Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File:                     BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier:          2BtdfVx6Vusfd0wZ3k/GkJ+jWT3R9bCgosB/Riej88k=
Subject key identifier:   AD:E6:8B:A1:0D:CB:54:59:41:D0:56:D5:00:89:82:F8:6F:67:E3:90
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer:       /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial:       019EBE7F8CF7D473D2D6CD8999B9BFCE911E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number:          0E3E
Signing time:             Sat 13 Jun 2026 01:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:30 +0000
Files and hashes:         1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: Q59666c+3falvOkL3+KU18Q9MhG20rH68l6GILGHX6M=)
                          2: we5jn01Cx98OQV43_9pqKOC3HXA.roa (hash: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:8c:f7:d4:73:d2:d6:cd:89:99:b9:bf:ce:91:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
        Validity
            Not Before: Jun 13 01:01:30 2026 GMT
            Not After : Jun 14 01:01:30 2026 GMT
        Subject: CN=ade68ba10dcb545941d056d5008982f86f67e390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:d0:d3:81:d4:85:ed:18:45:ce:45:ef:7f:
                    60:ce:5b:b2:5f:21:b2:c8:3a:be:05:65:92:6d:45:
                    3d:19:e2:1e:b6:f3:25:c1:56:19:f5:0b:51:cf:90:
                    99:b8:08:fc:ba:73:b0:ab:73:8c:5c:9e:b3:b8:ef:
                    73:b3:ca:ec:94:dc:3d:cb:9f:bb:b0:bf:87:bc:e8:
                    48:f1:67:02:46:0f:e5:08:10:dc:53:c8:5e:3a:7f:
                    b4:54:e0:c2:ef:5a:f9:80:db:c6:67:23:20:b0:fe:
                    97:b4:79:ab:ee:6a:ac:80:50:23:64:f1:e4:65:e6:
                    0b:ab:de:92:9d:f8:80:c5:f2:c4:be:fa:b2:08:0c:
                    d2:97:85:38:32:e0:39:41:8f:32:64:0a:c4:1e:1f:
                    2e:73:36:f6:b8:a3:f3:3c:cd:b2:2d:fd:3e:2f:44:
                    7a:cd:3d:54:3d:b6:8c:6e:50:e9:50:f9:11:28:48:
                    0c:93:fc:ac:13:38:eb:f4:e5:32:f7:dd:b5:42:1f:
                    5d:f8:89:df:12:14:6e:04:1e:5a:08:7e:34:8c:cf:
                    78:79:c5:3a:da:fd:f3:57:18:99:13:16:0b:81:7c:
                    e5:a5:5a:4f:c7:75:ee:56:0d:68:12:4f:04:b4:1e:
                    54:dc:21:1c:e1:f4:43:2b:d1:d3:54:4d:dd:af:2e:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:8B:A1:0D:CB:54:59:41:D0:56:D5:00:89:82:F8:6F:67:E3:90
            X509v3 Authority Key Identifier:
                keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:63:af:70:74:8d:77:7b:2e:d1:9e:45:a3:d7:8a:c8:ca:15:
         77:69:24:e6:df:78:1c:51:0a:48:08:49:34:9a:5f:87:df:0c:
         06:15:46:32:1a:91:fe:5e:5a:8f:68:ff:15:57:51:ae:c2:1f:
         38:78:44:23:a7:61:7a:bd:30:d7:97:c4:82:28:0f:80:10:ea:
         29:dd:b7:39:3a:b3:19:c4:b9:bc:92:41:08:d0:d9:e3:a7:1c:
         29:92:da:7b:4d:2e:27:0e:d8:5f:64:bc:de:d4:fd:50:f5:21:
         36:7e:9c:46:ec:59:0f:a7:89:8e:69:6f:8e:e4:54:54:60:93:
         d7:19:fd:0d:d8:1b:1a:40:0c:63:aa:96:0f:10:dd:50:d1:d1:
         26:f7:9c:c4:ca:8b:15:3b:9f:d7:f8:03:bd:37:1b:72:9b:d1:
         4e:b6:4d:bf:20:7b:b8:74:78:3d:a5:76:75:40:6d:db:43:ac:
         15:59:64:05:d4:ae:15:91:37:ab:32:95:08:0f:b2:3e:75:75:
         d4:02:15:f5:9d:50:67:9a:43:1a:fa:36:a7:4d:17:89:05:54:
         23:e7:01:4d:ee:92:13:38:41:1c:2e:73:65:2d:c2:13:40:65:
         92:5a:3a:ac:39:6c:5b:10:b0:4f:3a:8a:58:01:c3:51:87:9b:
         4b:e8:45:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f4z31HPS1s2Jmbm/zpEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDI5MjExZjkyZTU2MGYwYjc4MzRiYjI5MzJhYzYzY2Fi
ZmExNGEwHhcNMjYwNjEzMDEwMTMwWhcNMjYwNjE0MDEwMTMwWjAzMTEwLwYDVQQD
EyhhZGU2OGJhMTBkY2I1NDU5NDFkMDU2ZDUwMDg5ODJmODZmNjdlMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnPQ04HUhe0YRc5F739gzluyXyGy
yDq+BWWSbUU9GeIetvMlwVYZ9QtRz5CZuAj8unOwq3OMXJ6zuO9zs8rslNw9y5+7
sL+HvOhI8WcCRg/lCBDcU8heOn+0VODC71r5gNvGZyMgsP6XtHmr7mqsgFAjZPHk
ZeYLq96SnfiAxfLEvvqyCAzSl4U4MuA5QY8yZArEHh8uczb2uKPzPM2yLf0+L0R6
zT1UPbaMblDpUPkRKEgMk/ysEzjr9OUy9921Qh9d+InfEhRuBB5aCH40jM94ecU6
2v3zVxiZExYLgXzlpVpPx3XuVg1oEk8EtB5U3CEc4fRDK9HTVE3dry6TPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3mi6ENy1RZQdBW1QCJgvhvZ+OQMB8GA1UdIwQY
MBaAFATSkhH5LlYPC3g0uykyrGPKv6FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQt
ZThkMTkyOTYzOTVjLzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQtZThkMTkyOTYzOTVj
LzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGOvcHSN
d3su0Z5Fo9eKyMoVd2kk5t94HFEKSAhJNJpfh98MBhVGMhqR/l5aj2j/FVdRrsIf
OHhEI6dher0w15fEgigPgBDqKd23OTqzGcS5vJJBCNDZ46ccKZLae00uJw7YX2S8
3tT9UPUhNn6cRuxZD6eJjmlvjuRUVGCT1xn9DdgbGkAMY6qWDxDdUNHRJvecxMqL
FTuf1/gDvTcbcpvRTrZNvyB7uHR4PaV2dUBt20OsFVlkBdSuFZE3qzKVCA+yPnV1
1AIV9Z1QZ5pDGvo2p00XiQVUI+cBTe6SEzhBHC5zZS3CE0Blklo6rDlsWxCwTzqK
WAHDUYebS+hF9g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:44 2026 by rpki-client