Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File:                     BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier:          uSSU9jU04woofuIMmIBBP35tJBhSzIbML4YcPy06i/I=
Subject key identifier:   0E:79:5F:00:87:D0:B2:05:27:5C:17:C4:6B:0E:C0:FE:4E:EC:BD:4B
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer:       /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial:       019F18D61EFA14D6A9D4D13FB68AB3AA16EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number:          0887
Signing time:             Tue 30 Jun 2026 14:01:53 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:53 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:53 +0000
Files and hashes:         1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: 0XrLyCJkAfmwQ1K/wYZV5wgiTbxCi6aQeP3GTjB7DPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:1e:fa:14:d6:a9:d4:d1:3f:b6:8a:b3:aa:16:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
        Validity
            Not Before: Jun 30 14:01:53 2026 GMT
            Not After : Jul  1 14:01:53 2026 GMT
        Subject: CN=0e795f0087d0b205275c17c46b0ec0fe4eecbd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:b6:02:09:a1:12:1b:c9:85:43:5d:58:9a:
                    48:7e:54:e7:07:d4:55:ee:e6:f1:52:6a:46:06:21:
                    56:64:b8:20:27:0e:94:00:1b:0d:68:e0:a3:0a:42:
                    fc:8d:f2:bb:9b:a5:11:9f:82:43:c9:1c:3e:55:07:
                    a2:93:d1:11:df:20:1a:31:d2:fa:ff:ee:94:20:22:
                    4c:9f:64:e2:f1:ee:a8:08:5b:0a:c6:cf:12:93:d1:
                    87:9f:25:ec:5f:4d:0c:a6:7e:fb:9d:ff:9d:2c:3f:
                    01:e5:10:bc:b3:90:1a:55:6a:52:e1:82:8d:43:c3:
                    e3:55:ca:11:03:4b:c2:82:25:78:c2:5a:a2:27:69:
                    14:e7:20:b4:bd:74:98:2e:9d:92:f4:00:dc:b9:f4:
                    85:40:09:5c:b0:ea:82:8a:6b:49:66:c1:20:9c:d7:
                    89:79:13:14:da:6b:1e:af:1b:60:65:47:e0:ae:95:
                    82:fc:12:fe:28:41:26:52:e8:99:ec:f1:8b:f2:60:
                    e2:fc:e3:91:a6:ec:05:4d:30:f3:5a:c5:53:90:b6:
                    b6:ba:21:06:e9:46:f0:1b:78:28:79:23:c5:34:5e:
                    92:47:f8:57:f0:ec:11:29:1a:25:6b:98:f2:b9:c7:
                    92:f3:37:83:63:b7:00:a1:eb:26:5d:94:d2:8e:28:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:5F:00:87:D0:B2:05:27:5C:17:C4:6B:0E:C0:FE:4E:EC:BD:4B
            X509v3 Authority Key Identifier:
                keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:77:f0:35:15:4c:41:06:28:e1:28:64:58:63:e4:bc:56:4d:
         a6:0c:c2:ef:6e:01:13:05:7a:61:8d:fc:6a:23:cb:55:bb:62:
         42:57:1c:af:8c:83:e9:b9:fc:94:43:f1:c6:79:63:6c:f0:a3:
         b8:9d:85:c5:9a:4e:c0:00:01:f8:7b:af:aa:99:93:3b:f0:02:
         88:e8:70:3a:b7:44:82:e7:27:13:5b:51:b0:01:dc:3d:36:1d:
         68:a4:e0:51:27:50:a3:b8:22:28:53:3c:17:a6:1e:99:44:ce:
         4c:f8:bd:97:b4:be:2e:2a:84:aa:a8:90:45:d7:01:3c:9e:2d:
         07:47:e3:73:dc:bc:0b:9a:d6:52:51:df:ec:06:71:88:b5:fa:
         76:b3:00:5f:ba:f2:8d:c6:65:9a:77:47:c1:22:a2:22:85:b1:
         27:af:86:65:c9:a9:07:0e:6d:f5:87:2c:13:d2:b8:db:2a:5d:
         35:ad:28:b7:e6:59:98:b9:d7:24:e0:cb:59:23:b8:ad:c4:6e:
         5a:fb:a9:ea:33:dd:a8:e8:3a:87:8b:e0:e5:5d:41:cb:ac:31:
         87:8a:3a:62:54:41:82:e1:5d:17:1d:cb:cd:2f:cc:e1:3b:cf:
         ed:2c:63:98:df:ba:5a:6d:04:90:90:81:1e:1c:eb:ef:af:46:
         c5:70:b2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1h76FNap1NE/toqzqhbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OTA0MzQ3YTIzNjFhY2VkN2MzNzBmNzQ0NmRlNzA4Mjc3
ZWU2ZDEwHhcNMjYwNjMwMTQwMTUzWhcNMjYwNzAxMTQwMTUzWjAzMTEwLwYDVQQD
EygwZTc5NWYwMDg3ZDBiMjA1Mjc1YzE3YzQ2YjBlYzBmZTRlZWNiZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbW2AgmhEhvJhUNdWJpIflTnB9RV
7ubxUmpGBiFWZLggJw6UABsNaOCjCkL8jfK7m6URn4JDyRw+VQeik9ER3yAaMdL6
/+6UICJMn2Ti8e6oCFsKxs8Sk9GHnyXsX00Mpn77nf+dLD8B5RC8s5AaVWpS4YKN
Q8PjVcoRA0vCgiV4wlqiJ2kU5yC0vXSYLp2S9ADcufSFQAlcsOqCimtJZsEgnNeJ
eRMU2mserxtgZUfgrpWC/BL+KEEmUuiZ7PGL8mDi/OORpuwFTTDzWsVTkLa2uiEG
6UbwG3goeSPFNF6SR/hX8OwRKRola5jyuceS8zeDY7cAoesmXZTSjihQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA55XwCH0LIFJ1wXxGsOwP5O7L1LMB8GA1UdIwQY
MBaAFASQQ0eiNhrO18Nw90Rt5wgnfubRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgt
NTY1ZmJhMTE3ODY4LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgtNTY1ZmJhMTE3ODY4
LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXfwNRVM
QQYo4ShkWGPkvFZNpgzC724BEwV6YY38aiPLVbtiQlccr4yD6bn8lEPxxnljbPCj
uJ2FxZpOwAAB+HuvqpmTO/ACiOhwOrdEgucnE1tRsAHcPTYdaKTgUSdQo7giKFM8
F6YemUTOTPi9l7S+LiqEqqiQRdcBPJ4tB0fjc9y8C5rWUlHf7AZxiLX6drMAX7ry
jcZlmndHwSKiIoWxJ6+GZcmpBw5t9YcsE9K42ypdNa0ot+ZZmLnXJODLWSO4rcRu
Wvup6jPdqOg6h4vg5V1By6wxh4o6YlRBguFdFx3LzS/M4TvP7SxjmN+6Wm0EkJCB
Hhzr769GxXCySg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:32 2026 by rpki-client