Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File:                     v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier:          BHuJRaN6a/JuIkb4EJyFn9OPcssCnSmA+rZEx4hP4rI=
Subject key identifier:   F2:1F:95:63:DD:B8:19:54:A0:94:64:5D:2B:97:E1:BF:71:71:30:64
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer:       /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial:       019EB6C585FA94EC8290E01DFB53F5F74FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number:          1130
Signing time:             Thu 11 Jun 2026 13:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:58 +0000
Files and hashes:         1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
                          2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: C5nHd1hyMcKtbh2XvmiRM+neQ9A5xeobCHAfZx6gkSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:85:fa:94:ec:82:90:e0:1d:fb:53:f5:f7:4f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
        Validity
            Not Before: Jun 11 13:00:58 2026 GMT
            Not After : Jun 12 13:00:58 2026 GMT
        Subject: CN=f21f9563ddb81954a094645d2b97e1bf71713064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:69:2d:13:be:33:85:04:69:f4:0b:1e:d2:
                    f2:c9:0d:30:22:57:4c:da:36:2d:f4:b3:71:eb:96:
                    4b:e2:33:55:b3:71:bc:51:0a:99:3e:2f:f5:a1:1b:
                    f3:67:b2:d0:1f:f5:27:a1:8c:1c:f9:7f:67:5c:e9:
                    5c:83:25:3a:27:33:8c:c9:07:51:8a:57:51:79:e2:
                    4b:88:38:37:92:d3:7d:68:71:54:bb:48:ad:f6:da:
                    8b:4e:4d:d2:30:b6:40:79:7c:ce:94:18:e1:42:15:
                    fe:39:bb:37:4a:41:3e:35:34:c5:65:41:3d:91:6e:
                    70:7a:49:54:72:7b:4a:aa:3d:d2:c3:e9:c6:b7:76:
                    83:bf:f5:98:5f:3d:41:04:c6:eb:8c:2f:94:f2:03:
                    99:ce:e1:27:e2:72:61:5b:5e:55:59:67:1c:9d:8c:
                    a9:a2:22:68:97:fa:3b:e5:0b:72:1f:5d:68:a6:f0:
                    cd:3a:4f:34:eb:26:21:3e:c4:76:1c:b3:15:77:3c:
                    cc:13:4e:d9:c6:40:bc:dd:2f:2c:04:b7:4e:b1:29:
                    13:04:7d:1e:7b:dd:97:95:e6:1c:aa:58:a6:c7:40:
                    a0:54:dc:90:9c:8b:94:73:e2:31:50:21:26:ec:4c:
                    35:85:a5:82:40:18:3e:5c:fc:62:8f:96:b0:75:f0:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:95:63:DD:B8:19:54:A0:94:64:5D:2B:97:E1:BF:71:71:30:64
            X509v3 Authority Key Identifier:
                keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:2f:58:54:19:2c:4f:c6:0f:32:4e:c4:34:e5:73:b7:d0:
         aa:06:18:ec:86:a3:98:3a:f7:bf:a7:4b:e9:61:d6:fe:fd:fc:
         73:87:be:b4:54:bf:7d:23:c8:13:cf:6a:68:f9:ee:45:bb:e8:
         4d:4f:36:09:3f:98:87:83:98:c8:2b:95:be:b4:3c:b6:a5:66:
         2c:cd:ae:23:06:f9:75:01:50:47:50:e1:2b:f4:2d:f7:28:98:
         59:72:a6:2c:72:70:50:22:1f:4b:f6:93:ed:e9:08:e3:6c:88:
         94:2e:80:2d:54:ca:fb:86:da:f7:01:07:e8:6d:8a:33:51:42:
         19:e9:15:e5:9b:37:a0:3e:26:bc:cb:2b:34:d6:15:c9:62:14:
         c6:a0:20:17:38:2f:a8:11:d4:8c:5a:fc:f0:68:f0:ef:37:bb:
         99:83:ac:f0:4c:65:8e:96:c1:2f:41:ea:b1:38:a3:bc:8b:3c:
         3e:98:50:d3:da:78:fd:a6:c7:c6:7a:b9:d1:8b:fc:e7:16:ec:
         07:f8:ab:ab:63:d9:81:41:d8:c6:81:6b:ad:cf:c3:a3:69:07:
         4f:44:9f:cc:f8:cc:76:94:19:f2:63:2b:3c:4d:ab:a0:e5:f1:
         3b:a7:80:ac:e6:41:5e:09:73:05:82:d0:73:68:31:d6:6a:eb:
         2c:99:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:30 2026 by rpki-client