Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          LEf+vw3Y5e4Lmsc8bmXbpBXgi/v2SmbZMTnRGgAdjPg=
Subject key identifier:   62:02:B7:45:C3:FC:80:B6:2F:F5:29:83:47:06:3A:73:62:F7:C4:7F
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       019D98BD340C9B3E53440A2538E0229543A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          05B3
Signing time:             Fri 17 Apr 2026 00:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:29 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: lO5M2JbKnvg6nmEi8gygxCs+t1im3cDNhyfrwo1RyRk=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:34:0c:9b:3e:53:44:0a:25:38:e0:22:95:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Apr 17 00:00:29 2026 GMT
            Not After : Apr 18 00:00:29 2026 GMT
        Subject: CN=6202b745c3fc80b62ff5298347063a7362f7c47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:5f:5a:56:dd:7f:64:16:85:ab:c4:26:82:
                    b7:f4:8d:1b:07:3e:4a:eb:f3:e8:d8:65:88:31:1e:
                    ae:17:49:80:3b:a7:a9:ed:b8:6c:ae:e5:67:08:cd:
                    0b:ab:fe:18:d1:66:a5:4a:fe:1e:39:f8:0e:da:30:
                    57:59:54:a6:26:c3:6f:e6:11:5b:b5:5e:38:0f:36:
                    fa:cc:03:70:4b:e7:b8:24:be:19:48:5b:9f:a5:02:
                    b3:30:39:12:39:73:2d:0f:c7:b3:24:fa:4f:13:cd:
                    be:28:fc:b0:26:5e:b7:25:87:51:e7:28:f1:d5:b5:
                    fc:74:f3:72:16:97:9b:97:4f:47:77:0c:ff:d3:60:
                    0f:da:8a:00:44:6a:93:2f:4f:00:c3:54:ba:0f:57:
                    c7:39:2d:cf:25:a4:fb:53:5a:37:9d:8f:1f:13:01:
                    7b:ca:b3:b4:1b:71:12:19:0c:59:a7:9c:94:8d:6a:
                    59:6d:b9:4b:5c:e5:24:f2:91:98:39:98:37:6f:a6:
                    17:83:37:62:33:c8:92:57:13:cd:7a:b4:51:d4:10:
                    49:5d:be:b5:e4:ed:3d:b5:fb:a2:cd:3c:e0:e9:86:
                    92:4f:21:6d:89:91:4b:5d:59:4d:23:fa:ce:90:eb:
                    d4:ca:50:ba:ef:30:03:08:cc:b1:8c:5c:71:ee:4a:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:B7:45:C3:FC:80:B6:2F:F5:29:83:47:06:3A:73:62:F7:C4:7F
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:59:a3:f0:ef:cb:e9:5c:33:7f:a1:ce:c9:92:3d:c5:e4:
         72:ab:41:93:ba:4a:3d:ce:e5:8d:fd:19:47:2c:39:41:54:85:
         fe:d3:d9:33:9e:0f:04:43:fc:ce:47:28:4f:c6:0a:b9:4b:01:
         82:d3:1c:44:ee:01:e7:78:e7:f5:5d:b1:45:64:76:2a:ae:0b:
         56:ae:f1:7b:0b:94:32:98:7a:8c:83:81:88:47:33:fa:27:c4:
         50:bc:f3:c8:df:07:95:f3:7a:bd:b0:53:2e:59:ff:9f:77:34:
         77:2e:79:cb:da:e4:27:70:5c:9b:72:6c:fc:65:0e:ab:8c:b6:
         c5:83:14:48:2e:2e:c5:a3:ab:bb:53:94:1d:93:1a:72:61:9a:
         bd:6e:14:b7:a2:2c:a4:ba:a8:e8:4a:9a:09:38:1a:ee:f4:6d:
         ce:3e:3a:f1:56:35:49:26:6b:a1:c6:44:b1:e4:7f:a0:3e:52:
         ec:31:6e:40:24:c1:a8:9a:4a:e5:9e:fa:b2:19:9b:3d:6f:6d:
         8a:a7:6b:f9:53:6b:51:28:0b:82:60:65:e6:c4:c3:0a:7c:f8:
         dd:ca:77:3a:56:5a:e1:c4:49:39:ec:93:cb:dc:3c:d4:2a:02:
         aa:13:52:a0:85:c1:61:57:66:88:3b:aa:b7:6c:67:a5:71:51:
         61:67:8b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTQMmz5TRAolOOAilUOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx
NGE1NWEwHhcNMjYwNDE3MDAwMDI5WhcNMjYwNDE4MDAwMDI5WjAzMTEwLwYDVQQD
Eyg2MjAyYjc0NWMzZmM4MGI2MmZmNTI5ODM0NzA2M2E3MzYyZjdjNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFtfWlbdf2QWhavEJoK39I0bBz5K
6/Po2GWIMR6uF0mAO6ep7bhsruVnCM0Lq/4Y0WalSv4eOfgO2jBXWVSmJsNv5hFb
tV44Dzb6zANwS+e4JL4ZSFufpQKzMDkSOXMtD8ezJPpPE82+KPywJl63JYdR5yjx
1bX8dPNyFpebl09Hdwz/02AP2ooARGqTL08Aw1S6D1fHOS3PJaT7U1o3nY8fEwF7
yrO0G3ESGQxZp5yUjWpZbblLXOUk8pGYOZg3b6YXgzdiM8iSVxPNerRR1BBJXb61
5O09tfuizTzg6YaSTyFtiZFLXVlNI/rOkOvUylC67zADCMyxjFxx7kp+LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGICt0XD/IC2L/Upg0cGOnNi98R/MB8GA1UdIwQY
MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt
ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3
LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikpZo/Dv
y+lcM3+hzsmSPcXkcqtBk7pKPc7ljf0ZRyw5QVSF/tPZM54PBEP8zkcoT8YKuUsB
gtMcRO4B53jn9V2xRWR2Kq4LVq7xewuUMph6jIOBiEcz+ifEULzzyN8HlfN6vbBT
Lln/n3c0dy55y9rkJ3Bcm3Js/GUOq4y2xYMUSC4uxaOru1OUHZMacmGavW4Ut6Is
pLqo6EqaCTga7vRtzj468VY1SSZrocZEseR/oD5S7DFuQCTBqJpK5Z76shmbPW9t
iqdr+VNrUSgLgmBl5sTDCnz43cp3OlZa4cRJOeyTy9w81CoCqhNSoIXBYVdmiDuq
t2xnpXFRYWeLeg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:19 2026 by rpki-client