Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File:                     BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier:          lnx+UlsSzCMznEKWLh2gRA0D523JoUszDuVYJBahiwA=
Subject key identifier:   19:C9:CD:C7:4E:9B:BD:C9:07:76:97:62:74:D1:6D:3C:D8:F1:09:46
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer:       /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial:       019EBEB5CD267E9D13C265D81FA694CAD5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number:          07B0
Signing time:             Sat 13 Jun 2026 02:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:45 +0000
Files and hashes:         1: 1-D2GFlBLHLUdF-GPWG_RTfujAmM.roa (hash: 9y0cEqPuSQFS0cq+UBb/Wv95mgX8ehkW5+8lmKcelMI=)
                          2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 8aMuBpCmHadjsk9nSyrcw/GXjjB3705j7FEKjUczR0g=)
                          3: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
                          4: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:cd:26:7e:9d:13:c2:65:d8:1f:a6:94:ca:d5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
        Validity
            Not Before: Jun 13 02:00:45 2026 GMT
            Not After : Jun 14 02:00:45 2026 GMT
        Subject: CN=19c9cdc74e9bbdc90776976274d16d3cd8f10946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:c4:80:ba:56:42:55:df:c6:77:6f:be:d0:
                    0d:8e:f9:22:bf:a3:8d:e9:66:0c:5c:8e:69:d2:71:
                    2c:a0:65:86:65:a5:28:de:5c:6c:13:4b:b7:03:92:
                    d9:54:9d:af:83:49:28:ac:f5:25:d4:7e:cd:03:19:
                    a2:2b:24:2e:69:23:2d:aa:0c:de:a2:44:f1:9c:b3:
                    c4:41:03:39:b1:bf:08:7b:55:f5:b9:56:c2:c4:b8:
                    bd:16:1a:89:d9:d9:9e:23:bf:73:22:b5:43:31:ea:
                    69:37:08:63:9e:36:32:f9:bb:66:48:fc:c8:d2:68:
                    1f:2c:2e:37:1a:a9:52:0f:05:4c:95:37:37:44:fd:
                    be:19:d1:51:93:1f:3e:49:4a:8c:12:22:57:9a:29:
                    cc:1e:7e:ae:74:8c:9e:c7:72:a6:bf:3e:b5:f4:be:
                    7f:c0:7c:29:98:3c:74:9d:7c:54:c1:0a:74:4e:62:
                    e6:53:06:b7:4d:f1:0c:c8:25:cb:b0:a0:72:33:c8:
                    a2:4c:f6:e8:7d:e1:2d:5f:2c:29:05:23:2e:09:88:
                    58:2e:ce:1a:24:78:21:82:51:fa:3a:0f:24:89:c7:
                    ad:60:5f:cd:1a:5a:e6:58:4f:4a:26:c6:af:30:bd:
                    1e:8f:c9:e3:87:75:d5:9f:61:23:cc:ff:b4:43:df:
                    d3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:CD:C7:4E:9B:BD:C9:07:76:97:62:74:D1:6D:3C:D8:F1:09:46
            X509v3 Authority Key Identifier:
                keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:4f:a1:eb:c2:a3:60:d9:da:dc:b8:d4:fb:08:e1:bd:48:
         3e:7d:eb:3c:e5:7d:10:24:7f:ea:4d:75:6d:21:15:fd:a4:42:
         04:21:50:49:0e:f6:83:4c:50:6c:bb:28:10:2f:20:8d:ac:d1:
         cf:9f:a8:51:d7:d4:75:d3:2b:96:d6:66:71:e9:9c:96:b5:1c:
         27:87:aa:dd:5a:f6:ff:fb:b4:a6:97:45:72:5e:b9:c0:3d:c9:
         f1:b1:6f:24:40:93:6a:dd:cd:4c:26:4b:77:f9:d6:62:fb:5a:
         20:52:ba:8d:61:08:74:3d:6e:94:42:af:1e:41:86:1f:87:70:
         aa:1a:94:a8:9a:24:f0:51:ff:1a:36:a8:42:28:43:45:88:e0:
         d7:7e:d3:84:ca:73:79:3a:3f:28:eb:8c:40:d6:48:2f:3a:82:
         84:27:48:42:1a:9b:4c:91:8a:57:64:76:79:d2:83:f9:7d:0e:
         fe:cd:da:6d:bd:a2:30:5c:2d:fc:a9:74:89:93:ee:30:5d:32:
         fb:8c:20:ca:b4:a9:64:60:bd:9d:6b:d7:34:0a:2f:6f:76:e6:
         15:3a:64:a4:ff:ea:97:1f:b9:5b:61:0c:d6:44:dd:5c:d2:a8:
         d2:8c:58:a0:a6:66:83:63:e1:4f:63:7d:d7:99:fe:09:2d:3c:
         9f:2d:61:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tc0mfp0TwmXYH6aUytXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjYwNjEzMDIwMDQ1WhcNMjYwNjE0MDIwMDQ1WjAzMTEwLwYDVQQD
EygxOWM5Y2RjNzRlOWJiZGM5MDc3Njk3NjI3NGQxNmQzY2Q4ZjEwOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yPEgLpWQlXfxndvvtANjvkiv6ON
6WYMXI5p0nEsoGWGZaUo3lxsE0u3A5LZVJ2vg0korPUl1H7NAxmiKyQuaSMtqgze
okTxnLPEQQM5sb8Ie1X1uVbCxLi9FhqJ2dmeI79zIrVDMeppNwhjnjYy+btmSPzI
0mgfLC43GqlSDwVMlTc3RP2+GdFRkx8+SUqMEiJXminMHn6udIyex3Kmvz619L5/
wHwpmDx0nXxUwQp0TmLmUwa3TfEMyCXLsKByM8iiTPbofeEtXywpBSMuCYhYLs4a
JHghglH6Og8kicetYF/NGlrmWE9KJsavML0ej8njh3XVn2EjzP+0Q9/TxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnJzcdOm73JB3aXYnTRbTzY8QlGMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgRPoevC
o2DZ2ty41PsI4b1IPn3rPOV9ECR/6k11bSEV/aRCBCFQSQ72g0xQbLsoEC8gjazR
z5+oUdfUddMrltZmcemclrUcJ4eq3Vr2//u0ppdFcl65wD3J8bFvJECTat3NTCZL
d/nWYvtaIFK6jWEIdD1ulEKvHkGGH4dwqhqUqJok8FH/GjaoQihDRYjg137ThMpz
eTo/KOuMQNZILzqChCdIQhqbTJGKV2R2edKD+X0O/s3abb2iMFwt/Kl0iZPuMF0y
+4wgyrSpZGC9nWvXNAovb3bmFTpkpP/qlx+5W2EM1kTdXNKo0oxYoKZmg2PhT2N9
15n+CS08ny1hFA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:46 2026 by rpki-client