Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          alY+K4KMBBggIHfghW5+159MUi17/YZ9REapgc/qDpk=
Subject key identifier:   9E:5B:B2:89:41:96:8F:F3:35:5B:4F:98:6B:C3:47:70:2B:80:A7:E3
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       019EC0A4574BDC7905673E48D74DBCC5028C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          14D7
Signing time:             Sat 13 Jun 2026 11:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:56 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: YrVYMlP2/4+UFVjiMp+hk8ZH8hCm4oqqmqt4WmwmvEU=)
                          2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:57:4b:dc:79:05:67:3e:48:d7:4d:bc:c5:02:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Jun 13 11:00:56 2026 GMT
            Not After : Jun 14 11:00:56 2026 GMT
        Subject: CN=9e5bb28941968ff3355b4f986bc347702b80a7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:95:6f:a9:43:d1:c5:3c:ae:26:49:32:2d:
                    11:a0:83:7f:2f:7e:14:44:d9:31:a1:43:f4:56:f8:
                    27:35:87:9a:e8:28:ca:5e:b8:b7:7d:b6:06:98:c5:
                    06:52:09:1e:00:2c:db:87:fe:ed:57:f8:34:59:ed:
                    11:a6:c8:9d:13:8a:14:e0:22:18:00:d6:1a:9e:8e:
                    54:4b:dc:1b:2a:81:16:39:d5:30:38:1b:a8:58:c3:
                    c4:22:c6:e7:e9:13:0b:b0:06:bd:4d:74:01:e5:79:
                    ee:8f:4b:82:86:5a:04:25:41:52:04:51:d0:29:29:
                    35:f3:a1:39:63:af:10:66:73:ea:74:e3:7c:6d:af:
                    e2:6d:70:cb:8c:4d:36:98:56:8f:4a:b9:65:df:5c:
                    55:67:f0:af:c6:12:64:4a:fc:93:c9:51:64:05:fa:
                    d4:c3:66:6a:41:54:d8:45:df:d0:6a:d4:48:8a:c8:
                    e0:be:7f:b8:81:af:eb:51:16:f8:04:58:96:04:14:
                    8a:22:cf:65:43:30:8c:fd:bb:77:d3:9c:14:b4:09:
                    2b:3b:06:e8:f5:7a:88:a0:d0:9a:14:96:c3:99:56:
                    f4:59:3a:74:d7:42:c6:cb:d0:aa:ca:0c:a8:57:ad:
                    e2:50:f9:17:31:8b:b1:cb:49:3c:2b:ec:6f:f8:9c:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:B2:89:41:96:8F:F3:35:5B:4F:98:6B:C3:47:70:2B:80:A7:E3
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:88:6b:b8:8b:85:d4:d3:1a:0d:85:6e:86:8a:d6:69:7f:
         cc:87:28:1b:f0:68:15:b9:c7:6b:81:cb:2b:05:b1:05:0b:25:
         18:3b:d0:75:06:a0:f5:ce:e6:ba:87:85:8a:f0:79:83:06:81:
         dc:6e:6e:ca:b9:1c:23:3d:0d:84:67:4f:7a:0d:ff:65:e2:1e:
         9f:06:d6:72:7f:66:a7:42:f9:c6:0a:24:4c:dd:59:12:96:cb:
         5c:3e:aa:ed:4f:2e:de:46:17:79:ec:08:8f:3e:69:2d:03:a7:
         36:df:a0:9a:80:f7:1e:d4:4a:35:3a:cc:f0:06:28:0f:eb:7b:
         9c:a8:f9:e6:b6:44:bc:ad:5b:8d:fc:cd:47:23:4d:e3:7e:99:
         59:e7:2e:df:db:d3:8e:99:d7:bc:fa:75:b3:d7:8a:6f:45:a6:
         11:78:db:c0:da:2b:f4:5e:51:ed:71:c4:1c:14:89:d5:d5:f5:
         a3:ee:1c:15:f9:c3:f5:c8:c3:05:ef:97:99:89:92:29:4a:e8:
         be:07:a3:04:4d:79:b9:2c:d1:1d:fc:11:30:05:6f:c4:61:cf:
         b8:73:48:4d:0b:c6:50:ed:d0:3e:86:42:95:fa:a8:ae:bc:c1:
         d2:5c:09:44:52:db:e5:fb:88:c8:cc:a1:da:c3:73:cd:5a:06:
         5b:a1:08:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApFdL3HkFZz5I1028xQKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjYwNjEzMTEwMDU2WhcNMjYwNjE0MTEwMDU2WjAzMTEwLwYDVQQD
Eyg5ZTViYjI4OTQxOTY4ZmYzMzU1YjRmOTg2YmMzNDc3MDJiODBhN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYuVb6lD0cU8riZJMi0RoIN/L34U
RNkxoUP0VvgnNYea6CjKXri3fbYGmMUGUgkeACzbh/7tV/g0We0RpsidE4oU4CIY
ANYano5US9wbKoEWOdUwOBuoWMPEIsbn6RMLsAa9TXQB5Xnuj0uChloEJUFSBFHQ
KSk186E5Y68QZnPqdON8ba/ibXDLjE02mFaPSrll31xVZ/CvxhJkSvyTyVFkBfrU
w2ZqQVTYRd/QatRIisjgvn+4ga/rURb4BFiWBBSKIs9lQzCM/bt305wUtAkrOwbo
9XqIoNCaFJbDmVb0WTp010LGy9CqygyoV63iUPkXMYuxy0k8K+xv+Jz7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5bsolBlo/zNVtPmGvDR3ArgKfjMB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2+Ia7iL
hdTTGg2FboaK1ml/zIcoG/BoFbnHa4HLKwWxBQslGDvQdQag9c7muoeFivB5gwaB
3G5uyrkcIz0NhGdPeg3/ZeIenwbWcn9mp0L5xgokTN1ZEpbLXD6q7U8u3kYXeewI
jz5pLQOnNt+gmoD3HtRKNTrM8AYoD+t7nKj55rZEvK1bjfzNRyNN436ZWecu39vT
jpnXvPp1s9eKb0WmEXjbwNor9F5R7XHEHBSJ1dX1o+4cFfnD9cjDBe+XmYmSKUro
vgejBE15uSzRHfwRMAVvxGHPuHNITQvGUO3QPoZClfqorrzB0lwJRFLb5fuIyMyh
2sNzzVoGW6EIXw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:59 2026 by rpki-client