Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          8YYkemziw3Ix4kEGBjHioy/jnB/+zLaAwNeybx8N0FI=
Subject key identifier:   94:DE:C5:39:36:14:D3:92:EF:1E:BE:6D:7D:3A:9D:7A:AD:59:76:EB
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       019EB922476290436D3902DCFCA6884DCD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0D63
Signing time:             Fri 12 Jun 2026 00:01:31 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:31 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:31 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: +ouUFXKZ3AQI2aS0PnlDXJGyIijEC22pxJFGa75XuSI=)
                          2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:47:62:90:43:6d:39:02:dc:fc:a6:88:4d:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Jun 12 00:01:31 2026 GMT
            Not After : Jun 13 00:01:31 2026 GMT
        Subject: CN=94dec5393614d392ef1ebe6d7d3a9d7aad5976eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:4c:2d:6b:89:56:02:75:fa:9b:25:2c:34:
                    8f:b4:69:e5:a3:4b:c4:c8:6e:43:6f:f2:ea:ed:fb:
                    ba:51:37:98:5d:8c:ac:b1:67:49:35:82:d0:8c:c0:
                    a9:4b:07:95:c2:29:cd:a5:48:aa:47:83:a5:7a:78:
                    39:60:69:3a:1e:8a:9a:ce:d5:91:41:5f:f0:1d:7c:
                    10:dd:97:30:dd:eb:3c:00:d9:1c:6f:88:85:32:3c:
                    d6:88:5d:d1:31:83:e3:d4:33:e5:c4:a6:13:7e:d1:
                    03:71:30:60:76:63:69:15:e5:f4:0b:4b:a1:44:78:
                    c6:57:2e:64:3d:c0:c0:7c:d7:e5:e0:2a:a5:47:0c:
                    66:cc:c2:61:b4:50:00:89:37:67:68:ff:bf:33:58:
                    48:6a:5f:63:9c:22:79:10:50:e9:3f:46:05:63:31:
                    76:f6:57:92:0c:51:71:8b:0d:57:a5:e1:6d:e1:9a:
                    e5:50:98:d2:8d:57:e7:ed:06:3d:f6:89:f3:9e:4d:
                    04:55:5f:5a:83:95:9f:2a:f3:25:53:7b:ae:82:97:
                    06:a4:75:04:b8:a3:69:e4:8e:aa:f9:d8:3f:a7:6c:
                    f0:b7:91:12:8c:2c:95:e4:24:f8:63:b9:67:57:bc:
                    72:62:de:ca:dd:9f:5c:ed:96:0c:b1:ac:ff:89:64:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DE:C5:39:36:14:D3:92:EF:1E:BE:6D:7D:3A:9D:7A:AD:59:76:EB
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:27:5e:6b:74:56:9e:e2:9c:d0:64:98:29:2d:5b:c0:e9:d6:
         79:96:9d:e9:b3:38:57:7b:31:08:ba:5f:ab:6b:78:64:c9:1a:
         1a:c0:10:15:12:28:fe:d4:06:5d:4c:68:0d:17:4c:c6:37:e2:
         1e:63:bd:ac:b0:ac:b4:67:da:5e:aa:8a:ff:3b:6b:b6:32:ef:
         7c:ad:48:6f:08:2f:24:d9:b6:6b:6d:b7:c2:d0:ae:fc:58:e4:
         19:e2:b7:25:7e:ff:30:a5:89:d2:36:4d:5b:ab:2b:ec:2d:da:
         82:2d:c0:94:c7:48:0c:89:e4:6c:53:73:29:89:f5:00:f0:a4:
         14:b5:2c:78:29:36:38:86:9f:30:e8:4c:7b:3a:a9:8c:79:d1:
         e8:00:cd:ed:5f:b7:18:85:5f:8d:bf:ef:d3:82:ae:c8:d5:2d:
         7a:a6:dd:c1:ce:d6:7a:68:0b:ee:33:85:b7:ef:5d:2c:00:52:
         e5:3c:46:19:88:72:5f:8b:33:60:3d:b6:8f:0f:ce:bd:c7:cf:
         d0:73:7e:f0:ba:1a:95:8f:40:cb:4a:6d:4f:86:60:d7:b2:24:
         88:e5:6e:dd:22:fd:d7:d8:bf:40:4a:a3:c3:fb:08:6d:1d:ed:
         18:ad:f0:9c:44:c2:f3:cc:87:7e:56:27:c6:58:ae:79:9a:76:
         cd:ba:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:30 2026 by rpki-client