Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File:                     KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier:          SfhjL51NOF+dK/W1BEl4GQhircF2H9jpKdqGHcWlevs=
Subject key identifier:   95:4E:53:22:10:79:A4:7B:16:68:52:46:2E:39:C8:7E:53:E5:2B:51
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer:       /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial:       019ED507071A09BED821AE33FA9099DA8610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number:          0C9F
Signing time:             Wed 17 Jun 2026 10:01:08 +0000
Manifest this update:     Wed 17 Jun 2026 10:01:08 +0000
Manifest next update:     Thu 18 Jun 2026 10:01:08 +0000
Files and hashes:         1: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (hash: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=)
                          2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: nyui3forkWxtIor+pLsbk4wH+z6hv0X2FwPv/P36buY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:07:07:1a:09:be:d8:21:ae:33:fa:90:99:da:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
        Validity
            Not Before: Jun 17 10:01:08 2026 GMT
            Not After : Jun 18 10:01:08 2026 GMT
        Subject: CN=954e53221079a47b166852462e39c87e53e52b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:c0:a0:f1:48:08:23:4c:31:16:a1:51:2b:
                    d1:cd:9d:f5:87:e5:4e:19:fd:a3:09:81:b5:a1:30:
                    87:01:c4:37:0a:66:c4:d8:ba:51:7d:41:65:aa:fb:
                    5f:bf:79:cf:c8:9b:9f:c1:d8:e1:1d:dc:3d:91:ee:
                    a3:40:89:08:9b:01:ce:a3:b9:76:69:da:5f:60:05:
                    79:eb:cd:5d:0c:48:6d:98:e0:d5:b2:95:b4:df:8f:
                    57:3e:2c:f9:78:a7:65:a6:ec:ed:2b:d0:3d:25:ad:
                    ea:73:e4:62:12:30:3c:1a:4c:b2:47:5d:43:93:d2:
                    b6:29:be:dc:6c:56:df:26:b7:dd:f0:26:8c:73:71:
                    81:92:4d:41:74:3b:93:be:59:57:35:7a:4b:cb:a9:
                    24:d0:fd:f8:ac:f0:dc:89:29:8c:8d:5e:63:22:77:
                    d5:47:5c:10:76:a6:0d:fa:1b:91:78:25:d0:eb:de:
                    ff:98:91:ed:f6:20:46:74:6a:87:b3:3d:94:6c:30:
                    b1:26:5b:35:b4:92:55:74:6f:ba:bc:fb:7d:09:31:
                    32:d4:54:2a:76:5b:2d:37:21:04:5c:79:20:b0:02:
                    ba:12:3e:99:c5:96:05:ff:fc:e9:a4:97:c4:ee:b9:
                    27:fa:9f:23:10:24:a6:fb:2c:fc:80:53:01:b2:43:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4E:53:22:10:79:A4:7B:16:68:52:46:2E:39:C8:7E:53:E5:2B:51
            X509v3 Authority Key Identifier:
                keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:30:94:7e:2e:3d:b0:c8:ea:16:19:fd:cf:21:84:dd:12:
         6c:1d:b8:07:56:24:b0:3a:67:9b:c6:25:6a:e7:fd:dc:57:f2:
         a7:4f:06:df:d9:5e:ea:e5:f2:5a:e5:18:44:86:77:86:bb:59:
         2d:dc:6c:ab:29:57:03:fa:a2:e9:02:55:c6:c2:58:13:a1:a5:
         85:34:be:46:85:3d:64:02:b3:37:5f:0c:48:84:9c:65:66:83:
         3b:22:e6:09:00:a2:17:f4:f2:bf:a2:a7:76:2f:1c:ec:60:38:
         0a:82:51:2e:fa:8f:6d:84:53:91:ac:6d:d7:ea:6c:5a:c8:20:
         28:85:12:7c:8a:a0:60:63:bf:0c:31:55:9b:c5:b5:0f:03:b1:
         ec:68:0c:06:7a:15:a7:0d:08:83:09:2d:ce:51:df:dd:4f:e8:
         78:f2:96:cb:ea:48:72:e0:b0:a4:8a:f6:83:e2:6a:c3:26:b0:
         2e:ed:41:c9:91:07:90:b4:a4:a4:45:fd:9b:65:cb:75:e6:a9:
         e9:f8:c5:8d:15:f5:ef:80:ee:54:38:85:f8:ab:22:4b:c4:b6:
         70:48:ce:2a:45:0d:7b:f6:ee:53:43:1c:33:c4:a9:bb:4f:a3:
         77:50:53:2b:df:f1:f9:91:0e:19:bc:4a:98:52:5b:db:3d:a1:
         83:b8:f9:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VBwcaCb7YIa4z+pCZ2oYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjYwNjE3MTAwMTA4WhcNMjYwNjE4MTAwMTA4WjAzMTEwLwYDVQQD
Eyg5NTRlNTMyMjEwNzlhNDdiMTY2ODUyNDYyZTM5Yzg3ZTUzZTUyYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J7AoPFICCNMMRahUSvRzZ31h+VO
Gf2jCYG1oTCHAcQ3CmbE2LpRfUFlqvtfv3nPyJufwdjhHdw9ke6jQIkImwHOo7l2
adpfYAV5681dDEhtmODVspW0349XPiz5eKdlpuztK9A9Ja3qc+RiEjA8GkyyR11D
k9K2Kb7cbFbfJrfd8CaMc3GBkk1BdDuTvllXNXpLy6kk0P34rPDciSmMjV5jInfV
R1wQdqYN+huReCXQ697/mJHt9iBGdGqHsz2UbDCxJls1tJJVdG+6vPt9CTEy1FQq
dlstNyEEXHkgsAK6Ej6ZxZYF//zppJfE7rkn+p8jECSm+yz8gFMBskM8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVOUyIQeaR7FmhSRi45yH5T5StRMB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAswlH4u
PbDI6hYZ/c8hhN0SbB24B1YksDpnm8Ylauf93Ffyp08G39le6uXyWuUYRIZ3hrtZ
LdxsqylXA/qi6QJVxsJYE6GlhTS+RoU9ZAKzN18MSIScZWaDOyLmCQCiF/Tyv6Kn
di8c7GA4CoJRLvqPbYRTkaxt1+psWsggKIUSfIqgYGO/DDFVm8W1DwOx7GgMBnoV
pw0IgwktzlHf3U/oePKWy+pIcuCwpIr2g+JqwyawLu1ByZEHkLSkpEX9m2XLdeap
6fjFjRX174DuVDiF+KsiS8S2cEjOKkUNe/buU0McM8Spu0+jd1BTK9/x+ZEOGbxK
mFJb2z2hg7j5QQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 16:40:53 2026 by rpki-client