Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          bLCby48Y/PNtP0qZqf9mETCcR7Uu8Bzaj5ElWCcAC5w=
Subject key identifier:   1D:C3:36:0B:0E:2C:B9:77:3B:71:F6:9F:31:87:E3:FF:C0:B6:FF:32
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019EB98FBCC4DD4F1A2B43CE514F547BC86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          195C
Signing time:             Fri 12 Jun 2026 02:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:05 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: Nq5e4g3KZdfgMMW10y2DYYU48wmmLy/pApUSZ7lTXjw=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:bc:c4:dd:4f:1a:2b:43:ce:51:4f:54:7b:c8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Jun 12 02:01:05 2026 GMT
            Not After : Jun 13 02:01:05 2026 GMT
        Subject: CN=1dc3360b0e2cb9773b71f69f3187e3ffc0b6ff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:6d:b6:c5:ed:ff:c8:c0:f2:1b:a4:e4:2c:
                    b0:29:82:1f:c6:1d:8c:9e:43:69:1d:15:59:97:a1:
                    ae:5f:09:54:46:b0:35:48:94:78:b9:48:bd:f5:7a:
                    15:2b:5b:a2:39:bb:55:8c:f4:8a:d2:4d:24:d0:1c:
                    4e:c3:33:c2:2f:2d:d4:39:a7:6f:2e:88:b5:7e:18:
                    e3:8b:ee:98:18:8c:ae:ec:cc:9a:f7:9e:d6:2d:0e:
                    aa:7b:3f:27:52:5f:c4:05:c0:5a:4d:ad:98:af:62:
                    82:44:7a:97:85:2e:33:4a:39:52:79:bf:5a:f8:38:
                    33:84:43:e7:e3:ee:70:e0:2d:99:99:89:d1:3d:68:
                    30:92:38:37:39:b4:1c:ac:03:1f:47:12:79:38:92:
                    89:f3:c9:74:d8:49:ea:04:76:b6:35:14:a9:e0:40:
                    33:9a:6f:4f:88:84:e1:52:3a:84:05:54:18:18:1a:
                    29:d9:f6:36:43:2d:ff:c9:06:23:5d:90:ab:da:00:
                    9e:1f:ed:d5:d2:b7:4c:67:18:50:84:b8:ca:40:af:
                    d4:4c:93:a5:cc:f3:f0:76:81:b0:73:ba:84:76:50:
                    69:5c:a9:38:0e:7f:aa:60:0a:d3:b9:6e:53:c3:54:
                    56:b0:1d:eb:0b:9d:19:12:d3:5f:30:ec:03:bd:37:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C3:36:0B:0E:2C:B9:77:3B:71:F6:9F:31:87:E3:FF:C0:B6:FF:32
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:f3:b6:a5:e5:ff:91:ef:7b:b2:7f:b5:9c:a2:da:79:2a:
         47:3e:97:66:92:9e:9f:fd:3b:a0:65:92:07:d3:eb:38:62:28:
         4d:18:ac:11:63:5c:a1:c3:19:3c:43:68:a6:df:d2:a1:d0:dc:
         80:e9:b2:71:22:c3:d6:12:d0:7e:72:84:70:b0:bf:32:3a:c0:
         6c:40:5b:9f:6b:a0:50:88:8f:61:2c:97:e2:46:c9:26:2a:58:
         81:ea:ac:2f:d1:6a:fa:98:ea:93:58:39:88:d0:fd:15:aa:d8:
         d6:c4:13:9d:86:6a:1f:b3:b5:6a:3b:55:fe:87:9b:bd:81:d0:
         7b:da:5f:f1:89:1b:40:f9:00:8f:96:fd:0a:a5:43:de:e0:79:
         45:e1:54:a0:c2:97:d2:55:56:56:03:38:63:dc:27:cb:a0:a9:
         61:ca:c5:71:c4:b9:c5:ff:f4:d3:22:24:11:bb:a5:cb:f3:d5:
         ca:83:35:cc:b1:81:ab:5b:92:fd:f3:df:ec:fa:ac:ac:7c:4e:
         be:b5:0f:88:99:62:7b:8b:04:38:c7:d8:e4:c6:ed:dd:13:d6:
         7e:f8:eb:e6:66:99:a4:17:eb:ea:3e:55:12:03:a5:85:3f:18:
         21:c7:5d:da:a0:b1:81:30:df:06:6f:b4:f6:82:ea:9e:ed:4a:
         7e:70:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:24 2026 by rpki-client