Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          0PDtU5gkG22ZdTa9r227dKUBF2ifaH1RLCN2yNZZH74=
Subject key identifier:   BF:0C:6B:19:01:1E:DC:9D:F2:CC:55:BD:25:1D:0A:5D:D2:A7:F6:4C
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019EC2C93275532E66A62DA3AA7E7874023F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          042E
Signing time:             Sat 13 Jun 2026 21:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:25 +0000
Files and hashes:         1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
                          2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: 5ks/G8yLAtqs4uWhIjpmGy0KOtQGx8nt0GAMnaXU0d4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:32:75:53:2e:66:a6:2d:a3:aa:7e:78:74:02:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Jun 13 21:00:25 2026 GMT
            Not After : Jun 14 21:00:25 2026 GMT
        Subject: CN=bf0c6b19011edc9df2cc55bd251d0a5dd2a7f64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:4f:32:e8:d3:68:4c:80:c3:52:aa:57:0f:
                    cd:5b:bb:01:c0:91:9f:be:03:5c:90:2a:d3:8e:9e:
                    51:67:a4:66:40:c7:80:2c:93:26:c0:00:7c:0b:26:
                    2b:ee:d7:6c:0d:11:db:25:bb:4c:1f:18:cd:09:a6:
                    80:e8:4f:f2:a7:0d:98:80:e4:98:e0:f1:00:92:8a:
                    0b:90:24:ea:01:3d:35:43:0d:e2:eb:31:c5:9a:8c:
                    d6:e7:51:f5:c8:a6:c1:92:25:87:41:6d:ff:82:6c:
                    04:b3:05:18:4e:4e:05:80:0b:12:98:17:83:14:57:
                    28:52:42:3e:01:c0:d5:0c:0c:f0:68:ba:59:03:20:
                    28:ae:07:82:01:1f:43:8f:68:11:6b:3e:a1:6e:dc:
                    f4:14:27:67:87:23:2b:bf:d1:83:b0:96:82:65:5e:
                    72:e1:67:40:25:0e:9e:df:65:a2:b0:4c:50:01:1f:
                    10:4f:fa:0a:a4:46:9a:0c:7f:1f:d0:fb:93:2a:2d:
                    ab:1c:a9:bd:d8:61:10:36:11:a9:17:c4:91:a9:d2:
                    86:c1:d3:95:ce:cb:44:26:bc:97:fa:4d:cd:67:27:
                    80:fd:31:03:1b:54:de:8b:48:e4:93:b2:c3:99:17:
                    4c:28:fd:2e:90:c1:00:be:9c:ce:d2:fd:aa:95:a5:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:6B:19:01:1E:DC:9D:F2:CC:55:BD:25:1D:0A:5D:D2:A7:F6:4C
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:2f:56:80:35:20:50:0b:ea:85:ed:08:0e:09:29:3b:0e:
         8c:1c:30:15:5b:ea:bd:a4:90:31:99:ce:02:ff:88:85:a1:e8:
         05:4d:82:5e:09:f9:c3:6d:32:44:45:88:85:2e:4b:08:4d:ff:
         a4:8e:5c:83:3d:5a:63:d6:92:c0:2b:56:4a:ba:b1:53:2f:37:
         70:fe:e3:49:6e:c4:41:a3:0c:ca:6c:67:26:4b:89:6b:83:9a:
         c0:49:ad:67:c2:d2:52:a1:7c:fd:5a:9e:96:5a:78:1a:0d:88:
         82:05:16:a0:4b:12:37:eb:6c:58:0c:5d:ba:ce:e1:e7:db:5d:
         12:99:f2:ad:bb:27:e3:89:0b:92:60:18:4f:99:47:b0:0e:a6:
         e3:dc:46:bf:5c:83:d1:4f:ce:74:f8:39:73:b8:81:d3:dc:b6:
         f0:8d:6d:62:75:9a:a9:3b:94:1f:d4:0e:e1:c9:f8:b2:5d:9e:
         51:81:fc:f1:21:11:fc:a2:67:b3:65:18:37:79:28:fc:6c:01:
         83:1d:12:4d:b5:9d:77:b4:ac:f6:61:be:b5:65:f6:35:99:b6:
         e8:08:65:49:62:eb:a7:e6:41:82:e9:32:98:19:ef:9d:af:41:
         28:10:2b:b2:18:1f:1f:f5:c6:a9:d0:15:72:be:5e:4c:05:a8:
         d1:67:f9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyTJ1Uy5mpi2jqn54dAI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy
ZTM2ZWYwHhcNMjYwNjEzMjEwMDI1WhcNMjYwNjE0MjEwMDI1WjAzMTEwLwYDVQQD
EyhiZjBjNmIxOTAxMWVkYzlkZjJjYzU1YmQyNTFkMGE1ZGQyYTdmNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JhPMujTaEyAw1KqVw/NW7sBwJGf
vgNckCrTjp5RZ6RmQMeALJMmwAB8CyYr7tdsDRHbJbtMHxjNCaaA6E/ypw2YgOSY
4PEAkooLkCTqAT01Qw3i6zHFmozW51H1yKbBkiWHQW3/gmwEswUYTk4FgAsSmBeD
FFcoUkI+AcDVDAzwaLpZAyAorgeCAR9Dj2gRaz6hbtz0FCdnhyMrv9GDsJaCZV5y
4WdAJQ6e32WisExQAR8QT/oKpEaaDH8f0PuTKi2rHKm92GEQNhGpF8SRqdKGwdOV
zstEJryX+k3NZyeA/TEDG1Tei0jkk7LDmRdMKP0ukMEAvpzO0v2qlaXVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8MaxkBHtyd8sxVvSUdCl3Sp/ZMMB8GA1UdIwQY
MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt
ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4
LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx8vVoA1
IFAL6oXtCA4JKTsOjBwwFVvqvaSQMZnOAv+IhaHoBU2CXgn5w20yREWIhS5LCE3/
pI5cgz1aY9aSwCtWSrqxUy83cP7jSW7EQaMMymxnJkuJa4OawEmtZ8LSUqF8/Vqe
llp4Gg2IggUWoEsSN+tsWAxdus7h59tdEpnyrbsn44kLkmAYT5lHsA6m49xGv1yD
0U/OdPg5c7iB09y28I1tYnWaqTuUH9QO4cn4sl2eUYH88SER/KJns2UYN3ko/GwB
gx0STbWdd7Ss9mG+tWX2NZm26AhlSWLrp+ZBgukymBnvna9BKBArshgfH/XGqdAV
cr5eTAWo0Wf50Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:59 2026 by rpki-client