Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
File:                     bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft (raw, json)
Hash identifier:          AgEAlR3r1kHPAUb9ptqgGM4gTMcWfk6CaV7VX7TB/Wk=
Subject key identifier:   47:02:34:C9:82:A8:63:E0:07:68:88:B3:3E:4A:E5:DC:AB:E1:99:73
Authority key identifier: 6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
Certificate issuer:       /CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Certificate serial:       019EB6FC4B562C0F5CE1BE4748490D7287BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
Manifest number:          016D
Signing time:             Thu 11 Jun 2026 14:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:47 +0000
Files and hashes:         1: _Y3KWPgW5g7tWbAn0IxId-tYvoE.roa (hash: aYg7tkOr0lKYUUmicpFlbnWgT/KohMLQLxFqgfb/dJo=)
                          2: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl (hash: DdPqXhD5fwYSDBoDlDBe+eR0+EOaHHRrawEFVYml+3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:4b:56:2c:0f:5c:e1:be:47:48:49:0d:72:87:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
        Validity
            Not Before: Jun 11 14:00:47 2026 GMT
            Not After : Jun 12 14:00:47 2026 GMT
        Subject: CN=470234c982a863e0076888b33e4ae5dcabe19973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:a7:02:a7:f3:6f:eb:c9:7e:6c:b0:1d:3b:
                    7b:33:61:f1:d3:6d:f9:d1:ec:ff:56:b9:3d:24:cd:
                    1e:86:14:48:90:f1:f9:64:20:48:4a:15:6f:58:5b:
                    d7:b4:ec:d9:d0:cb:db:19:c6:f1:09:3c:1a:f6:a0:
                    08:fe:a4:ea:81:f8:73:65:b5:b6:4b:b6:18:0e:de:
                    21:42:90:ae:03:cb:78:88:88:d9:a0:ce:78:ca:56:
                    39:09:d5:08:a8:24:50:f3:92:4d:6a:98:40:ab:9e:
                    b9:91:75:e5:0e:37:3e:74:1d:31:93:c7:7c:83:80:
                    0a:80:af:8a:af:6b:de:ab:51:d0:80:60:73:86:32:
                    fc:eb:c0:ca:03:5b:a1:2c:dc:96:a7:84:65:ab:e9:
                    b9:93:b8:a4:7b:bf:5c:91:19:e4:11:fb:49:30:64:
                    10:67:8f:1e:57:c3:65:b1:ad:cf:3f:b4:81:83:84:
                    a5:64:22:50:36:19:d9:77:1e:d6:b9:05:77:c0:fe:
                    00:70:ec:3f:18:62:0b:8f:c9:45:0b:d8:c5:03:3b:
                    81:49:86:a6:95:49:ed:40:d4:d4:7e:f8:2d:a6:8f:
                    71:f7:ef:4c:32:aa:40:37:15:12:d8:75:8a:0c:04:
                    4c:74:00:a5:40:7f:64:72:d8:22:0c:67:c9:4c:25:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:34:C9:82:A8:63:E0:07:68:88:B3:3E:4A:E5:DC:AB:E1:99:73
            X509v3 Authority Key Identifier:
                keyid:6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:17:93:52:13:40:74:c0:1d:a6:58:9c:0c:61:0b:c8:8e:
         90:a0:77:52:c2:88:eb:50:4e:b3:19:00:1d:7e:c0:af:7a:4a:
         d5:4a:e9:c8:0e:d7:fc:5d:c1:68:cc:3b:3e:d7:81:4f:4a:4f:
         dd:22:8c:9f:28:9c:6d:d7:ff:32:9d:30:bd:cf:33:ba:c7:b4:
         fd:bc:c5:1f:58:2a:8a:2c:0b:74:8c:ab:18:49:ce:fe:d5:7a:
         84:b2:cc:10:cf:d1:50:65:08:5e:ba:c5:fa:05:a1:e9:4c:aa:
         60:78:4a:99:75:ad:d9:4a:c7:ed:08:37:ce:be:ae:5b:87:fc:
         26:19:45:2b:79:ab:03:27:1f:ed:fc:65:f2:fb:60:9a:3e:dd:
         86:0e:57:97:30:5e:36:85:03:d9:a4:89:85:7e:61:37:5b:b7:
         f5:09:58:e8:9c:8b:92:02:80:da:a1:bc:bf:bc:cc:0d:ce:f2:
         ab:27:ca:19:80:9c:34:de:bf:5f:e5:be:83:f0:19:f0:71:42:
         5e:21:b4:76:b3:26:fb:00:84:fe:84:a4:af:f5:04:74:d1:bc:
         06:9c:fb:85:63:f1:c7:d3:75:c3:e6:6b:cd:c0:7a:88:b6:d4:
         00:97:ec:02:8e:80:7c:b0:57:31:08:a4:18:3e:7b:38:e6:65:
         c5:20:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:34 2026 by rpki-client