Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          Oi+EoDfxKAgkOjKBTiFfznO23wO8OcDiwxeFySyXxEo=
Subject key identifier:   95:9A:4F:D2:CB:AB:AD:7F:6F:E3:C8:5C:74:C9:72:12:4F:3D:B5:20
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       019E29CC4D2098911BDE5831F7301768F034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          04B2
Signing time:             Fri 15 May 2026 04:01:55 +0000
Manifest this update:     Fri 15 May 2026 04:01:55 +0000
Manifest next update:     Sat 16 May 2026 04:01:55 +0000
Files and hashes:         1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: 72hEkPqHeBmxSjkXJenPo8lR3r4V0R21seoOQ/V2zUk=)
                          2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:4d:20:98:91:1b:de:58:31:f7:30:17:68:f0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: May 15 04:01:55 2026 GMT
            Not After : May 16 04:01:55 2026 GMT
        Subject: CN=959a4fd2cbabad7f6fe3c85c74c972124f3db520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:e8:ba:2d:46:b7:4d:b6:47:82:76:22:51:
                    9f:55:ac:0e:90:aa:b1:cc:45:95:eb:de:d1:3f:15:
                    b0:e8:f0:97:76:7d:8d:dc:b3:40:65:23:49:20:a6:
                    92:ab:eb:cf:7a:01:33:e8:27:a6:e8:99:18:f2:b2:
                    3a:d1:77:ce:da:ef:c2:57:df:a0:f8:48:b4:83:07:
                    2f:db:ba:04:ed:dd:7c:7e:3e:93:5e:ee:99:e6:96:
                    d1:af:50:94:e9:18:8d:aa:c2:85:c7:ec:13:f2:6c:
                    eb:81:73:72:73:89:ad:45:eb:85:fa:d5:57:0c:56:
                    19:6d:de:80:9d:f4:e4:a2:0e:de:10:d8:7d:e9:f1:
                    6a:dd:ca:7f:f3:e4:a8:9e:89:a6:a7:99:1b:79:88:
                    54:14:3d:a9:e0:3c:e0:14:a3:15:8c:fd:4d:71:49:
                    d1:90:4a:56:ae:7d:49:08:01:b5:2f:6c:f3:63:03:
                    a3:6d:18:a6:a8:1a:e4:8a:fc:5c:91:30:09:51:32:
                    5e:85:fe:df:7b:26:59:c0:22:24:9d:dc:70:68:b0:
                    13:c3:23:23:b0:61:d2:cd:5a:53:55:f5:66:36:c9:
                    bf:ec:f3:f2:ae:2e:6a:27:f7:91:c7:be:ec:0d:23:
                    2f:a3:82:60:9d:08:e7:1e:28:e4:ac:11:c2:b1:b7:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:4F:D2:CB:AB:AD:7F:6F:E3:C8:5C:74:C9:72:12:4F:3D:B5:20
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:99:22:75:9a:5b:77:a9:ff:db:71:30:68:d1:fd:6d:46:c6:
         49:22:f7:b8:9e:59:40:1e:f2:8c:de:9c:b5:94:87:78:58:1c:
         b3:e2:0f:44:71:4a:0e:62:aa:39:f8:77:cb:19:65:ea:b4:38:
         4a:0f:31:6b:4f:0c:a4:22:e4:cd:97:07:f5:7b:14:f7:c9:65:
         8f:3c:46:b3:f9:77:a2:cb:33:8f:3e:8f:e2:58:89:5c:08:35:
         22:e2:33:3b:99:4a:db:c7:5f:73:3f:7f:82:05:fd:81:8b:d5:
         88:ad:ff:ff:9a:35:ac:bd:cd:11:b7:ad:4f:43:62:7f:4b:2c:
         d2:90:88:07:69:f6:0e:76:75:b4:9c:56:5a:30:b9:22:bb:45:
         b0:34:e4:8f:5f:68:20:c8:a6:8e:24:22:c0:e2:70:b9:0b:0c:
         90:28:ae:c5:64:19:46:56:18:32:ff:b8:ff:91:98:4e:be:13:
         77:45:f4:b4:c6:77:3d:d9:bf:77:8a:63:5c:69:71:96:38:0f:
         1a:fc:f9:ba:4e:64:4a:bd:60:67:d3:37:0b:c0:b7:34:2e:87:
         dd:d6:1e:31:79:35:25:57:c8:5e:ff:21:cb:cb:cd:95:90:f9:
         e5:ac:24:05:3f:4c:b6:59:ec:d1:96:f0:98:3d:4c:b4:e5:45:
         94:13:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:07 2026 by rpki-client