Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          qRoPJ63k4AsgSwMeJ7hRCMWZTGBBc53G1S8gidEEeOU=
Subject key identifier:   BA:4B:E4:AF:6B:AF:F7:18:17:D4:E2:C3:5B:8D:10:07:D4:0B:C7:3B
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       019EBAA32F5433D5422034239D4BE98ABD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0D8F
Signing time:             Fri 12 Jun 2026 07:01:57 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:57 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:57 +0000
Files and hashes:         1: OY-F0hhlIFsLBb-jhlJlozNHKDw.roa (hash: JseVfilW9clKoxV/EybNUEX+K2HrPNZ0B5i1na1LMg8=)
                          2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: JymTVH3mElzz9qjnuHbx6tdQzL+/7nXUPHXINc2svFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a3:2f:54:33:d5:42:20:34:23:9d:4b:e9:8a:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Jun 12 07:01:57 2026 GMT
            Not After : Jun 13 07:01:57 2026 GMT
        Subject: CN=ba4be4af6baff71817d4e2c35b8d1007d40bc73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:0d:95:67:ed:c8:f2:0b:95:82:c2:30:50:
                    d4:25:87:03:62:ea:f1:9e:f3:01:b7:18:69:8f:15:
                    04:6f:75:00:66:78:ca:c9:39:38:54:f5:e8:e7:2a:
                    2f:a4:65:0f:2b:6c:2e:9a:a4:97:61:cd:a3:f8:51:
                    1a:e6:7f:80:92:b0:b7:69:e2:90:60:32:6b:81:c9:
                    8b:e1:1f:e8:09:7b:4c:90:cd:00:bf:ef:d9:56:48:
                    53:2f:27:0b:a2:b6:12:d3:ce:05:b2:cf:0b:34:ad:
                    96:91:60:b6:4a:7e:a8:8a:f8:8d:e5:b0:b5:7b:5e:
                    02:0c:9c:8c:7d:58:1e:d8:5a:18:3c:08:df:28:8c:
                    94:f0:96:a5:c4:51:1f:dd:87:31:74:47:95:d9:b5:
                    61:b8:98:01:3e:49:52:ee:5f:84:f6:ad:7d:5b:f2:
                    44:08:2d:62:8e:1e:22:1f:ee:a8:00:99:fd:ff:74:
                    25:ab:53:7a:7b:77:c1:51:68:a0:0c:c9:83:93:5a:
                    d9:46:56:a6:5c:b7:1c:37:d4:5d:6e:f3:ef:99:de:
                    19:da:54:a2:f2:66:33:ba:5e:89:25:c0:b9:4b:a4:
                    f9:ce:b8:32:ec:ac:c4:4b:6d:b3:12:67:37:d3:0c:
                    1e:73:6d:6e:36:3d:aa:50:a1:c7:40:aa:7d:90:7e:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:E4:AF:6B:AF:F7:18:17:D4:E2:C3:5B:8D:10:07:D4:0B:C7:3B
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:5f:cb:0d:70:ff:d7:53:09:47:d2:67:6f:36:5e:0b:0e:
         95:4f:93:4c:3c:d4:6f:31:8b:a9:ea:3f:df:03:bc:51:51:df:
         e4:c0:fe:2e:91:05:6c:44:36:52:f6:c4:e3:59:d8:39:9e:7c:
         64:63:88:eb:b5:95:21:78:32:01:c4:3f:eb:a5:0a:05:23:f3:
         1d:6a:f4:be:74:23:1c:81:8e:4e:97:fe:27:2f:aa:48:fd:31:
         12:ac:1a:38:d0:e0:d7:a6:ef:05:40:69:18:7c:d3:23:47:fc:
         54:87:dd:f8:64:d2:41:6b:72:e5:10:96:13:07:c7:d5:17:1d:
         ff:0c:b8:9f:bc:8f:30:04:67:d7:88:e4:29:58:eb:ba:dd:72:
         46:b8:c4:36:f0:c3:2f:94:cf:d6:6f:63:d5:fc:34:72:d6:67:
         b2:9c:b5:7e:00:33:f1:77:84:2e:0c:0b:a9:b9:b7:fe:68:e1:
         43:c5:19:1b:fe:0d:8b:52:ec:db:9e:b3:01:01:96:93:06:71:
         1b:44:eb:af:98:f3:f5:3d:9c:d7:b3:ad:3f:fd:ab:66:af:e4:
         91:5d:67:49:a3:97:83:1d:d1:5e:df:78:53:01:10:4d:bd:7f:
         6f:48:ba:fb:29:c8:17:75:a9:60:cb:f6:38:c8:fb:5c:38:c3:
         17:37:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:11 2026 by rpki-client