Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          hvUDOiXwm+j4TsJbj2WGXnU4ogf1Htpp/+pEECUkafg=
Subject key identifier:   93:39:91:E1:D3:FE:52:5C:97:4A:CB:9B:ED:71:09:4B:31:36:A2:A9
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019F122E2CE56A671BD9062681B19B0677F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          15BD
Signing time:             Mon 29 Jun 2026 07:00:43 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:43 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:43 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: irqJQ7WnS8vDo2kMn/JhL5Klzw6XANfrJlLHtUUF2Bw=)
                          2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:2c:e5:6a:67:1b:d9:06:26:81:b1:9b:06:77:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Jun 29 07:00:43 2026 GMT
            Not After : Jun 30 07:00:43 2026 GMT
        Subject: CN=933991e1d3fe525c974acb9bed71094b3136a2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:aa:90:cb:8a:e1:68:54:f4:0c:aa:50:a4:
                    a7:e0:99:55:f8:44:21:e6:0f:28:7a:b8:df:6f:54:
                    d6:02:eb:ec:15:4d:39:d9:ea:f2:97:c0:99:72:5f:
                    4e:3b:02:1a:5b:f1:d7:df:fc:08:a8:9e:aa:bb:8e:
                    f5:97:88:50:93:8a:d6:ba:fd:96:75:f7:b1:22:6c:
                    1d:f9:87:c3:3b:e6:1a:42:16:9d:99:20:2b:a8:28:
                    78:89:55:a5:0a:28:a4:e7:0e:8b:cc:6b:59:d5:35:
                    b7:5e:c9:09:33:d9:ef:b7:8d:b8:76:0d:92:e4:35:
                    4f:a9:a6:2a:54:5f:40:81:66:3a:9c:35:10:4c:8d:
                    31:6b:e2:f7:9f:ef:64:29:09:78:6b:bd:ac:bb:e3:
                    51:71:8c:02:a1:cb:12:54:c8:da:87:40:66:3e:ac:
                    9d:9e:8c:22:c9:51:06:42:54:2d:4a:29:e7:c8:40:
                    95:2e:35:b6:1b:0f:c7:7c:24:8d:de:d9:bd:a7:aa:
                    b2:99:14:59:e1:91:0d:9b:4a:0d:3a:36:e6:a6:d8:
                    f9:c4:f8:09:4a:68:ff:b6:94:36:e9:c1:e6:56:5d:
                    34:44:87:18:c4:b6:98:82:92:3d:07:61:a1:ac:f8:
                    d1:ff:59:46:54:92:f9:bd:e5:2c:5f:d0:79:eb:0c:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:91:E1:D3:FE:52:5C:97:4A:CB:9B:ED:71:09:4B:31:36:A2:A9
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:38:52:a2:e5:b5:dd:59:86:fd:6c:a8:66:fb:b6:aa:40:b1:
         6d:0d:02:e4:c2:9a:ff:66:f3:07:a8:8f:ae:28:44:6e:3c:86:
         af:df:22:0d:c2:14:ee:0e:c7:ef:43:0f:db:a7:bd:bc:ef:7c:
         1f:b2:73:f2:a9:fe:da:d8:66:ca:1e:96:ca:4e:e4:28:e2:e8:
         47:1d:3f:1c:89:69:d5:a6:f5:53:ba:36:e8:46:9e:ff:4a:26:
         7e:38:1b:e0:14:15:b3:39:84:7e:65:5c:f3:f5:0d:da:24:e6:
         f5:e5:f8:5e:83:99:76:d7:69:83:2e:09:d6:44:00:3d:3c:16:
         db:22:f7:dd:0b:5d:4f:e5:73:15:91:2e:af:29:f8:8e:ea:f1:
         4d:de:27:eb:83:2e:02:08:33:0d:f8:5f:c4:f0:99:0b:7b:40:
         b8:7e:b2:7f:06:66:18:d6:f3:8a:75:fd:bc:a6:f2:ae:c0:bb:
         81:e5:5d:7f:6f:70:2e:4b:26:b4:3e:d0:f9:23:b6:ee:6b:59:
         85:90:8b:67:71:9f:a6:8d:bd:e0:da:55:b9:ac:a4:3f:09:ce:
         3b:21:cb:ec:db:e8:9d:e3:27:57:21:eb:fc:aa:9b:9b:e5:18:
         99:7d:7a:d7:07:30:5c:dd:9e:a3:48:bf:40:9d:94:6b:72:67:
         57:98:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:35:48 2026 by rpki-client