Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          EyMF33J0CXrrCIyEESB7PurlEJvuaIxzxMfW4iWW8Mo=
Subject key identifier:   EA:57:11:A7:AD:6C:EE:1B:C2:24:5A:48:E2:C1:B7:F5:06:CC:E5:23
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       019E758A2751D9132FE267058C0F56F5B10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          0CB7
Signing time:             Fri 29 May 2026 21:00:48 +0000
Manifest this update:     Fri 29 May 2026 21:00:48 +0000
Manifest next update:     Sat 30 May 2026 21:00:48 +0000
Files and hashes:         1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: 18+iJec/ekgbPJwcgDqFbI4bNMSW0eW6fxw6rtidifw=)
                          3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
                          4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:75:8a:27:51:d9:13:2f:e2:67:05:8c:0f:56:f5:b1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: May 29 21:00:48 2026 GMT
            Not After : May 30 21:00:48 2026 GMT
        Subject: CN=ea5711a7ad6cee1bc2245a48e2c1b7f506cce523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:2f:0c:a0:a3:0a:a4:29:69:13:4a:a7:53:
                    bb:f4:ea:a7:6d:79:b1:63:c7:72:05:b3:51:90:da:
                    2c:78:60:ad:70:64:e2:0f:25:b7:8a:0b:f9:de:36:
                    fa:08:80:fc:a1:64:16:7d:44:94:33:a9:85:ac:85:
                    4e:79:57:1e:eb:6b:8e:5b:4d:b8:85:48:df:94:15:
                    8e:46:80:bd:41:4a:c0:3d:63:97:85:9f:9c:25:03:
                    d4:65:50:a9:c9:56:a3:b9:2b:02:23:74:3a:0f:b8:
                    d5:d4:04:ee:27:d0:fd:27:ba:b6:a8:8d:16:e9:cb:
                    6c:ef:b6:1a:e7:b2:45:2f:fc:ab:e1:bf:73:88:08:
                    f9:0b:fa:b0:20:69:e9:48:5e:90:d7:e9:e0:e9:0e:
                    97:8c:68:0c:96:92:fd:16:4d:19:e2:15:bd:05:31:
                    1b:bc:59:5e:94:8d:30:8c:50:2d:08:44:e8:36:5a:
                    e0:c0:1f:58:f6:c9:0d:56:79:0f:c3:c6:e2:b7:1a:
                    46:14:e5:a6:22:99:77:85:f1:b4:19:25:37:61:42:
                    8e:c0:6c:d6:b5:c6:89:3d:a1:ef:e1:9c:59:d4:d1:
                    4e:e6:31:ad:5f:11:b1:ba:9d:17:a5:e1:08:db:01:
                    bc:b1:a4:6a:ea:aa:38:8c:e1:c3:4b:b7:10:5a:fd:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:11:A7:AD:6C:EE:1B:C2:24:5A:48:E2:C1:B7:F5:06:CC:E5:23
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:6c:0c:42:a8:0b:e4:6b:d1:ce:b0:d3:01:ec:89:15:3a:
         6f:e1:a2:0a:3e:01:4d:05:f4:d9:ff:7e:e7:44:cc:bc:d2:a2:
         23:2e:76:d7:30:db:73:66:17:c3:bf:91:75:8a:f5:7c:dc:06:
         9f:8b:af:82:53:d1:f1:fc:54:a8:c1:24:cd:a5:25:89:cc:d5:
         71:f3:6f:b0:0e:13:84:f8:cf:5c:71:fe:c2:a7:b8:80:dc:16:
         2d:60:c9:2d:db:dc:af:bb:9e:76:14:e4:6c:b6:36:2e:b3:64:
         5b:7e:c7:d3:60:08:0c:d0:d1:e4:02:8f:6b:63:11:7a:7e:88:
         c5:f1:e2:8e:82:57:78:26:a7:9d:b7:5e:f1:68:70:db:6c:d4:
         bc:fd:75:82:9f:e3:40:8f:16:6c:0e:f8:4f:32:9b:f4:06:15:
         72:d8:b2:71:ee:f1:be:74:c1:08:04:a4:61:49:4f:df:f5:68:
         c9:d4:1e:e0:e3:ae:1a:a4:3d:d1:b6:f2:b9:48:7a:66:b7:47:
         d5:31:2d:eb:58:d6:56:70:3b:1d:07:3f:82:18:9f:70:9f:2b:
         81:89:cd:da:d8:56:27:bb:26:c9:44:07:f9:c3:27:62:8e:ad:
         0d:65:cf:d0:25:5d:a3:f1:b4:98:81:10:07:bc:48:fb:e0:5f:
         e3:bc:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:41:29 2026 by rpki-client