Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File:                     BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier:          3QNwh9sMpVlTi1STPcwZzcnKGBhVt3BaoYRPxhJDmcI=
Subject key identifier:   8B:60:61:C4:E9:4D:67:BA:96:E5:66:90:06:72:87:0E:7B:E1:20:F6
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer:       /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial:       019EC0A440AA80977D0989845C387806454F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number:          0BD4
Signing time:             Sat 13 Jun 2026 11:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:50 +0000
Files and hashes:         1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: lDFs2Wum00uiybargAwA/3olTQgMHou7G3toWMgJhA4=)
                          2: wPZBSgFASeM9SaWJvAkRGk-7twQ.roa (hash: R3wosEg+LuaaoBj4e/mPNIMyKN6NLJP5v9wAW4ICOrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:40:aa:80:97:7d:09:89:84:5c:38:78:06:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
        Validity
            Not Before: Jun 13 11:00:50 2026 GMT
            Not After : Jun 14 11:00:50 2026 GMT
        Subject: CN=8b6061c4e94d67ba96e566900672870e7be120f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:1b:9c:70:02:91:c8:ab:28:f7:f5:a4:8e:
                    5f:0a:f6:be:29:65:c7:79:4b:f1:6e:2d:08:97:1b:
                    d7:8e:6b:2c:b0:41:9f:7b:d8:4e:6c:8c:f9:29:92:
                    0f:9a:9d:4b:b7:3b:98:c6:39:40:e0:8d:e0:bc:4c:
                    5a:ab:6d:cc:e6:87:b8:fb:97:bf:35:b7:93:03:9c:
                    0b:db:b7:57:f1:21:25:9b:9b:61:72:b1:e0:2c:33:
                    34:95:ba:27:c9:79:08:d1:bf:11:c7:da:b3:b7:e8:
                    76:c0:62:2c:58:65:00:ce:4a:ae:e6:17:c0:9d:48:
                    70:09:32:d1:a8:96:41:63:b8:f3:a4:85:44:b6:c0:
                    14:95:b0:61:a6:3e:fb:93:e6:7b:f9:73:6a:bc:ae:
                    9d:76:10:04:8b:45:8e:72:f3:3e:b9:09:fe:71:c5:
                    fa:74:f0:f5:e9:dd:5f:7f:ef:0e:87:3f:1f:2c:7d:
                    60:96:02:bf:11:13:75:aa:47:0c:10:26:c2:cc:66:
                    19:4c:c5:f1:71:55:23:17:ea:84:92:2d:14:57:c2:
                    de:36:61:80:53:92:3d:16:44:fe:3d:18:1a:fa:79:
                    5c:6c:1d:2b:e4:c6:b6:07:a5:70:dc:0d:2d:d5:9d:
                    cf:26:a6:4b:4c:4e:2b:85:39:50:18:2c:b1:66:b7:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:61:C4:E9:4D:67:BA:96:E5:66:90:06:72:87:0E:7B:E1:20:F6
            X509v3 Authority Key Identifier:
                keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:b1:87:5a:47:ce:e3:b5:4e:04:73:88:e4:60:10:74:4a:
         9f:9e:6a:11:84:fd:c5:52:05:c2:c0:a4:c7:e2:16:9c:f9:25:
         49:1f:e9:fb:92:6d:0f:55:cb:41:90:73:c0:51:b6:8d:08:8b:
         89:fb:02:5c:1a:3e:b5:b1:fc:92:f8:c5:44:e0:7b:7b:b4:01:
         3b:10:03:2e:ed:0a:77:c7:23:01:83:2e:f2:19:e3:fe:11:61:
         c3:1f:b2:ba:cc:37:b5:86:39:05:d7:4b:fa:81:0c:05:71:b2:
         1d:47:ab:5a:7e:fb:39:11:87:8c:56:2f:4b:df:f2:8d:62:a3:
         dc:d0:e4:9d:96:e5:79:10:91:24:da:bf:02:b3:0a:c8:be:bc:
         e5:20:9a:b8:ae:4a:c7:76:97:7c:a1:09:58:7f:e2:9c:d7:92:
         2a:e5:11:e2:91:f3:43:cf:09:4a:79:cd:74:4c:40:4d:17:6c:
         52:e7:f4:a5:a7:25:76:c1:76:c4:9a:dc:3f:1e:8a:2c:db:d2:
         dd:f1:a4:f6:6a:ed:93:58:ed:11:7f:d4:e0:b4:02:0b:a4:2e:
         9e:5e:88:43:9e:3f:be:d6:0b:c8:b2:75:27:03:69:e6:ee:23:
         f1:18:96:ae:ec:9d:f4:bb:5f:18:7e:18:b9:b9:31:84:c8:53:
         ec:1b:ff:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApECqgJd9CYmEXDh4BkVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MmIxMGU1NDdlODlmZjZjN2IzOWI2Y2E5N2ZiMTZiM2Zk
ZmJlNGYwHhcNMjYwNjEzMTEwMDUwWhcNMjYwNjE0MTEwMDUwWjAzMTEwLwYDVQQD
Eyg4YjYwNjFjNGU5NGQ2N2JhOTZlNTY2OTAwNjcyODcwZTdiZTEyMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnukbnHACkcirKPf1pI5fCva+KWXH
eUvxbi0IlxvXjmsssEGfe9hObIz5KZIPmp1LtzuYxjlA4I3gvExaq23M5oe4+5e/
NbeTA5wL27dX8SElm5thcrHgLDM0lbonyXkI0b8Rx9qzt+h2wGIsWGUAzkqu5hfA
nUhwCTLRqJZBY7jzpIVEtsAUlbBhpj77k+Z7+XNqvK6ddhAEi0WOcvM+uQn+ccX6
dPD16d1ff+8Ohz8fLH1glgK/ERN1qkcMECbCzGYZTMXxcVUjF+qEki0UV8LeNmGA
U5I9FkT+PRga+nlcbB0r5Ma2B6Vw3A0t1Z3PJqZLTE4rhTlQGCyxZrd6iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItgYcTpTWe6luVmkAZyhw574SD2MB8GA1UdIwQY
MBaAFAUrEOVH6J/2x7ObbKl/sWs/375PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAt
MWY3NmU5ZGNmZjkyLzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yYWEyMTgtN2UxZS00OTk0LThjYjAtMWY3NmU5ZGNmZjky
LzEvQlNzUTVVZm9uX2JIczV0c3FYLXhhel9mdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbSxh1pH
zuO1TgRziORgEHRKn55qEYT9xVIFwsCkx+IWnPklSR/p+5JtD1XLQZBzwFG2jQiL
ifsCXBo+tbH8kvjFROB7e7QBOxADLu0Kd8cjAYMu8hnj/hFhwx+yusw3tYY5BddL
+oEMBXGyHUerWn77ORGHjFYvS9/yjWKj3NDknZbleRCRJNq/ArMKyL685SCauK5K
x3aXfKEJWH/inNeSKuUR4pHzQ88JSnnNdExATRdsUuf0pacldsF2xJrcPx6KLNvS
3fGk9mrtk1jtEX/U4LQCC6Qunl6IQ54/vtYLyLJ1JwNp5u4j8RiWruyd9LtfGH4Y
ubkxhMhT7Bv/PQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:49 2026 by rpki-client