Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File:                     Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier:          ip+asDrRPr4XGwrLyEhcuu0oBhAySH6BDh7Lk258kvU=
Subject key identifier:   46:57:AD:98:4D:82:B1:39:FD:80:94:65:23:B1:6B:D5:1D:B1:D7:B9
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer:       /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial:       019EFBA801E8EAF114664C639251DC927D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number:          1984
Signing time:             Wed 24 Jun 2026 22:02:32 +0000
Manifest this update:     Wed 24 Jun 2026 22:02:32 +0000
Manifest next update:     Thu 25 Jun 2026 22:02:32 +0000
Files and hashes:         1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
                          2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: p7SIdpWt0eKxEVpRwf2NX0fTvjzGI1jGM628VFe52i8=)
                          3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
                          4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:01:e8:ea:f1:14:66:4c:63:92:51:dc:92:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
        Validity
            Not Before: Jun 24 22:02:32 2026 GMT
            Not After : Jun 25 22:02:32 2026 GMT
        Subject: CN=4657ad984d82b139fd80946523b16bd51db1d7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:a7:85:5a:9e:90:d5:3b:75:33:8f:c7:80:
                    98:ca:7b:b0:30:d8:5e:5f:29:d4:05:2d:30:d5:bf:
                    bf:60:74:71:64:61:58:be:fb:1e:6c:4c:3e:1d:9e:
                    f0:9b:70:fa:3a:20:d1:4d:2a:34:22:22:08:a3:17:
                    dd:6c:d5:5d:49:ee:78:12:23:fe:8b:18:10:6e:80:
                    6b:87:87:e8:ed:b5:cb:15:19:27:63:68:fb:f1:ea:
                    54:3c:c7:89:54:59:c9:e1:03:ee:b1:76:e9:8c:dd:
                    0f:d9:0d:39:d1:03:3b:62:df:e9:e7:03:c5:23:35:
                    92:1e:3b:fd:28:25:35:44:f4:cd:ca:9e:ef:ec:c4:
                    1a:eb:fc:fa:d3:c5:82:2b:de:fc:9a:75:e1:7a:5b:
                    62:9f:fb:7b:92:00:b8:2a:b3:76:2f:4d:f0:19:3d:
                    31:16:35:08:89:1b:e5:78:74:df:3d:21:7d:09:8b:
                    84:6e:4a:3c:08:6b:3c:b9:ac:7b:cc:3c:52:88:69:
                    42:8d:e9:45:b8:af:4e:3a:ea:bb:7e:76:5a:ce:65:
                    bb:a7:ec:b4:33:ef:24:7e:80:54:77:46:33:b7:b1:
                    fa:ef:ed:f9:ef:cf:3c:b1:ce:48:0a:60:c8:e6:a8:
                    b4:c9:24:3c:92:0c:94:86:4f:b9:38:30:c5:c0:39:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:AD:98:4D:82:B1:39:FD:80:94:65:23:B1:6B:D5:1D:B1:D7:B9
            X509v3 Authority Key Identifier:
                keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:43:fd:6f:81:31:f0:f2:f6:7a:84:d0:4a:73:10:32:da:
         8b:f0:01:49:f0:67:c9:c4:c8:5e:eb:f3:00:82:3c:1d:35:c9:
         d6:5a:46:6a:2c:53:9f:f5:fe:21:7b:5f:ca:8d:88:5f:2e:08:
         a5:f3:85:f7:c8:2e:5a:0b:37:b7:10:97:40:ac:68:15:10:17:
         24:23:7b:a0:23:98:96:e4:70:0e:ef:f9:21:86:b9:5e:5c:d5:
         8e:1f:d1:0f:55:75:0c:90:66:90:02:cc:8c:fe:47:8a:a9:f1:
         64:22:8c:26:59:06:82:f8:ea:3c:f5:bf:49:6f:fe:47:26:9d:
         85:52:27:6d:d3:23:66:f1:de:60:46:d9:69:e1:54:e7:73:06:
         68:a0:bf:2d:aa:01:72:05:19:75:c6:f7:95:28:4e:80:14:19:
         8b:fd:97:fd:be:c0:8a:77:60:9a:aa:ce:73:d3:02:fe:02:67:
         d9:19:25:b4:ff:bc:31:78:80:b7:38:c6:9b:ae:fc:9c:56:69:
         d3:6d:ba:ec:d5:22:99:86:f9:d6:53:25:bc:5b:0c:b5:25:6e:
         f4:29:2d:58:6c:b8:77:7e:b8:5e:e3:1f:7a:77:de:27:f2:d2:
         37:ca:65:2e:5e:d3:04:44:ae:c0:36:28:5c:ae:a6:dd:c3:e9:
         f9:78:87:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:43 2026 by rpki-client