Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          rWUhQeP1ApUTqP+qsJc+q7naXsV1AUFVsVaF5P0Yi/I=
Subject key identifier:   2A:60:0B:8F:B2:17:74:70:3D:16:51:74:88:F9:62:EB:84:6D:5F:F4
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       019EBFC818A0289613FC56FC8AEB1D9DE223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          0AB5
Signing time:             Sat 13 Jun 2026 07:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:22 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: lROqLVvKe9cjVEUl8qkar5cdg1QKpmaotpv5PVUa6Wk=)
                          2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:18:a0:28:96:13:fc:56:fc:8a:eb:1d:9d:e2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Jun 13 07:00:22 2026 GMT
            Not After : Jun 14 07:00:22 2026 GMT
        Subject: CN=2a600b8fb21774703d16517488f962eb846d5ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:fc:1e:90:e5:2e:bc:29:16:5c:db:16:1f:
                    08:f1:f9:97:23:77:45:78:ea:c3:e3:bc:24:9a:ba:
                    9a:1d:d8:6a:d0:cf:3a:a1:49:b2:c5:cf:92:75:4e:
                    a7:db:82:45:a1:3e:8e:cc:06:08:06:58:2d:ff:ba:
                    a6:8a:b1:9e:b3:eb:54:3e:b5:67:73:af:21:ba:5a:
                    fe:0f:8a:3b:ab:4e:1a:d6:73:2f:aa:c9:b1:2c:c6:
                    0f:9e:09:80:58:6b:4d:2a:78:45:bf:58:46:a0:c2:
                    a2:4d:17:f4:ff:68:b4:b5:75:74:23:8a:c4:dc:59:
                    fe:34:d6:24:46:b2:f8:c7:82:0b:54:70:fa:4c:92:
                    1d:9f:ab:16:8e:57:1a:9c:dc:77:52:27:ba:10:12:
                    1a:56:46:c0:21:a9:0a:5a:0a:6d:59:1d:c3:e2:06:
                    4f:f8:2b:a3:e6:17:74:98:d7:ad:be:b2:e9:ab:9c:
                    8d:c5:f9:af:e5:96:e3:45:86:02:be:cb:7e:dd:24:
                    93:b3:b2:7c:ae:49:d3:53:d8:56:be:d4:0a:64:22:
                    7d:e9:8c:2c:29:34:d3:98:8d:5d:40:bb:5a:ad:31:
                    97:e3:9a:fc:39:c1:04:b2:ba:d4:c6:65:b1:36:e6:
                    d6:fe:1e:98:d5:a7:53:ba:36:93:92:2d:6e:11:0e:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:0B:8F:B2:17:74:70:3D:16:51:74:88:F9:62:EB:84:6D:5F:F4
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:c1:b6:2a:df:57:18:d0:08:42:98:3d:3a:2b:8d:6e:60:
         13:9a:e9:aa:cc:96:19:e9:cd:34:20:2a:8e:0a:0d:1e:6a:d3:
         7c:11:89:c7:f7:aa:c8:17:9a:37:46:2a:4b:7c:88:d3:ff:41:
         87:5e:48:8e:10:39:25:03:12:8e:41:59:04:f9:03:56:66:70:
         5c:18:df:c3:a9:cf:1f:68:9a:2f:dc:4f:f0:0c:89:10:39:48:
         d8:1d:c2:f2:15:6e:25:fb:84:f9:40:52:d5:2f:13:30:8b:ee:
         1d:e9:91:70:89:a1:ab:ef:8f:eb:1b:53:e1:52:dd:47:00:94:
         2b:cf:ff:f0:c2:ea:1c:19:d1:19:1a:4c:10:b0:50:1a:a8:b9:
         85:17:67:b7:61:c1:89:b2:96:36:5f:c3:dc:6b:0a:88:0c:ba:
         85:80:c7:75:60:f4:5a:fa:7f:b1:5e:69:57:8d:f6:fa:94:25:
         60:9b:4a:d9:23:b3:aa:05:82:6d:b1:9c:93:d8:73:f6:b0:c8:
         1b:f2:c7:10:da:9e:ee:35:af:e5:ab:73:b6:ea:e2:69:78:be:
         c7:cd:58:e4:a0:3f:41:35:d6:61:61:50:cf:46:1c:6f:bb:3e:
         c4:31:89:51:f6:c4:3a:e4:ab:06:a2:97:05:36:5b:5b:1b:1b:
         5c:6c:46:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yBigKJYT/Fb8iusdneIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl
NTc0NDUwHhcNMjYwNjEzMDcwMDIyWhcNMjYwNjE0MDcwMDIyWjAzMTEwLwYDVQQD
EygyYTYwMGI4ZmIyMTc3NDcwM2QxNjUxNzQ4OGY5NjJlYjg0NmQ1ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaP8HpDlLrwpFlzbFh8I8fmXI3dF
eOrD47wkmrqaHdhq0M86oUmyxc+SdU6n24JFoT6OzAYIBlgt/7qmirGes+tUPrVn
c68hulr+D4o7q04a1nMvqsmxLMYPngmAWGtNKnhFv1hGoMKiTRf0/2i0tXV0I4rE
3Fn+NNYkRrL4x4ILVHD6TJIdn6sWjlcanNx3Uie6EBIaVkbAIakKWgptWR3D4gZP
+Cuj5hd0mNetvrLpq5yNxfmv5ZbjRYYCvst+3SSTs7J8rknTU9hWvtQKZCJ96Yws
KTTTmI1dQLtarTGX45r8OcEEsrrUxmWxNubW/h6Y1adTujaTki1uEQ45xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpgC4+yF3RwPRZRdIj5YuuEbV/0MB8GA1UdIwQY
MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt
ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw
LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0PBtirf
VxjQCEKYPTorjW5gE5rpqsyWGenNNCAqjgoNHmrTfBGJx/eqyBeaN0YqS3yI0/9B
h15IjhA5JQMSjkFZBPkDVmZwXBjfw6nPH2iaL9xP8AyJEDlI2B3C8hVuJfuE+UBS
1S8TMIvuHemRcImhq++P6xtT4VLdRwCUK8//8MLqHBnRGRpMELBQGqi5hRdnt2HB
ibKWNl/D3GsKiAy6hYDHdWD0Wvp/sV5pV432+pQlYJtK2SOzqgWCbbGck9hz9rDI
G/LHENqe7jWv5atzturiaXi+x81Y5KA/QTXWYWFQz0Ycb7s+xDGJUfbEOuSrBqKX
BTZbWxsbXGxG8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:07 2026 by rpki-client