Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          IwHcok/aXTGYRbzg+uXCGd4MaRxh3p3aQCUYm8mnna0=
Subject key identifier:   BE:42:53:59:D4:FE:1F:43:0A:2F:E6:79:CB:E6:BE:B8:C0:9B:81:FB
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019EB80EA75D077B46E7DBFEA27D08BE41AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          064F
Signing time:             Thu 11 Jun 2026 19:00:28 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:28 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:28 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: 2umBRMj6aOEWPxBLxJgNMAtcuxmLD14rSuaRKLNI9ps=)
                          2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:a7:5d:07:7b:46:e7:db:fe:a2:7d:08:be:41:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Jun 11 19:00:28 2026 GMT
            Not After : Jun 12 19:00:28 2026 GMT
        Subject: CN=be425359d4fe1f430a2fe679cbe6beb8c09b81fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:7f:c8:f3:32:85:82:98:a9:bc:c4:17:ca:
                    9f:f8:22:f1:ed:03:b0:76:9b:7e:6c:73:1f:73:05:
                    03:5d:13:be:cb:a4:d0:f2:3b:fc:92:8b:b7:bd:d7:
                    df:ec:d1:41:5f:a9:82:65:2d:51:39:f7:b0:5c:e5:
                    d1:94:b1:fd:d7:24:d3:32:60:0e:14:94:c1:fd:96:
                    fd:24:1a:61:7b:ca:6c:ec:db:6c:28:c4:2c:90:c9:
                    2c:50:f8:f3:06:d6:f7:67:4f:ca:74:56:41:c3:ec:
                    00:a3:8d:fa:44:20:da:24:35:b6:2f:9b:4b:53:13:
                    c7:02:c1:df:77:3a:e1:50:12:89:63:32:61:f8:a4:
                    b7:5b:42:44:5a:7c:44:85:b3:b9:03:ac:9f:79:28:
                    5a:7b:8c:64:87:7f:e3:42:94:5f:75:63:57:b4:38:
                    22:f1:a0:af:1f:5f:18:91:e6:11:db:55:11:98:f8:
                    9c:b3:9e:28:50:c4:22:0d:ff:b6:d4:f2:31:aa:3b:
                    ff:17:30:92:cf:4d:5a:eb:57:25:ab:c1:d6:6e:6c:
                    65:57:51:10:c9:3c:d1:11:8c:6c:d0:ed:10:c5:b9:
                    28:2d:ce:92:41:f2:5f:40:c9:68:ed:c8:fd:99:88:
                    48:1c:f1:29:9e:a5:34:af:83:28:58:b4:c2:e3:0d:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:53:59:D4:FE:1F:43:0A:2F:E6:79:CB:E6:BE:B8:C0:9B:81:FB
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:34:ab:f6:56:f3:c8:0f:b1:47:60:a5:ce:32:f9:58:38:
         c8:b7:f7:d5:0e:4a:9c:90:b1:51:6e:01:39:93:d0:ed:6e:d6:
         52:8b:54:78:44:df:1f:01:fb:f1:7f:8d:0f:98:2f:f1:a3:54:
         91:73:34:0c:a1:2b:ea:3c:8e:01:67:19:b6:86:09:87:eb:4b:
         23:ca:08:9d:6a:44:ed:d0:dd:13:40:98:c5:59:89:26:4a:c3:
         4d:b8:b9:07:c0:f1:78:c8:1f:0e:61:1a:ca:43:fe:a3:36:be:
         e8:a7:b8:16:f1:9e:ce:d3:49:5b:89:c6:5a:25:73:31:54:7f:
         10:8d:d0:ab:c6:b9:0a:06:4c:8a:3b:74:7c:70:8f:69:ae:a7:
         bb:36:43:95:ab:a5:32:0e:fb:63:54:41:54:78:f3:2a:a2:d0:
         64:07:81:4a:a8:85:9b:f2:91:36:37:92:d2:e3:5f:87:30:fe:
         f7:b8:75:7f:4c:58:3f:fe:70:11:56:c1:0f:f5:fc:39:6b:de:
         28:d2:c0:4d:04:47:0e:b5:cb:0e:19:47:0f:31:2d:7a:fd:49:
         de:51:40:9c:f4:90:c1:3e:f9:c0:41:cf:af:cc:4a:19:e2:33:
         b1:3a:54:4d:8f:3e:8b:98:2f:36:cb:8a:08:e9:30:48:4d:2a:
         45:db:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:06 2026 by rpki-client