW6i9CnsdMM=
Subject key identifier:   D0:2E:5B:4D:5D:5E:93:B6:D8:1E:4E:65:4A:BD:DC:82:D1:79:AE:3A
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer:       /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial:       019ED34F5965A89817996B98C8766F631E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number:          10D6
Signing time:             Wed 17 Jun 2026 02:00:53 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:53 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:53 +0000
Files and hashes:         1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: 8zWl2RlNa1wm3xn8zw945bGKPlMJZB6Adne7qKmBojA=)
                          2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:59:65:a8:98:17:99:6b:98:c8:76:6f:63:1e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
        Validity
            Not Before: Jun 17 02:00:53 2026 GMT
            Not After : Jun 18 02:00:53 2026 GMT
        Subject: CN=d02e5b4d5d5e93b6d81e4e654abddc82d179ae3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:9c:46:3b:05:78:1e:af:15:82:90:48:c8:
                    4b:6e:cb:c0:39:56:6e:1f:a4:25:e0:c5:df:9e:fe:
                    dd:bc:a5:91:94:d9:dc:5e:86:a7:01:25:73:26:0d:
                    7e:de:ce:84:59:d7:bf:9d:1b:48:25:d1:63:22:0f:
                    72:b9:cd:ac:fb:e3:b7:7e:e1:d5:0b:c5:c7:95:4d:
                    0f:d5:f3:d7:cc:4d:85:6f:e0:56:a3:b8:83:3a:77:
                    5a:45:cb:38:02:47:86:c5:0d:35:32:b4:fb:68:6f:
                    5f:47:3b:51:89:6c:9d:75:da:82:1f:43:27:ba:7f:
                    84:48:31:69:5d:3d:2d:27:3f:90:c0:3a:a2:5b:59:
                    30:a6:82:de:e4:38:1b:9c:96:32:72:14:03:2c:a1:
                    0c:53:f4:02:58:94:22:b0:61:18:b3:77:2f:e6:3a:
                    b2:f0:5c:3a:3e:a9:bc:4d:2c:2c:23:c9:00:60:de:
                    fb:9f:25:86:dd:1e:11:fb:35:ca:05:e6:89:16:b0:
                    4f:d9:52:d5:3d:01:0a:b7:1c:3b:30:fc:86:7d:9f:
                    0d:74:7c:31:c1:cb:94:c9:b8:2c:f9:9d:ab:c0:b7:
                    db:5b:85:f7:d7:a2:e2:aa:91:88:60:18:ac:01:0c:
                    47:61:78:4c:3f:df:a7:a5:71:af:de:64:82:0a:06:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:5B:4D:5D:5E:93:B6:D8:1E:4E:65:4A:BD:DC:82:D1:79:AE:3A
            X509v3 Authority Key Identifier:
                keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:af:35:0a:90:7b:6b:57:6d:16:22:e5:70:c1:f3:58:be:44:
         c6:17:9c:d5:9d:27:54:05:ac:92:fd:e1:88:42:4f:e8:01:15:
         84:ce:34:fe:a0:32:88:d7:96:b0:6a:b3:21:10:56:1b:41:e0:
         3f:8c:c0:56:27:2b:e2:3d:36:4c:3f:2c:85:ef:da:47:fc:79:
         94:87:a0:29:bd:fa:1c:c5:b9:9a:b3:3c:c2:ae:e3:34:83:2d:
         5d:ea:d4:da:3f:e6:08:c6:b5:51:79:85:a7:19:24:31:86:ee:
         77:6d:ad:91:17:f5:0a:b3:a2:51:ee:4a:18:83:a8:df:a9:a4:
         d3:69:29:42:d3:70:80:90:98:f7:e4:e9:c3:b8:91:11:7b:5f:
         bb:c1:26:59:1e:a3:4f:a9:97:96:8a:d4:61:fb:83:25:c1:a7:
         ba:a0:c4:0a:76:64:16:d4:d7:0f:e8:ce:d6:61:d1:56:0b:6d:
         be:07:49:c0:23:57:16:d2:bf:43:53:8c:03:76:ff:4e:71:af:
         24:bc:ee:a0:2d:4d:ee:96:12:fb:ed:86:e3:96:3a:2a:f8:9c:
         e7:25:68:06:59:ee:b6:6c:dc:28:06:b0:0e:df:3a:f1:2b:a6:
         89:90:0d:67:dd:9c:b1:4e:ee:41:5a:ff:f0:00:b7:7d:03:2d:
         3b:3d:57:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT1llqJgXmWuYyHZvYx4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw
YTdmNmUwHhcNMjYwNjE3MDIwMDUzWhcNMjYwNjE4MDIwMDUzWjAzMTEwLwYDVQQD
EyhkMDJlNWI0ZDVkNWU5M2I2ZDgxZTRlNjU0YWJkZGM4MmQxNzlhZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5ScRjsFeB6vFYKQSMhLbsvAOVZu
H6Ql4MXfnv7dvKWRlNncXoanASVzJg1+3s6EWde/nRtIJdFjIg9yuc2s++O3fuHV
C8XHlU0P1fPXzE2Fb+BWo7iDOndaRcs4AkeGxQ01MrT7aG9fRztRiWydddqCH0Mn
un+ESDFpXT0tJz+QwDqiW1kwpoLe5DgbnJYychQDLKEMU/QCWJQisGEYs3cv5jqy
8Fw6Pqm8TSwsI8kAYN77nyWG3R4R+zXKBeaJFrBP2VLVPQEKtxw7MPyGfZ8NdHwx
wcuUybgs+Z2rwLfbW4X316LiqpGIYBisAQxHYXhMP9+npXGv3mSCCgZcvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAuW01dXpO22B5OZUq93ILRea46MB8GA1UdIwQY
MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt
ZTgxMWQ5NDA3ZTdhLzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh
LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM681CpB7
a1dtFiLlcMHzWL5Exhec1Z0nVAWskv3hiEJP6AEVhM40/qAyiNeWsGqzIRBWG0Hg
P4zAVicr4j02TD8she/aR/x5lIegKb36HMW5mrM8wq7jNIMtXerU2j/mCMa1UXmF
pxkkMYbud22tkRf1CrOiUe5KGIOo36mk02kpQtNwgJCY9+Tpw7iREXtfu8EmWR6j
T6mXlorUYfuDJcGnuqDECnZkFtTXD+jO1mHRVgttvgdJwCNXFtK/Q1OMA3b/TnGv
JLzuoC1N7pYS++2G45Y6Kvic5yVoBlnutmzcKAawDt868SumiZANZ92csU7uQVr/
8AC3fQMtOz1XTA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:35:31 2026 by rpki-client