Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          EFPYWppKjbdc7MQdZPzBDMjtIqE/FD1qojGjGpErG5Q=
Subject key identifier:   7E:D7:9F:AC:A4:89:0A:89:58:D0:D1:DE:26:BE:BA:F5:19:5D:17:F8
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       019DA309E41E6E0BD8C49AD9C09024A1ED34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          0C4A
Signing time:             Sun 19 Apr 2026 00:00:27 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:27 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:27 +0000
Files and hashes:         1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: te5iVixkwAYkCvufLo3/BPCEjicIih9oqhHSIZlQsho=)
                          3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
                          4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:e4:1e:6e:0b:d8:c4:9a:d9:c0:90:24:a1:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: Apr 19 00:00:27 2026 GMT
            Not After : Apr 20 00:00:27 2026 GMT
        Subject: CN=7ed79faca4890a8958d0d1de26bebaf5195d17f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:e0:84:56:98:c3:42:28:b7:87:22:99:af:
                    11:dc:68:b8:0c:5a:9a:a8:a9:00:78:e5:5e:df:69:
                    5f:81:3b:97:d9:14:3a:70:60:a3:4f:c0:78:a6:12:
                    09:ca:fa:56:e8:4a:26:d6:21:bd:2d:5d:a3:1b:15:
                    33:14:6c:48:74:79:a6:25:72:a6:56:37:f5:84:88:
                    b3:9d:1c:45:f0:e1:d1:95:f1:5a:b2:ea:fb:d5:a4:
                    06:d2:dc:92:88:98:56:9c:f4:23:68:18:9e:1c:12:
                    97:73:c2:a9:fc:81:b8:98:dd:f5:3e:90:43:8d:8a:
                    9a:16:a9:63:7a:a2:63:49:ac:c5:d9:70:ec:04:73:
                    76:a9:fc:de:e8:5a:10:be:df:e2:6d:a0:5b:9d:de:
                    ef:96:34:7e:2b:37:1d:2d:3f:30:4c:0a:a6:95:14:
                    2a:eb:3c:87:5e:40:9e:15:3d:ae:c6:1b:e2:19:bc:
                    ba:12:58:dc:e7:78:cb:2a:05:ca:c0:bb:32:4a:0f:
                    a9:84:eb:e1:3f:85:11:20:c1:ef:3f:8d:41:c8:b9:
                    5e:f8:7d:03:15:fa:7d:62:02:26:9c:77:c3:1f:50:
                    cb:b3:14:b4:25:0d:f0:5d:8b:ed:43:cb:50:d6:b7:
                    1e:3d:3b:91:2f:09:37:d6:a7:89:a9:f6:a9:18:e8:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:9F:AC:A4:89:0A:89:58:D0:D1:DE:26:BE:BA:F5:19:5D:17:F8
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:f9:32:8e:a7:24:86:31:8b:27:ee:e1:b4:88:31:2f:04:
         0e:76:8f:f1:9a:02:1f:f8:e6:da:4c:64:92:ac:6c:52:45:52:
         82:a3:d3:1d:b0:1f:32:e8:62:88:8f:80:ea:76:9f:5f:68:88:
         26:2b:3d:82:4c:2b:39:fb:c2:25:d7:f0:f1:e7:a5:99:ba:52:
         62:4b:15:7e:2d:d3:fd:aa:ec:9a:f7:ff:33:1d:e8:4b:ce:08:
         be:d1:09:b8:11:fc:d5:c1:d4:40:f0:49:a5:6f:e4:3a:e5:c4:
         88:52:e9:1f:64:9d:43:75:08:a3:06:10:3b:b4:76:f9:75:e2:
         d9:8c:74:e7:d1:50:ae:72:bb:ea:29:d3:2c:a1:5c:58:26:5d:
         b3:cf:1e:50:fa:6a:dc:62:f9:a8:d2:a4:bb:11:e6:fa:51:2b:
         af:3d:28:04:01:61:b7:e2:e5:0a:a5:03:2a:e9:f0:99:13:59:
         8d:03:97:9e:ea:74:70:2b:a6:b9:ae:38:51:b5:53:f0:4d:01:
         ed:dd:79:04:e6:f0:07:91:74:8b:d3:ca:b1:2e:19:a6:e4:58:
         cb:98:17:67:96:5e:99:55:8f:e5:2a:b4:42:31:64:bb:e8:06:
         7c:db:74:1b:b3:df:9f:05:b0:75:ba:35:4b:0e:f8:36:c6:5a:
         f7:89:ca:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCeQebgvYxJrZwJAkoe00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My
MzgxZTIwHhcNMjYwNDE5MDAwMDI3WhcNMjYwNDIwMDAwMDI3WjAzMTEwLwYDVQQD
Eyg3ZWQ3OWZhY2E0ODkwYTg5NThkMGQxZGUyNmJlYmFmNTE5NWQxN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi/ghFaYw0Iot4cima8R3Gi4DFqa
qKkAeOVe32lfgTuX2RQ6cGCjT8B4phIJyvpW6Eom1iG9LV2jGxUzFGxIdHmmJXKm
Vjf1hIiznRxF8OHRlfFasur71aQG0tySiJhWnPQjaBieHBKXc8Kp/IG4mN31PpBD
jYqaFqljeqJjSazF2XDsBHN2qfze6FoQvt/ibaBbnd7vljR+KzcdLT8wTAqmlRQq
6zyHXkCeFT2uxhviGby6Eljc53jLKgXKwLsySg+phOvhP4URIMHvP41ByLle+H0D
Ffp9YgImnHfDH1DLsxS0JQ3wXYvtQ8tQ1rcePTuRLwk31qeJqfapGOjo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7Xn6ykiQqJWNDR3ia+uvUZXRf4MB8GA1UdIwQY
MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt
Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw
LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFr5Mo6n
JIYxiyfu4bSIMS8EDnaP8ZoCH/jm2kxkkqxsUkVSgqPTHbAfMuhiiI+A6nafX2iI
Jis9gkwrOfvCJdfw8eelmbpSYksVfi3T/arsmvf/Mx3oS84IvtEJuBH81cHUQPBJ
pW/kOuXEiFLpH2SdQ3UIowYQO7R2+XXi2Yx059FQrnK76inTLKFcWCZds88eUPpq
3GL5qNKkuxHm+lErrz0oBAFht+LlCqUDKunwmRNZjQOXnup0cCumua44UbVT8E0B
7d15BObwB5F0i9PKsS4ZpuRYy5gXZ5ZemVWP5Sq0QjFku+gGfNt0G7PfnwWwdbo1
Sw74NsZa94nKsA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:43 2026 by rpki-client