Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          ovqQecv8pOY0p0ygHa4jl8aapXUT7kxmqOdP1tHkjso=
Subject key identifier:   C0:F3:92:89:FB:64:6E:45:DA:FB:05:88:69:06:98:8F:74:BD:68:D9
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       019F18D6E82DF2BE91578B3A8B1D4B53832A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 14:02:45 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:45 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:45 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: IrTReaVjPhNR1JwGDW0DvG9qgfiFWoK5tAADAizm7EI=)
                          2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:e8:2d:f2:be:91:57:8b:3a:8b:1d:4b:53:83:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Jun 30 14:02:45 2026 GMT
            Not After : Jul  1 14:02:45 2026 GMT
        Subject: CN=c0f39289fb646e45dafb05886906988f74bd68d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:08:d2:37:c5:b3:b8:93:4c:ad:cc:a8:62:
                    a1:3c:eb:b1:a2:91:49:cf:66:18:cc:07:03:6f:90:
                    73:2a:8c:a4:09:3f:b0:32:19:57:f4:f3:93:12:02:
                    2e:b4:fc:e1:9d:2d:58:75:84:f3:43:94:6a:b4:f8:
                    a4:a6:72:b2:a9:3a:77:52:6f:39:2d:f0:de:e0:9b:
                    ff:2e:fe:65:e0:6d:59:cf:17:28:ba:3d:02:f5:bd:
                    aa:45:6a:b0:dc:69:65:7a:9b:f4:b2:c3:ca:17:e8:
                    37:d4:67:74:57:b3:cc:db:26:70:f1:4c:06:e1:d6:
                    2a:64:27:9c:95:0e:ed:9a:22:0c:0d:f3:02:0a:39:
                    c2:2f:21:9b:5b:08:06:e0:27:0d:f1:e5:16:6b:52:
                    94:16:10:06:a5:3b:f9:bd:7f:8f:ee:c8:0d:37:82:
                    5f:71:3d:62:d9:b8:51:a9:93:93:14:42:b7:8c:5a:
                    18:b5:78:8f:90:63:28:58:3e:e5:0f:b7:25:90:fb:
                    87:55:1e:8a:93:68:7e:10:c5:b2:48:11:c6:da:05:
                    e5:ca:04:9a:15:93:75:80:e4:28:1e:c5:0a:55:bd:
                    e5:f8:f0:26:9d:00:cf:11:fc:fd:2a:48:30:54:d0:
                    3e:5d:36:38:08:b7:d3:34:72:34:2b:72:0f:9a:a7:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F3:92:89:FB:64:6E:45:DA:FB:05:88:69:06:98:8F:74:BD:68:D9
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:07:a8:d3:75:89:7d:f7:bb:22:95:90:54:ef:cd:10:13:e7:
         05:48:85:7d:2b:76:cc:cf:da:e2:dc:36:d9:66:f4:a4:17:68:
         f0:4e:59:7c:a5:dc:59:a4:b8:44:d8:d7:36:b7:8c:35:55:59:
         c8:f4:75:34:bb:e8:68:fd:13:c9:ee:6c:a9:87:4b:25:0b:18:
         7b:b9:68:79:7c:d9:0a:e1:a6:5d:d4:7a:d1:a7:53:8f:0c:cb:
         32:9d:9b:92:86:bb:74:1c:e2:69:55:6c:fc:82:f1:ba:40:c6:
         58:d5:89:c0:e5:d6:5d:c5:63:87:4e:5f:3c:f3:87:87:86:7d:
         94:7a:ae:bb:78:bd:62:30:a0:5a:a5:45:c4:45:0f:33:a6:90:
         69:da:37:49:b0:1c:26:c1:df:92:67:99:ca:40:20:bb:3e:09:
         45:95:a6:bb:0e:b4:84:2e:fa:92:47:ff:5f:ad:b9:c4:82:d8:
         83:78:61:a2:e2:48:8a:ca:a4:94:98:87:a0:e0:3d:49:30:dc:
         23:57:17:eb:9e:cd:37:68:50:1e:be:44:f5:61:a3:f5:5f:53:
         52:05:92:9f:18:87:07:13:b4:93:ee:34:15:dd:af:76:ea:31:
         1f:3d:01:53:67:f1:fd:15:79:41:28:08:9e:2e:67:cc:d0:d6:
         62:a9:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:33 2026 by rpki-client