Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File:                     bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier:          M/FC4fwF3Reu1Abji+6CIRPn2S1SFcf5JzEHDf5P1lU=
Subject key identifier:   48:AD:B6:FE:B5:13:4C:4A:96:6B:B5:2F:AD:06:87:C2:41:12:90:49
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer:       /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial:       019E56A41D58EB76261E9BE0739C116EFEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number:          01F2
Signing time:             Sat 23 May 2026 21:00:56 +0000
Manifest this update:     Sat 23 May 2026 21:00:56 +0000
Manifest next update:     Sun 24 May 2026 21:00:56 +0000
Files and hashes:         1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: Pa/lqiSLKDkoS8l4U3CE55W7m78JjaF9Cy5fAPaWv1I=)
                          2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:56:a4:1d:58:eb:76:26:1e:9b:e0:73:9c:11:6e:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
        Validity
            Not Before: May 23 21:00:56 2026 GMT
            Not After : May 24 21:00:56 2026 GMT
        Subject: CN=48adb6feb5134c4a966bb52fad0687c241129049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:f5:5f:60:c5:20:3a:bf:2f:34:c4:42:53:
                    36:d2:84:8a:6e:23:ab:26:4a:db:a4:2a:c2:cd:a3:
                    12:50:43:2c:6d:9d:f8:f8:d9:21:66:f2:37:bf:50:
                    0b:21:ce:eb:6d:18:c3:8c:0b:de:e6:be:6f:49:b1:
                    98:a4:7a:e4:ca:3d:9c:0c:3a:64:20:bc:45:ed:4e:
                    98:e1:e2:eb:60:c5:3a:e2:9a:91:c6:80:f4:9e:ae:
                    c3:12:aa:86:7a:95:04:ce:fb:ee:cc:43:a3:0a:6d:
                    0b:08:62:66:27:2c:ef:f6:b3:20:60:21:bf:15:72:
                    ab:bd:d9:eb:5a:30:cb:a5:aa:78:15:b7:70:9f:cb:
                    b4:ac:52:a9:75:2b:a0:ca:28:7a:d1:97:66:7b:a1:
                    ea:6a:94:04:67:5c:85:40:07:6f:a4:cc:7a:90:51:
                    e0:d1:80:d7:1f:4c:21:69:f4:8a:d9:92:9d:57:c0:
                    a9:1e:ed:57:d1:ee:91:ce:1c:a4:23:f5:fe:5d:cb:
                    73:38:70:02:c5:76:0a:fd:af:43:4a:5e:b6:03:7c:
                    0b:13:92:55:24:15:42:3d:b8:1c:af:7d:49:d0:8e:
                    b7:d5:f5:ae:11:cb:f2:1e:50:66:f2:d2:e5:a2:8d:
                    e0:30:bd:74:da:47:a1:f5:1d:92:44:b6:5b:8d:10:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AD:B6:FE:B5:13:4C:4A:96:6B:B5:2F:AD:06:87:C2:41:12:90:49
            X509v3 Authority Key Identifier:
                keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6f:17:06:b9:59:2a:0d:9b:8b:7f:f4:ff:da:15:cb:66:6c:
         11:f0:98:0d:4a:40:2c:f2:1b:c9:65:79:c7:e6:1d:23:80:27:
         cd:00:62:84:e9:d3:72:97:b4:42:b5:c2:ab:a5:e7:a9:a1:01:
         cd:6b:bd:fd:c6:17:1b:7a:d2:72:b6:4d:61:ab:4b:38:e9:6e:
         2a:51:fc:41:d9:1a:c4:d8:f1:13:3f:06:13:80:e9:3e:f3:d2:
         39:ea:f6:d6:b8:d0:35:d7:43:42:0e:df:57:a7:32:58:c6:e8:
         43:e9:82:dc:a2:5a:fd:ec:c3:94:26:04:41:be:f3:96:5f:f0:
         49:14:2f:50:f3:67:bf:e4:7a:92:bc:fd:f5:25:e5:50:61:c3:
         64:3a:72:c9:d2:2d:3c:3d:a4:4c:0f:aa:ee:24:a7:70:24:79:
         ce:7e:4a:be:66:58:bc:e7:fc:d1:0e:c2:7e:48:34:30:48:12:
         39:aa:09:00:6e:7d:4b:55:7a:2f:9e:2c:41:19:7a:17:04:09:
         71:58:c9:e8:1b:c6:7b:a9:ae:21:ab:56:1c:a7:14:11:86:a6:
         7c:cb:ef:d6:0d:48:69:f1:45:16:06:ee:c3:a6:b7:16:d0:f9:
         5e:29:41:4c:59:17:6e:7e:c0:1a:7c:19:9f:14:4d:c4:83:8d:
         e9:12:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:55 2026 by rpki-client