Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          9ovLTAoCAmna8ZHdFti1xmmdjiVKSXC+tKR65HsLpwY=
Subject key identifier:   D5:F6:DB:A3:65:91:28:0B:7F:0C:81:58:60:25:15:FF:0A:D0:94:76
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       019EBF5A2780213A36F8B146C03572A61E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:16 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: DEhhrOp5EmcY635Q/ViXpbAVufsL/fGo7X9cfFdevsw=)
                          2: OtKLPaAsu0TSKxVTheZYE45uIv4.roa (hash: sV369+wKHa03W+MYhzuJvYumzEqh+GOUryRtR9pnkWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:27:80:21:3a:36:f8:b1:46:c0:35:72:a6:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Jun 13 05:00:16 2026 GMT
            Not After : Jun 14 05:00:16 2026 GMT
        Subject: CN=d5f6dba36591280b7f0c8158602515ff0ad09476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:0a:3b:0d:23:95:7d:5a:92:f8:cf:28:18:
                    d8:97:5a:71:d2:37:e6:1d:d2:9c:60:c9:1a:8c:68:
                    89:dc:e0:c0:10:f0:d9:84:53:58:1a:04:ca:b9:d7:
                    b2:4f:c2:e1:c8:e7:f0:ef:15:15:94:c8:36:52:63:
                    55:8f:ce:0a:0a:44:97:37:04:da:bb:33:34:20:b1:
                    c1:cb:73:8f:64:d4:d1:47:83:85:8c:47:64:a6:f2:
                    00:e5:05:0c:29:56:b9:17:d0:e5:ec:db:d9:d9:91:
                    13:a0:3d:4f:57:1b:d9:66:4a:2b:31:4d:85:85:89:
                    8c:e7:09:db:5c:41:6f:47:72:7f:60:69:c5:17:11:
                    50:39:a0:d8:d6:db:73:11:44:9d:24:c6:32:ff:36:
                    f8:ae:44:c6:7c:d7:2f:b6:6e:75:0f:73:5e:8b:70:
                    f0:11:3a:75:da:55:63:04:1c:6a:89:cc:92:16:28:
                    28:aa:44:2e:91:45:f9:c0:75:3e:db:fc:2b:7f:bd:
                    57:d6:e2:41:92:36:33:eb:01:c8:ec:07:b2:a3:8e:
                    53:40:61:9f:6f:58:a6:c9:82:13:ed:62:a8:9c:b4:
                    61:36:2c:9e:bf:f5:56:6a:6f:d5:dc:93:42:18:4a:
                    1b:a1:b3:e8:93:1e:f4:a3:2a:41:bc:ac:e7:12:ab:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F6:DB:A3:65:91:28:0B:7F:0C:81:58:60:25:15:FF:0A:D0:94:76
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c9:a8:b4:be:14:ce:9a:87:13:82:06:a7:3e:61:53:ba:64:
         d5:d2:45:b7:4b:b4:de:e3:0b:11:8f:10:e5:76:e4:20:e4:d3:
         5c:3a:03:ff:dc:0b:e0:b8:0c:12:cd:ea:c2:35:91:df:cb:71:
         7e:c0:1e:70:07:5f:da:b6:33:56:b0:79:14:48:e7:0e:6f:99:
         2f:d0:e4:49:85:49:66:cd:c3:45:06:c7:79:e6:1e:1d:92:92:
         a1:dc:f6:8b:b1:d2:73:1a:a2:37:65:ac:a5:c9:71:2d:8b:cd:
         3d:c0:69:ba:a4:0a:ae:17:04:75:e7:59:bf:aa:cb:11:4e:5f:
         d7:df:fc:6a:f2:55:b0:68:13:9e:b1:33:ee:55:31:12:8d:af:
         63:26:d6:14:0c:70:f3:55:cc:f9:f4:e3:8d:82:f4:bd:b1:52:
         70:13:cd:62:3a:b2:e0:43:45:f8:12:23:36:2d:78:fe:17:3d:
         dc:11:dc:f8:f3:da:3e:21:46:84:36:4f:8f:79:ce:f8:32:87:
         e3:80:c0:24:ab:b4:e2:4f:b4:3f:c6:30:33:6a:06:46:1b:4e:
         bf:16:88:dc:64:07:20:5c:c6:f8:d9:ef:3b:2c:eb:32:4c:97:
         11:cf:92:f7:54:ea:81:ac:39:82:f9:f6:9b:88:20:d9:43:7c:
         7e:2b:54:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WieAITo2+LFGwDVyph55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YmI1YmZhNjRiMGQ1ZDE4YTMwNjFhOTg2OWIxY2E1NzE3
MmVhYmEwHhcNMjYwNjEzMDUwMDE2WhcNMjYwNjE0MDUwMDE2WjAzMTEwLwYDVQQD
EyhkNWY2ZGJhMzY1OTEyODBiN2YwYzgxNTg2MDI1MTVmZjBhZDA5NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mAKOw0jlX1akvjPKBjYl1px0jfm
HdKcYMkajGiJ3ODAEPDZhFNYGgTKudeyT8LhyOfw7xUVlMg2UmNVj84KCkSXNwTa
uzM0ILHBy3OPZNTRR4OFjEdkpvIA5QUMKVa5F9Dl7NvZ2ZEToD1PVxvZZkorMU2F
hYmM5wnbXEFvR3J/YGnFFxFQOaDY1ttzEUSdJMYy/zb4rkTGfNcvtm51D3Nei3Dw
ETp12lVjBBxqicySFigoqkQukUX5wHU+2/wrf71X1uJBkjYz6wHI7Aeyo45TQGGf
b1imyYIT7WKonLRhNiyev/VWam/V3JNCGEobobPokx70oypBvKznEqsWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX226NlkSgLfwyBWGAlFf8K0JR2MB8GA1UdIwQY
MBaAFAe7W/pksNXRijBhqYabHKVxcuq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAt
ZjkwOGQyMTcxOGY3LzEvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAtZjkwOGQyMTcxOGY3
LzEvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcmotL4U
zpqHE4IGpz5hU7pk1dJFt0u03uMLEY8Q5XbkIOTTXDoD/9wL4LgMEs3qwjWR38tx
fsAecAdf2rYzVrB5FEjnDm+ZL9DkSYVJZs3DRQbHeeYeHZKSodz2i7HScxqiN2Ws
pclxLYvNPcBpuqQKrhcEdedZv6rLEU5f19/8avJVsGgTnrEz7lUxEo2vYybWFAxw
81XM+fTjjYL0vbFScBPNYjqy4ENF+BIjNi14/hc93BHc+PPaPiFGhDZPj3nO+DKH
44DAJKu04k+0P8YwM2oGRhtOvxaI3GQHIFzG+NnvOyzrMkyXEc+S91Tqgaw5gvn2
m4gg2UN8fitUwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:57 2026 by rpki-client