Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          IssAS4qyd5/xqFt7kBvuTHk9Gb7x6n1r/uotR5vNU7M=
Subject key identifier:   E4:67:1C:1E:80:35:CD:6B:DD:E9:68:1A:74:64:04:00:F9:C7:A6:BE
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       019EBF5ADC78ADE4EF0FC4556E029DAFDD9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          0653
Signing time:             Sat 13 Jun 2026 05:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:03 +0000
Files and hashes:         1: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (hash: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ=)
                          2: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: q9fL473illpjqrtPzyQ59jxhN2BTkYjPtUF7DMbz9yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:dc:78:ad:e4:ef:0f:c4:55:6e:02:9d:af:dd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: Jun 13 05:01:03 2026 GMT
            Not After : Jun 14 05:01:03 2026 GMT
        Subject: CN=e4671c1e8035cd6bdde9681a74640400f9c7a6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:ed:97:19:92:8f:23:0b:0e:50:25:50:80:
                    e1:72:56:f7:56:20:40:87:67:c8:51:23:cf:bd:f9:
                    1e:50:40:83:c4:8c:8d:26:b7:37:00:c0:f6:8c:ef:
                    2d:51:38:2b:f7:00:cf:cc:b2:2a:be:78:86:ad:c4:
                    29:88:7b:b3:79:c3:c5:f5:bf:ff:68:57:e3:3c:3d:
                    46:31:1b:b3:a9:0b:99:7e:5e:f7:6f:17:88:9e:82:
                    d5:97:03:64:53:73:63:45:ba:b9:fd:09:ea:7d:67:
                    ca:6f:15:d5:2e:20:90:2a:e6:c0:8b:d0:7c:e1:de:
                    0c:e0:46:89:a6:5c:cf:b6:64:81:18:f5:fb:f7:6b:
                    c4:55:d4:ec:eb:bf:c3:eb:4f:a4:6c:9c:cb:d8:26:
                    72:be:6a:68:e6:0e:b5:3f:25:7e:81:a6:37:22:88:
                    87:53:0c:2a:2c:fd:e5:11:4f:2c:15:a2:1e:cd:41:
                    fb:89:fa:88:0b:78:94:28:3c:6f:f8:35:06:e7:12:
                    53:7f:3b:44:63:9e:49:44:6d:ff:3e:6d:6a:4a:5b:
                    bc:18:54:92:99:24:e4:87:54:34:5b:e8:fc:91:bb:
                    f0:3c:2e:66:77:4e:96:a5:2d:a8:ef:3b:2c:b9:45:
                    c9:bc:0f:8b:43:c6:c3:14:9c:0f:b2:d6:ea:d5:c5:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:1C:1E:80:35:CD:6B:DD:E9:68:1A:74:64:04:00:F9:C7:A6:BE
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:13:db:2f:42:1a:99:77:60:6b:44:00:ec:c7:47:f1:29:70:
         93:fc:52:00:e1:8c:15:73:30:66:d2:18:2f:76:4e:c7:5a:10:
         7e:1e:94:27:5b:63:47:64:45:b2:f2:00:5a:01:8a:35:9d:e9:
         54:14:1f:1c:f8:39:eb:17:91:8d:30:ee:a0:9d:50:40:39:87:
         ac:b9:14:82:8a:1a:c3:d1:d5:7f:42:f0:6a:d5:88:77:51:84:
         24:e2:89:b5:8e:43:cc:42:0c:43:83:2b:2a:ff:21:9f:ff:8c:
         b3:ed:15:56:dd:fd:6a:c6:25:36:8a:aa:e6:f9:1f:1e:90:d6:
         33:f3:d1:b1:07:73:39:27:d5:bf:96:ee:4b:b5:5e:f5:8f:c2:
         ed:35:b9:6c:b2:a1:46:3c:ed:0e:38:48:e4:d7:b2:bc:79:ec:
         f1:79:46:5b:a7:26:bb:06:b8:ac:1a:20:81:be:51:90:77:8b:
         0c:1a:e5:f5:60:1a:f8:f2:5f:e3:b7:d1:5e:44:f9:28:a3:44:
         40:1a:17:21:79:01:a1:94:04:09:51:c2:63:7d:f0:cf:f0:b8:
         b7:6f:45:d4:a7:31:63:90:c7:46:c3:0f:62:98:b0:d0:d4:9e:
         9e:bf:d4:86:a7:b4:8c:71:8a:29:2d:54:3d:f2:71:46:94:27:
         78:f2:a6:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wtx4reTvD8RVbgKdr92aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw
Y2YwNGEwHhcNMjYwNjEzMDUwMTAzWhcNMjYwNjE0MDUwMTAzWjAzMTEwLwYDVQQD
EyhlNDY3MWMxZTgwMzVjZDZiZGRlOTY4MWE3NDY0MDQwMGY5YzdhNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmntlxmSjyMLDlAlUIDhclb3ViBA
h2fIUSPPvfkeUECDxIyNJrc3AMD2jO8tUTgr9wDPzLIqvniGrcQpiHuzecPF9b//
aFfjPD1GMRuzqQuZfl73bxeInoLVlwNkU3NjRbq5/QnqfWfKbxXVLiCQKubAi9B8
4d4M4EaJplzPtmSBGPX792vEVdTs67/D60+kbJzL2CZyvmpo5g61PyV+gaY3IoiH
UwwqLP3lEU8sFaIezUH7ifqIC3iUKDxv+DUG5xJTfztEY55JRG3/Pm1qSlu8GFSS
mSTkh1Q0W+j8kbvwPC5md06WpS2o7zssuUXJvA+LQ8bDFJwPstbq1cUSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORnHB6ANc1r3eloGnRkBAD5x6a+MB8GA1UdIwQY
MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt
Njk1ZDgyOTk5MjZlLzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl
LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxPbL0Ia
mXdga0QA7MdH8Slwk/xSAOGMFXMwZtIYL3ZOx1oQfh6UJ1tjR2RFsvIAWgGKNZ3p
VBQfHPg56xeRjTDuoJ1QQDmHrLkUgooaw9HVf0LwatWId1GEJOKJtY5DzEIMQ4Mr
Kv8hn/+Ms+0VVt39asYlNoqq5vkfHpDWM/PRsQdzOSfVv5buS7Ve9Y/C7TW5bLKh
RjztDjhI5NeyvHns8XlGW6cmuwa4rBoggb5RkHeLDBrl9WAa+PJf47fRXkT5KKNE
QBoXIXkBoZQECVHCY33wz/C4t29F1KcxY5DHRsMPYpiw0NSenr/Uhqe0jHGKKS1U
PfJxRpQnePKmkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:22 2026 by rpki-client