Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File:                     bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier:          TU6lbVlGErQYVR0T6FIJRrfaJ/elTa78URU11+LXFXQ=
Subject key identifier:   38:3A:4E:24:51:76:34:5C:CD:EF:23:7B:A1:58:F6:B4:98:79:F1:8A
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer:       /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial:       019FAC75D5F82FD9A74157917E0F4737B308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:31 +0000
Files and hashes:         1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
                          2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: 62+FfMESP019H+mgshD5Af4ZTt2rVFdbc8ZyYfJQmeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:d5:f8:2f:d9:a7:41:57:91:7e:0f:47:37:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
        Validity
            Not Before: Jul 29 06:00:31 2026 GMT
            Not After : Jul 30 06:00:31 2026 GMT
        Subject: CN=383a4e245176345ccdef237ba158f6b49879f18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:81:9c:fd:8c:3d:24:a2:d5:e9:45:6b:31:
                    1f:42:2e:8b:aa:fa:2f:50:3e:80:c1:f5:a2:3a:22:
                    ab:c3:f0:07:7e:54:31:79:d0:3c:61:ce:a5:63:e9:
                    60:24:d5:ad:ad:4c:9d:fa:78:57:05:ab:73:19:d0:
                    43:81:95:18:9c:b6:24:91:ca:33:a8:e4:5e:58:db:
                    d9:a5:bc:83:22:78:df:bd:52:07:5c:b4:dc:5b:7a:
                    71:d1:85:be:ee:bb:30:38:db:cd:9b:53:8b:a9:c1:
                    62:5f:6d:82:a9:0f:a2:07:c5:00:5b:0d:91:84:31:
                    75:e6:b8:67:08:80:06:a6:0a:78:5a:00:d6:42:f1:
                    e7:d4:5e:79:98:d1:7f:6b:bf:5b:0a:d2:dd:8f:0c:
                    53:5b:f3:52:4a:56:68:ef:2e:9e:6b:cb:a2:2f:c0:
                    b2:78:01:65:16:d7:fe:6b:02:20:7b:bb:82:10:f7:
                    ca:9d:36:62:e8:22:50:89:ef:01:29:d3:a8:86:20:
                    33:aa:55:61:5f:21:da:9c:7a:c5:12:89:d0:79:f4:
                    f6:a6:ea:2c:d6:bf:a2:69:5c:66:ff:8e:f9:f7:4d:
                    7d:d6:d2:df:e7:9b:d5:fc:b8:4c:6d:fd:cd:99:a5:
                    40:ba:08:27:04:b8:6b:0e:d1:4f:1d:44:9a:0e:a3:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3A:4E:24:51:76:34:5C:CD:EF:23:7B:A1:58:F6:B4:98:79:F1:8A
            X509v3 Authority Key Identifier:
                keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:79:ac:d9:88:1e:87:44:41:4b:d4:e5:b4:c3:85:3b:60:
         7f:95:78:02:99:87:6f:e3:7d:4d:e5:39:7a:07:e0:8b:cf:a5:
         4c:f8:41:73:ca:87:e5:f1:ab:8c:dd:de:a6:cd:7a:5e:69:17:
         9d:17:77:3f:f2:4c:74:45:6f:79:9f:10:e1:ad:83:ce:d3:09:
         89:0c:1c:7e:8e:1c:53:95:4b:21:36:40:f6:7a:80:0d:cb:0f:
         81:9b:17:b8:40:a3:4b:ce:9d:77:72:70:f5:da:85:c0:ff:8b:
         f6:6a:f8:b7:90:cb:2c:14:e5:78:9f:6a:fe:a3:bf:b9:0e:26:
         d7:e6:65:b8:17:02:00:8f:27:51:49:a3:e8:69:32:39:39:c9:
         4f:78:2e:73:ac:b5:cd:8e:99:87:a0:dd:37:1a:6b:62:13:0f:
         bf:7e:8c:1e:be:5d:30:20:23:91:6b:b4:14:ee:1d:3a:8d:aa:
         95:77:90:82:c2:51:91:49:20:63:d9:37:ff:1c:63:31:e9:eb:
         04:20:fb:b7:63:9f:f1:af:1e:ed:0e:cf:c4:e5:42:f7:10:c2:
         81:0b:a8:ac:a8:48:3e:9d:ac:e4:9e:d4:5f:98:c6:c4:44:f9:
         99:26:e9:18:c1:2a:d4:a2:49:e1:2d:f6:e7:e8:8c:7a:6d:29:
         45:44:10:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sddX4L9mnQVeRfg9HN7MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzc4YTRlNTkwZmViMTAzZDVkMWJiNGQwNzljNjg0MTU1
OTJiZjkwHhcNMjYwNzI5MDYwMDMxWhcNMjYwNzMwMDYwMDMxWjAzMTEwLwYDVQQD
EygzODNhNGUyNDUxNzYzNDVjY2RlZjIzN2JhMTU4ZjZiNDk4NzlmMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoeBnP2MPSSi1elFazEfQi6Lqvov
UD6AwfWiOiKrw/AHflQxedA8Yc6lY+lgJNWtrUyd+nhXBatzGdBDgZUYnLYkkcoz
qOReWNvZpbyDInjfvVIHXLTcW3px0YW+7rswONvNm1OLqcFiX22CqQ+iB8UAWw2R
hDF15rhnCIAGpgp4WgDWQvHn1F55mNF/a79bCtLdjwxTW/NSSlZo7y6ea8uiL8Cy
eAFlFtf+awIge7uCEPfKnTZi6CJQie8BKdOohiAzqlVhXyHanHrFEonQefT2puos
1r+iaVxm/47590191tLf55vV/LhMbf3NmaVAuggnBLhrDtFPHUSaDqMr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg6TiRRdjRcze8je6FY9rSYefGKMB8GA1UdIwQY
MBaAFG7Hik5ZD+sQPV0btNB5xoQVWSv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNlS1Rsa1A2eEE5WFJ1MDBIbkdoQlZaS19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvYnNlS1Rsa1A2eEE5WFJ1MDBIbkdoQlZaS19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvYnNlS1Rsa1A2eEE5WFJ1MDBIbkdoQlZaS19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEV5rNmI
HodEQUvU5bTDhTtgf5V4ApmHb+N9TeU5egfgi8+lTPhBc8qH5fGrjN3eps16XmkX
nRd3P/JMdEVveZ8Q4a2DztMJiQwcfo4cU5VLITZA9nqADcsPgZsXuECjS86dd3Jw
9dqFwP+L9mr4t5DLLBTleJ9q/qO/uQ4m1+ZluBcCAI8nUUmj6GkyOTnJT3guc6y1
zY6Zh6DdNxprYhMPv36MHr5dMCAjkWu0FO4dOo2qlXeQgsJRkUkgY9k3/xxjMenr
BCD7t2Of8a8e7Q7PxOVC9xDCgQuorKhIPp2s5J7UX5jGxET5mSbpGMEq1KJJ4S32
5+iMem0pRUQQBA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:42 2026 by rpki-client