Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          IyBGac27HxvOH0dzzXxQSQsIOeJl5psNycJxDeWuvCI=
Subject key identifier:   DF:94:DA:A3:CA:B8:A6:C0:1F:B7:6D:40:23:B1:20:13:C1:A9:BB:DE
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       019EB769F9FD543E99B6E09E1AE3852424E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          0706
Signing time:             Thu 11 Jun 2026 16:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:36 +0000
Files and hashes:         1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: Ekr5d3MUReA68e7f+uqh8DUhVRAoAkPeoJBIPkfrfe8=)
                          2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:69:f9:fd:54:3e:99:b6:e0:9e:1a:e3:85:24:24:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Jun 11 16:00:36 2026 GMT
            Not After : Jun 12 16:00:36 2026 GMT
        Subject: CN=df94daa3cab8a6c01fb76d4023b12013c1a9bbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:e5:e4:61:d6:a3:cb:fc:1b:82:e4:65:19:
                    e3:a8:34:08:be:22:b1:a0:71:57:47:03:84:3c:bd:
                    5b:3a:59:68:e8:3b:78:17:11:79:aa:1a:a5:94:2b:
                    ef:88:50:32:a5:44:bf:c6:24:84:29:48:ec:7d:be:
                    95:d2:38:1d:63:d9:fe:3d:00:2b:b9:37:a5:7e:0b:
                    ab:32:dd:ad:8a:b9:4f:6d:bf:4c:30:d5:f1:fc:8b:
                    29:11:de:1b:26:5e:e1:b5:28:c1:3a:81:5b:a8:e2:
                    bf:b8:f6:61:27:13:63:9a:2f:bc:b4:39:40:a2:65:
                    b0:06:26:6f:00:2d:89:dc:e6:51:18:59:04:41:d5:
                    c9:27:15:b7:5b:e6:b2:97:28:b2:2b:3a:5b:b8:a9:
                    69:1a:f5:f4:d3:3d:c3:92:15:5c:94:af:c7:27:d2:
                    91:73:ef:1d:59:7c:99:f0:42:9b:77:e1:39:62:4b:
                    85:2c:82:8e:2d:e8:37:cb:42:bb:be:ce:2c:ba:34:
                    03:0b:77:57:7f:ab:3b:4b:4d:0a:64:23:2f:57:43:
                    35:02:4c:b0:7a:5c:2f:b1:2c:5d:77:a9:ab:39:12:
                    43:08:db:78:60:b7:29:42:de:9c:d5:32:e2:41:e8:
                    bb:89:e6:9c:55:8b:e8:35:9b:db:07:26:71:28:a4:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:DA:A3:CA:B8:A6:C0:1F:B7:6D:40:23:B1:20:13:C1:A9:BB:DE
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:e9:e6:4c:ce:af:2e:ca:d7:4a:e4:3d:14:7d:cc:bf:09:
         01:ef:2a:08:4c:e1:de:ee:aa:07:c7:41:68:3e:36:45:bf:45:
         da:60:67:61:92:78:80:4d:fe:e3:f2:0c:56:05:4e:de:77:67:
         24:0c:95:76:55:a9:d5:f2:76:0e:59:aa:69:e2:34:28:94:fe:
         94:28:0e:c2:89:b1:f9:2f:7d:2a:69:30:d2:d3:4a:0b:96:7e:
         f3:d6:e9:8b:5f:6d:15:85:f8:e8:9e:fd:bf:b4:b6:cd:ec:13:
         c8:b6:f4:83:e5:8e:9b:2e:2b:ab:b6:e5:85:be:17:95:98:0e:
         d3:89:91:8a:4b:b5:9d:73:9c:a3:22:7f:62:6f:31:a6:17:14:
         6b:fd:5d:9f:7b:0a:85:e8:f3:bc:73:05:3f:9f:ad:e0:fa:5d:
         b8:cc:0e:6f:40:19:50:15:a3:a7:3d:00:88:dc:ad:20:cd:be:
         bf:2f:89:8d:ff:5f:6b:9c:9e:ae:0b:6e:03:2d:ea:7c:56:a1:
         fa:fe:08:a1:0f:18:8c:7f:85:cc:3f:fc:52:50:61:0f:21:fd:
         5a:54:ac:20:21:55:10:32:9e:df:0c:a6:d2:ec:f1:29:42:d5:
         66:61:5b:eb:c4:37:8d:1a:cb:56:8e:31:52:b0:60:0b:77:83:
         4c:17:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:48:22 2026 by rpki-client