Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File:                     BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier:          Fc31qe8V6wuexEqCKpWfolOXCtgLbVzGM+bIpzIvfBA=
Subject key identifier:   A6:CA:2C:50:F0:2E:6E:29:A7:39:2A:DE:1B:96:CF:B0:A0:75:CB:F5
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer:       /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial:       019FA907C1371C769D05BFFA3630157C309D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number:          090E
Signing time:             Tue 28 Jul 2026 14:01:25 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:25 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:25 +0000
Files and hashes:         1: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: LtUEdqQEXUs4iwPpB9cbyBxltqcDBpSZm6z3pHfNbBc=)
                          2: ku9q2SmWWLLsi5oorWHKlVO8WIQ.roa (hash: uUP+mrwnQZ97afnlVETUlY/refVnxXobEQJ98a1LiOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:c1:37:1c:76:9d:05:bf:fa:36:30:15:7c:30:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
        Validity
            Not Before: Jul 28 14:01:25 2026 GMT
            Not After : Jul 29 14:01:25 2026 GMT
        Subject: CN=a6ca2c50f02e6e29a7392ade1b96cfb0a075cbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:de:2f:2c:af:2a:58:78:c2:c7:69:df:da:
                    f9:ae:2f:01:30:26:34:fc:ae:e3:62:ae:0d:1c:81:
                    bb:8d:60:cd:41:97:08:17:5a:d6:32:91:e5:0f:a4:
                    bb:a1:ae:88:70:a6:31:a8:3d:58:4f:82:fe:45:07:
                    b4:87:41:4e:92:9b:26:aa:c5:28:dd:45:d5:1f:95:
                    f8:9e:72:3b:e1:f0:cb:2f:10:bd:50:c9:65:cb:d0:
                    4c:c5:28:98:8f:27:ac:d7:bd:0c:f2:62:dd:4b:ce:
                    3d:47:63:b9:0d:74:d6:3c:ac:f5:ef:a5:78:80:46:
                    56:9f:3c:7c:10:aa:6b:8f:d1:71:37:28:7a:4a:ee:
                    6a:e9:30:65:f8:3d:a0:96:4a:f3:98:82:8e:74:fa:
                    2e:40:53:a9:97:cb:bc:52:d3:07:0a:bc:30:8f:28:
                    20:61:e6:c7:48:83:4f:33:78:4b:3b:6b:6d:ed:4f:
                    54:d2:3b:de:2a:1f:af:a2:6b:95:13:b8:d9:98:ce:
                    80:af:77:c0:bc:e0:92:2d:99:1e:aa:3f:3b:3c:63:
                    ea:a0:c9:7a:07:85:bd:0e:3d:bf:4a:c0:ef:6a:5b:
                    0a:64:40:f6:33:1f:08:ae:cd:18:41:8d:6a:56:76:
                    4b:e2:2a:7c:79:5c:f1:73:f1:79:36:22:b0:1b:70:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CA:2C:50:F0:2E:6E:29:A7:39:2A:DE:1B:96:CF:B0:A0:75:CB:F5
            X509v3 Authority Key Identifier:
                keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:5c:de:a6:55:d0:1a:c5:68:87:90:a4:7b:cf:b6:2c:6f:
         39:2d:e2:ef:88:41:76:1d:8d:63:53:c4:4c:3c:b4:c5:fb:03:
         78:71:82:89:69:0e:7b:80:81:c9:d5:ea:b7:17:6e:e4:64:5c:
         68:58:58:aa:63:c9:86:8e:ee:8c:27:63:cf:1f:2a:42:5b:e2:
         8c:74:6d:56:91:81:19:cb:2d:f4:26:ff:36:28:75:e8:2e:50:
         b2:e2:0a:ec:91:cd:4e:c3:20:6f:4e:82:85:fc:3c:59:1a:9e:
         53:96:7b:49:62:ef:f1:52:4c:63:b4:69:db:76:e1:4f:37:dd:
         52:8e:ee:ca:4d:be:e2:8e:7e:2e:2e:8f:80:71:4c:40:ae:d6:
         00:8d:7f:90:1d:f6:29:1b:20:86:e1:9e:a8:b9:b6:ba:76:d3:
         05:48:c2:cb:0d:1f:3c:83:41:88:6c:53:17:4b:24:93:db:43:
         05:61:02:3d:5e:14:0e:0e:96:b7:5c:21:9e:4d:c7:2d:35:8c:
         e6:26:5e:83:63:ca:c7:1b:be:a2:74:69:3d:bb:6b:ca:c6:a8:
         51:fc:bb:6f:5c:e6:e7:c1:09:50:e9:2f:03:0d:50:04:eb:36:
         e6:3d:48:0e:cb:1e:be:63:5e:12:39:84:2c:15:45:43:ab:b0:
         5b:28:34:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB8E3HHadBb/6NjAVfDCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1
NzAxMjkwHhcNMjYwNzI4MTQwMTI1WhcNMjYwNzI5MTQwMTI1WjAzMTEwLwYDVQQD
EyhhNmNhMmM1MGYwMmU2ZTI5YTczOTJhZGUxYjk2Y2ZiMGEwNzVjYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArifeLyyvKlh4wsdp39r5ri8BMCY0
/K7jYq4NHIG7jWDNQZcIF1rWMpHlD6S7oa6IcKYxqD1YT4L+RQe0h0FOkpsmqsUo
3UXVH5X4nnI74fDLLxC9UMlly9BMxSiYjyes170M8mLdS849R2O5DXTWPKz176V4
gEZWnzx8EKprj9FxNyh6Su5q6TBl+D2glkrzmIKOdPouQFOpl8u8UtMHCrwwjygg
YebHSINPM3hLO2tt7U9U0jveKh+vomuVE7jZmM6Ar3fAvOCSLZkeqj87PGPqoMl6
B4W9Dj2/SsDvalsKZED2Mx8Irs0YQY1qVnZL4ip8eVzxc/F5NiKwG3CtFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbKLFDwLm4ppzkq3huWz7Cgdcv1MB8GA1UdIwQY
MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt
ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2
LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7tc3qZV
0BrFaIeQpHvPtixvOS3i74hBdh2NY1PETDy0xfsDeHGCiWkOe4CBydXqtxdu5GRc
aFhYqmPJho7ujCdjzx8qQlvijHRtVpGBGcst9Cb/Nih16C5QsuIK7JHNTsMgb06C
hfw8WRqeU5Z7SWLv8VJMY7Rp23bhTzfdUo7uyk2+4o5+Li6PgHFMQK7WAI1/kB32
KRsghuGeqLm2unbTBUjCyw0fPINBiGxTF0skk9tDBWECPV4UDg6Wt1whnk3HLTWM
5iZeg2PKxxu+onRpPbtrysaoUfy7b1zm58EJUOkvAw1QBOs25j1IDssevmNeEjmE
LBVFQ6uwWyg0lg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:43 2026 by rpki-client