Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File:                     BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier:          u2eC/mTohoX3lt2t/Ry4w9x7rDSyofJdp6qy/nXOWrs=
Subject key identifier:   E1:5D:AF:C6:BF:AB:66:4D:28:A0:FD:5E:AC:6D:2B:4D:C5:AC:7D:50
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer:       /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial:       019EB9219517BDBFBA58BE85410F4901355C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number:          195E
Signing time:             Fri 12 Jun 2026 00:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:46 +0000
Files and hashes:         1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: wxBi5jODDTfn/geXwy7NrcDMI8G6NilS19HmiKrxS40=)
                          2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:95:17:bd:bf:ba:58:be:85:41:0f:49:01:35:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
        Validity
            Not Before: Jun 12 00:00:46 2026 GMT
            Not After : Jun 13 00:00:46 2026 GMT
        Subject: CN=e15dafc6bfab664d28a0fd5eac6d2b4dc5ac7d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:cb:f2:04:79:98:9f:5c:58:48:26:d9:f7:
                    ba:4b:6d:f3:23:c9:ca:9a:33:40:4a:d8:3b:d0:20:
                    cd:48:65:8f:84:55:45:5b:0c:77:d4:6d:68:86:3c:
                    e9:fa:22:1f:1c:3b:e2:46:35:75:d3:20:1a:b8:c7:
                    57:d3:ec:bb:d7:bb:4d:36:1b:12:9d:e1:f7:08:9f:
                    44:c0:68:01:c5:d6:16:0c:74:b8:6d:73:3a:2b:33:
                    c0:87:9c:9e:b2:4b:fa:73:e6:73:67:ec:24:52:52:
                    83:90:e4:47:b5:a4:71:8a:7f:86:0d:f5:66:f8:d8:
                    8c:97:b9:7f:9b:21:c3:11:04:92:bf:1f:af:ad:f2:
                    a8:91:96:eb:ff:29:f6:b7:56:15:c6:8e:59:76:1d:
                    93:19:1f:3d:8e:f8:08:00:2b:62:1e:c7:42:a3:b3:
                    a4:3f:a7:46:da:13:7a:fe:ff:1f:2c:7d:93:27:b9:
                    c0:89:52:1e:58:bc:44:89:b0:b7:32:84:36:ac:40:
                    86:71:15:fd:19:97:0d:0c:6b:65:de:07:02:2e:e1:
                    64:8f:b8:15:82:72:c1:66:4e:37:93:f0:aa:a5:c5:
                    cb:cb:b2:02:52:13:8d:ec:e4:5d:61:69:61:bb:e1:
                    b5:33:17:ba:cd:7b:c2:f9:8c:65:91:fe:e1:19:7a:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:AF:C6:BF:AB:66:4D:28:A0:FD:5E:AC:6D:2B:4D:C5:AC:7D:50
            X509v3 Authority Key Identifier:
                keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:29:8a:18:09:23:ab:5a:b9:ad:d3:05:09:eb:44:85:c9:
         0c:1a:09:f6:a7:da:9e:da:64:8f:de:35:69:9a:f6:37:f9:1d:
         c4:69:0f:d9:90:d0:b2:e1:32:53:c6:2c:cd:02:09:0e:b0:8d:
         b0:a1:d4:6f:4a:ef:83:63:69:ab:e1:f7:7b:53:b2:6a:c1:05:
         6d:e9:03:dd:ff:b1:7d:1e:3e:c2:c3:78:53:0a:46:55:65:01:
         be:78:5b:d8:9c:c1:84:19:7e:1b:09:e4:41:f4:8f:0f:f0:88:
         1a:5d:6f:ab:6b:a0:37:55:ce:66:ab:27:5b:b2:45:a8:88:33:
         e7:6f:bf:b2:4d:0f:94:fa:c1:51:40:d7:0d:81:b6:55:cf:09:
         d3:6a:6e:a8:fd:e3:ce:b3:64:de:fb:bd:f5:6e:37:30:7b:a1:
         76:72:0c:ec:1c:d8:fc:a5:6e:6f:4f:7c:d3:9f:b4:8e:34:6b:
         8f:7c:29:31:99:d0:f3:75:ee:d8:68:be:53:79:f7:87:10:85:
         72:4e:52:df:61:f8:fe:d1:33:65:1e:34:aa:6b:34:b5:65:c5:
         99:35:f4:74:91:07:2d:8c:1c:dc:61:8b:2b:47:2f:78:0b:33:
         4a:a3:5a:5c:94:f2:aa:7d:13:86:86:27:08:c8:33:c8:9a:68:
         d2:69:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:57 2026 by rpki-client