Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier:          B1yXFOkmQwmNKxeQEAVbmNbmITmBji8zdl4ty2Bj0L0=
Subject key identifier:   2A:8A:6A:E0:41:8D:00:DA:B2:6F:44:FE:B7:E8:C3:24:2C:A4:8D:50
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer:       /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial:       019F13E667F246A8152D068B9CC9DC7BCDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number:          050B
Signing time:             Mon 29 Jun 2026 15:01:34 +0000
Manifest this update:     Mon 29 Jun 2026 15:01:34 +0000
Manifest next update:     Tue 30 Jun 2026 15:01:34 +0000
Files and hashes:         1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 558mLyvuPMt1gxPV1D4aVE9H1ghdhCteUjDBzzLDK0c=)
                          2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:67:f2:46:a8:15:2d:06:8b:9c:c9:dc:7b:cd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Validity
            Not Before: Jun 29 15:01:34 2026 GMT
            Not After : Jun 30 15:01:34 2026 GMT
        Subject: CN=2a8a6ae0418d00dab26f44feb7e8c3242ca48d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:5a:01:bd:6e:3b:ab:6c:fa:a0:bf:ac:39:
                    5a:06:18:ff:66:05:8e:64:31:d1:51:2e:80:2e:c4:
                    72:81:d5:26:70:7a:20:8d:9f:aa:cf:87:29:85:de:
                    5f:23:79:8a:5e:ef:c2:0a:54:9f:c0:17:86:38:24:
                    fa:61:d5:d2:a8:70:14:34:81:f3:05:5d:5f:f9:e9:
                    72:48:0f:4e:51:45:1b:28:d1:bb:84:fb:c9:54:28:
                    29:56:5b:41:ce:6e:96:1b:55:da:46:c3:fa:e5:05:
                    a9:10:d4:f1:78:71:6d:a2:0e:84:d1:73:3f:b9:0d:
                    e2:22:b0:99:b5:90:c4:b6:f9:63:be:9b:8e:93:ce:
                    9c:a1:90:02:d9:23:2a:8b:48:91:04:97:23:b2:39:
                    b4:4a:46:79:c1:64:91:c7:19:f7:38:92:15:ee:23:
                    43:8d:00:f3:ba:a5:32:3a:d4:c8:13:63:3d:ef:4b:
                    97:be:aa:fd:c1:aa:67:90:27:55:1a:40:76:6e:25:
                    7a:60:e0:2b:f0:b8:56:32:e1:a2:d5:03:a7:82:a1:
                    b2:c1:e6:06:77:46:d2:ae:40:a0:2d:59:35:7b:3e:
                    03:07:ba:d3:b6:43:2a:f9:7f:0c:21:83:11:36:4e:
                    2c:e9:99:39:cc:6d:5c:16:80:f8:b3:88:1e:4d:4d:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:6A:E0:41:8D:00:DA:B2:6F:44:FE:B7:E8:C3:24:2C:A4:8D:50
            X509v3 Authority Key Identifier:
                keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:39:c3:de:17:07:91:de:a2:03:52:3e:1f:95:b8:4f:99:03:
         57:47:a8:1b:1d:11:3e:27:a2:e4:4f:40:e5:c5:32:4b:54:e3:
         ce:3f:dc:bd:ec:48:53:aa:82:96:93:71:0c:1e:60:1c:45:a1:
         63:6a:80:ef:55:62:9f:b1:f4:02:7e:02:03:53:d3:2f:32:ac:
         60:f3:f3:a9:b8:59:e8:1d:82:00:83:62:24:6c:66:5b:70:39:
         85:44:56:75:37:66:9f:91:b8:6e:0e:61:01:12:27:ca:04:ca:
         d6:e2:04:03:85:e0:9a:50:83:7b:3a:a1:6f:c0:09:97:08:ba:
         d4:66:7b:e7:57:48:be:36:fd:f9:e2:03:77:c2:2b:4f:17:fc:
         2e:05:3c:ec:a7:42:3a:82:98:e7:ab:6d:74:00:17:4f:a4:0f:
         0e:38:d1:c0:78:5f:02:47:cc:77:f3:c6:0e:50:ba:28:ed:fb:
         a4:bb:33:ac:4c:ca:d9:e0:ea:da:30:5e:e7:ba:42:12:e2:b2:
         3f:ff:ae:e7:91:6d:2b:2b:29:a6:5b:0b:a7:4c:89:3c:c7:87:
         11:b9:93:2d:d3:ec:e1:ce:89:ae:56:49:f1:96:d8:00:6e:cb:
         b4:63:4f:c7:dc:00:38:8a:dd:16:b8:bd:49:14:fb:d9:d5:ad:
         37:07:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:32:42 2026 by rpki-client