Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          LEGJCNuFdccXMgrMQMYueUWhxMDL63aEPhkS8BnNW90=
Subject key identifier:   8B:49:93:91:3B:A5:A9:EF:C0:C8:12:87:49:E4:9B:1F:FA:B8:F3:2A
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       019F190D32EC611AAAC1D2253D86168AB2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          0DD7
Signing time:             Tue 30 Jun 2026 15:02:03 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:03 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:03 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: eaBvkjK7s5IY5GRJx3oCeKBxLp/x92kPYVE0xTD/RQ8=)
                          2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:32:ec:61:1a:aa:c1:d2:25:3d:86:16:8a:b2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Jun 30 15:02:03 2026 GMT
            Not After : Jul  1 15:02:03 2026 GMT
        Subject: CN=8b4993913ba5a9efc0c8128749e49b1ffab8f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:60:a2:f1:fc:79:e6:b7:6e:d1:e6:60:ba:
                    f5:58:b3:e1:b5:fd:72:3b:49:47:af:84:53:9d:51:
                    d4:94:9d:7b:56:d9:7d:30:f2:fa:ef:9c:77:a3:bd:
                    6c:80:01:51:be:13:54:24:f9:2d:a0:28:3b:61:2f:
                    2a:b2:4d:d6:0c:0c:20:e6:5b:23:ca:4b:1e:07:a5:
                    b2:45:34:86:d4:ec:76:9f:1e:37:79:73:5f:2f:36:
                    90:42:4a:16:f3:ce:f9:03:cf:4a:92:1d:91:22:21:
                    85:e0:32:6d:76:e0:7a:4c:88:ed:b7:56:10:8a:03:
                    80:11:97:11:29:48:57:0e:0a:2d:2d:30:62:06:6d:
                    09:0c:8a:30:6c:57:54:66:ce:74:ab:16:b6:c1:38:
                    29:54:9d:e8:b8:1f:dc:9e:4a:ee:4d:19:53:58:cd:
                    1c:0c:52:5e:d9:70:4b:ff:93:90:2b:c5:49:09:87:
                    82:3e:1b:57:b4:ef:02:cf:aa:6e:5b:7b:eb:11:ae:
                    1d:85:35:5b:17:43:35:79:7a:df:39:87:20:0f:8c:
                    2d:48:4d:24:6f:44:a0:15:89:bc:9d:73:67:dc:e6:
                    0a:9f:1d:03:cc:ae:3f:c5:de:4b:46:7f:3c:dc:49:
                    97:69:6e:57:66:44:86:12:73:f8:f1:b9:58:6a:4c:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:93:91:3B:A5:A9:EF:C0:C8:12:87:49:E4:9B:1F:FA:B8:F3:2A
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:5f:12:49:d0:11:f2:71:08:fb:c3:cc:cf:b0:ba:11:d8:
         08:09:fc:04:69:99:1f:87:51:96:f3:24:18:ec:fc:0c:68:ec:
         cd:7f:39:da:6c:7f:1a:42:82:9d:45:5c:01:37:a7:bd:d3:18:
         67:49:c2:f9:9f:a1:21:97:69:7d:ca:5a:af:76:b7:69:f2:c3:
         b3:ad:7a:39:06:e0:5a:d4:75:b8:55:04:f9:fe:ea:c2:de:10:
         74:7c:d0:a6:aa:cf:e6:a0:59:97:b9:99:07:e9:1f:f0:ce:66:
         40:27:f8:cf:00:52:d6:75:a8:84:2a:44:b6:ae:df:36:2a:20:
         cc:bd:ce:9a:6e:e8:1e:d3:31:94:de:d1:0f:04:ee:26:d3:66:
         7d:05:6d:04:8a:a7:29:cf:e7:c4:df:1d:e3:97:41:75:b9:6c:
         07:7e:d3:01:80:c4:00:bc:29:6f:53:47:ec:cb:f5:a2:3a:7d:
         f2:07:b4:33:f6:c2:47:8d:38:d0:af:2e:17:6b:20:10:50:1e:
         4a:2e:46:4a:86:06:85:79:79:22:4d:53:25:e2:7f:3e:2f:78:
         33:50:67:49:5c:95:45:ca:06:3a:11:60:44:91:70:6a:91:ba:
         e7:cd:69:5f:f5:ec:99:12:42:70:ad:ca:de:56:53:24:c8:e5:
         3d:3e:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:24 2026 by rpki-client