Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          UoN/8UdWx5UcRipEBsqy37I7vTurwwf+hr7wZCveVjI=
Subject key identifier:   60:40:6C:E2:6D:60:AA:08:45:0C:9C:50:E0:3B:20:55:E1:E3:52:7B
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       019E2FCDFF777C6631E911DB738014D8D4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          070E
Signing time:             Sat 16 May 2026 08:01:29 +0000
Manifest this update:     Sat 16 May 2026 08:01:29 +0000
Manifest next update:     Sun 17 May 2026 08:01:29 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: KTUojke55X0Tk6Ie6v8CnjYge5v2KPtsj0BucKbf3jU=)
                          2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:ff:77:7c:66:31:e9:11:db:73:80:14:d8:d4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: May 16 08:01:29 2026 GMT
            Not After : May 17 08:01:29 2026 GMT
        Subject: CN=60406ce26d60aa08450c9c50e03b2055e1e3527b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:97:76:c9:3c:a8:9f:cf:06:9e:f2:c8:e0:
                    78:58:6d:d0:9a:d1:b5:ca:52:e5:cb:69:68:7f:2b:
                    03:1b:84:a9:63:41:e9:0d:87:80:42:c7:51:d8:74:
                    b8:73:d7:ac:9f:fe:57:c2:1c:4e:02:c7:7f:13:5d:
                    21:e5:7d:d5:a9:9f:69:2e:e0:19:67:1e:bc:e9:f1:
                    b8:a5:d0:f1:eb:1c:b9:5b:fa:dc:db:f3:a5:c3:ca:
                    8e:31:be:a4:27:1b:b2:08:67:02:90:19:cf:47:96:
                    a9:ca:de:d3:66:37:b8:98:23:dd:b7:b8:08:1f:21:
                    55:00:5b:9b:b2:69:45:ce:09:33:57:c3:98:23:84:
                    bf:d6:5b:09:c2:4e:2b:b5:e1:48:c5:99:10:47:65:
                    4a:d3:a6:52:bb:10:e2:d7:ab:ce:cd:05:ad:a0:eb:
                    a2:49:d0:4a:ac:ae:af:6b:e5:d9:dc:63:7d:e4:f2:
                    7a:27:5f:4d:ae:30:71:84:76:5b:65:b5:a5:b2:32:
                    06:00:de:f5:2a:59:2b:cd:83:b0:47:8c:61:89:88:
                    23:4b:ff:81:db:94:8c:07:b2:98:e2:9b:2e:db:f4:
                    35:59:00:2f:7c:14:8c:a0:65:41:7d:15:4e:28:b4:
                    83:33:e1:08:95:6f:f4:e5:59:ea:f3:10:dd:9b:11:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:6C:E2:6D:60:AA:08:45:0C:9C:50:E0:3B:20:55:E1:E3:52:7B
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:f1:ad:63:fc:a0:d2:59:fd:1b:17:90:3c:46:68:21:8c:
         e2:79:31:7a:d4:18:07:d1:1e:51:ca:d8:53:bc:01:f4:a2:7d:
         d5:38:16:24:7e:45:0e:09:71:dd:77:35:bc:cc:a6:32:60:3b:
         73:8d:01:bd:40:f5:2c:43:73:bb:b4:0c:e9:c5:03:f2:69:bd:
         84:48:95:07:74:60:91:57:64:f4:5c:f9:2d:ad:1b:aa:23:5a:
         68:b2:f9:58:bd:a1:30:3c:2c:40:49:5c:bd:68:80:f2:b7:d5:
         25:83:46:54:4c:48:41:38:f6:32:1b:39:85:b2:1c:24:ae:75:
         1e:88:9f:51:30:fc:07:c0:ce:eb:31:9a:cd:59:f5:01:49:60:
         f7:b4:48:81:c5:c8:ae:a4:a7:77:0b:6f:eb:82:27:9c:86:ab:
         11:b6:b6:85:fb:0c:9a:6d:0e:32:54:62:c9:07:9a:48:47:d6:
         cf:9a:67:54:92:ac:89:57:93:60:3d:3c:fa:03:f4:4d:c9:96:
         a5:99:a3:e5:5f:a1:85:06:49:98:2d:c8:35:f4:9c:a9:e5:d7:
         19:4e:76:ed:ba:6e:13:10:53:2c:78:17:36:19:af:c2:89:e3:
         c6:b8:55:77:20:7e:cd:09:77:0f:d1:dc:87:53:de:cd:6a:eb:
         97:d6:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client