Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier:          sViej2e9C94yRXVDhcN0mIi++4moSAbxddNPRiZgNwo=
Subject key identifier:   1E:30:AB:E4:E8:C4:48:9A:FA:FC:7B:E0:03:F4:83:61:95:65:E3:B3
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       019D98F4BE8AD3F38081AB92C714A03B83C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number:          0883
Signing time:             Fri 17 Apr 2026 01:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:09 +0000
Files and hashes:         1: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 8D2mGoMDKZMFluvb3fyBC4dGJ6DYkjO+eW5U+LMrJus=)
                          2: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (hash: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:be:8a:d3:f3:80:81:ab:92:c7:14:a0:3b:83:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Apr 17 01:01:09 2026 GMT
            Not After : Apr 18 01:01:09 2026 GMT
        Subject: CN=1e30abe4e8c4489afafc7be003f483619565e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:e6:9d:9f:83:3f:5b:7b:73:4d:33:7a:a1:
                    fa:e3:a9:de:1c:f1:9f:22:ad:bf:b9:0c:3c:64:13:
                    be:af:91:37:b4:35:93:89:32:ed:9c:97:92:86:62:
                    34:4f:83:6a:db:ce:87:f7:b5:b9:46:12:2e:b2:dc:
                    df:72:a4:23:59:d3:cb:4a:7d:db:62:a0:02:37:1b:
                    d0:04:8c:7a:ec:ae:ac:5c:4f:fc:57:a1:50:76:31:
                    9a:72:7d:58:39:7a:dd:27:f3:ba:99:f5:d7:03:ed:
                    0c:79:22:fe:7a:40:ca:6e:02:8a:40:43:e4:89:34:
                    fd:47:3b:22:49:2e:89:2e:cf:84:46:5d:b0:f1:49:
                    0b:15:18:e9:0e:85:41:4c:c9:f1:96:38:23:89:27:
                    3e:07:75:14:c2:4a:51:24:8e:c2:03:14:f7:39:e1:
                    42:63:8c:33:46:21:d3:db:21:a4:d3:a6:dd:b5:90:
                    9d:17:6b:b8:3c:d3:e5:9b:59:ae:c8:b3:25:45:a0:
                    10:2e:20:61:13:b7:24:72:72:f3:e0:3b:7d:18:23:
                    b1:86:9e:78:02:19:5b:1f:46:27:bc:20:dc:71:a2:
                    37:9a:07:d1:04:b6:7a:dc:89:f6:44:ac:5f:c5:25:
                    2c:a8:93:f0:59:2e:d1:1f:87:23:4b:b4:76:f7:dc:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:AB:E4:E8:C4:48:9A:FA:FC:7B:E0:03:F4:83:61:95:65:E3:B3
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:92:50:35:6e:52:82:5f:7a:89:ed:a9:5b:00:4d:99:e9:
         2c:99:27:18:8c:dd:fb:15:7a:54:87:e9:fe:f2:7d:7e:79:4e:
         0a:51:52:0a:f7:9c:28:50:11:e5:12:0a:27:06:87:3f:f6:b1:
         60:ba:a7:c2:5e:f0:41:41:44:2d:92:e7:ce:f2:8f:9b:06:97:
         25:f3:27:a4:42:7c:60:67:67:1b:f9:af:f2:14:e0:a5:55:ed:
         8a:25:c0:c0:ce:8d:3a:37:6b:d8:66:26:a0:0b:76:e1:28:09:
         49:a4:f6:a2:e4:22:de:4d:c5:a6:de:4a:e5:bb:e6:3b:28:f6:
         5b:9b:d6:cb:3b:7c:3d:47:99:e8:7b:69:8e:4b:b3:5f:07:40:
         b3:05:79:eb:08:87:dc:e9:5d:5c:4a:82:06:5a:b9:1c:82:3e:
         ab:b8:59:6d:49:2d:e9:fe:3a:8a:b1:75:db:7c:e9:0d:52:53:
         b2:23:97:85:d0:1b:e9:8d:d8:29:63:4e:93:7c:4d:3d:0c:2d:
         a5:2d:93:b4:ae:68:c0:ba:aa:1d:d1:25:71:86:b0:1d:8e:35:
         84:d5:dd:1d:44:5c:9a:59:1a:47:76:f7:d2:41:e4:88:cc:2d:
         ba:f0:4f:36:d8:81:2d:4b:d0:4a:0d:a3:e2:c6:ae:ab:c4:8e:
         06:47:10:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9L6K0/OAgauSxxSgO4PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTZkZWY4NDU4ZmQ4ZWIyZWQ3NTRhYzJlOTBkMzUwNWEz
MmFhODIwHhcNMjYwNDE3MDEwMTA5WhcNMjYwNDE4MDEwMTA5WjAzMTEwLwYDVQQD
EygxZTMwYWJlNGU4YzQ0ODlhZmFmYzdiZTAwM2Y0ODM2MTk1NjVlM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrmnZ+DP1t7c00zeqH646neHPGf
Iq2/uQw8ZBO+r5E3tDWTiTLtnJeShmI0T4Nq286H97W5RhIustzfcqQjWdPLSn3b
YqACNxvQBIx67K6sXE/8V6FQdjGacn1YOXrdJ/O6mfXXA+0MeSL+ekDKbgKKQEPk
iTT9RzsiSS6JLs+ERl2w8UkLFRjpDoVBTMnxljgjiSc+B3UUwkpRJI7CAxT3OeFC
Y4wzRiHT2yGk06bdtZCdF2u4PNPlm1muyLMlRaAQLiBhE7ckcnLz4Dt9GCOxhp54
AhlbH0YnvCDccaI3mgfRBLZ63In2RKxfxSUsqJPwWS7RH4cjS7R299xtCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4wq+ToxEia+vx74AP0g2GVZeOzMB8GA1UdIwQY
MBaAFG1W3vhFj9jrLtdUrC6Q01BaMqqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQt
ODI4MWY3N2ViZDIyLzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zNmU3OWMtODQ3Mi00NjdiLTljMTQtODI4MWY3N2ViZDIy
LzEvYlZiZS1FV1AyT3N1MTFTc0xwRFRVRm95cW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg+SUDVu
UoJfeontqVsATZnpLJknGIzd+xV6VIfp/vJ9fnlOClFSCvecKFAR5RIKJwaHP/ax
YLqnwl7wQUFELZLnzvKPmwaXJfMnpEJ8YGdnG/mv8hTgpVXtiiXAwM6NOjdr2GYm
oAt24SgJSaT2ouQi3k3Fpt5K5bvmOyj2W5vWyzt8PUeZ6HtpjkuzXwdAswV56wiH
3OldXEqCBlq5HII+q7hZbUkt6f46irF123zpDVJTsiOXhdAb6Y3YKWNOk3xNPQwt
pS2TtK5owLqqHdElcYawHY41hNXdHURcmlkaR3b30kHkiMwtuvBPNtiBLUvQSg2j
4sauq8SOBkcQUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:36 2026 by rpki-client