Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File:                     bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier:          VlFw9FDkc0EhAjxgjXsBo6rJWC5Gwz3TzMXo+ozwqxg=
Subject key identifier:   BF:B8:15:D5:F3:37:3E:22:B3:B1:36:8A:06:F2:7A:1A:4D:47:99:12
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer:       /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial:       019EE10B6DBAD895969914DFFA3B8BCFEDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number:          0C89
Signing time:             Fri 19 Jun 2026 18:01:23 +0000
Manifest this update:     Fri 19 Jun 2026 18:01:23 +0000
Manifest next update:     Sat 20 Jun 2026 18:01:23 +0000
Files and hashes:         1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=)
                          2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=)
                          3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=)
                          4: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (hash: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=)
                          5: 5s08qvtxu5kbTXtLwFi7v9aGHaY.roa (hash: BJGago2uFSQjoC1tJOqQgCqqprBXKW62J2ZndZct5iU=)
                          6: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=)
                          7: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=)
                          8: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=)
                          9: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=)
                          10: Mmk6zLU_gv73BOtf2g3APw9lmyQ.roa (hash: qL0PMP9vArwRqpbzs+j1LZZAXvUbDkXbOFyqaLmsqDo=)
                          11: RjEWq6ih6-2kfI0plendbaS8Y6w.roa (hash: 2i+2TrldDE3Er0VIAbdcWVtXkE1ii9e0XPDWCNXu1QA=)
                          12: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=)
                          13: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=)
                          14: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=)
                          15: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=)
                          16: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 661+jIJ2u8Oo4Q17WhdDlWXmu4f7tv7prqMrWd8+ULk=)
                          17: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=)
                          18: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=)
                          19: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=)
                          20: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=)
                          21: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=)
                          22: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=)
                          23: tCiyGtakbmS-hkNH0HW8_YohxbE.roa (hash: 0kbqzbmcamtnxXVE6dSXdUJzJrO80eC7C3aPFLP4CRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:0b:6d:ba:d8:95:96:99:14:df:fa:3b:8b:cf:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
        Validity
            Not Before: Jun 19 18:01:23 2026 GMT
            Not After : Jun 20 18:01:23 2026 GMT
        Subject: CN=bfb815d5f3373e22b3b1368a06f27a1a4d479912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:cd:6b:b8:3c:16:e2:a4:54:22:d7:fd:40:
                    6e:c0:ae:50:a1:cd:93:dd:85:88:a9:d3:95:50:72:
                    e2:bd:d2:8d:fc:10:29:b1:88:67:e8:e8:d3:a6:ed:
                    54:7f:86:04:68:f4:08:b4:48:8a:6a:61:2d:e2:61:
                    09:54:38:27:5e:60:9f:73:f7:a1:97:12:71:f3:56:
                    ef:5e:3b:b6:9a:90:6a:f0:c5:50:76:d0:98:70:33:
                    c0:1e:74:0a:9b:e3:1d:d3:1b:aa:ce:8b:6a:18:ab:
                    e4:b3:92:91:d2:33:f7:d0:39:e9:1d:45:a5:8a:68:
                    fb:7b:59:93:8f:42:d7:99:40:a9:9d:7b:ba:fc:67:
                    c9:84:e4:bf:14:a5:28:db:24:c6:8d:b2:ae:21:13:
                    f5:89:d3:27:db:29:33:d7:8a:06:0a:02:d9:b0:fd:
                    59:e5:8f:47:e5:56:66:cf:af:2a:69:98:22:7d:44:
                    54:3e:b8:80:1f:a8:72:23:68:22:76:a9:18:89:63:
                    31:9e:26:8e:82:c9:c6:b5:d7:50:9d:a9:a1:37:96:
                    77:ab:64:c0:83:e0:f4:2a:87:dc:45:19:fe:a7:68:
                    2c:5f:4c:8e:d2:29:8b:b3:89:05:34:79:12:f3:79:
                    70:07:b9:c5:6a:e3:0b:2c:22:a6:b9:fe:b3:e7:da:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:15:D5:F3:37:3E:22:B3:B1:36:8A:06:F2:7A:1A:4D:47:99:12
            X509v3 Authority Key Identifier:
                keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:34:ab:37:0c:8f:4f:c4:10:4b:f6:82:e0:f1:26:c9:f8:
         00:a9:dd:78:65:40:aa:9a:6c:48:5d:f1:96:85:0f:08:ad:ff:
         a7:b3:b9:8f:58:89:99:a7:54:95:e1:44:be:f8:b2:3b:90:20:
         a3:30:5a:90:4a:cb:2d:c5:c8:79:b0:5e:fa:59:24:a5:40:d2:
         6d:51:66:0a:fa:b3:c6:77:ac:6f:12:62:1f:7f:f4:55:66:1c:
         0b:b0:a0:d3:53:50:2a:73:e7:30:54:51:e7:cf:fd:be:0f:d4:
         68:b4:93:b3:b7:52:d5:be:7d:4c:14:4f:86:e7:5c:b5:e8:8f:
         01:70:6b:32:60:50:15:d0:95:59:ab:f6:b3:0d:3b:2e:b7:aa:
         29:3c:30:af:53:43:df:fa:9d:03:08:8c:d6:fd:0d:78:e2:3b:
         6e:bc:67:d5:58:ff:a3:a8:87:1e:57:10:3d:17:9b:22:ab:ab:
         b3:e5:1e:7f:f0:f1:a6:6f:20:c8:aa:4e:d4:cd:95:62:35:56:
         60:03:7f:3e:11:e9:35:1e:cc:2a:74:27:03:d7:44:1f:bf:72:
         da:f8:ac:b0:05:73:27:ba:3f:4b:b8:e4:2c:b1:bb:7c:e7:c4:
         73:85:2c:09:ce:a5:04:1c:13:2a:e8:28:7c:cc:fe:08:aa:90:
         0b:4d:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:18 2026 by rpki-client