Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          G3tDNsOA5xlvZ5EHBkcUtMfZuySumvrifmzY5wCRHXM=
Subject key identifier:   BB:E8:84:B1:2D:95:A2:E9:77:0E:A6:F7:2C:C0:02:4C:E8:AE:ED:E2
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       019F189EBF26319049DDF0C6C10647100178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 13:01:24 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:24 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:24 +0000
Files and hashes:         1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
                          2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: lCqgoZ6iC7JNyiWL0DDGHVQn7j/0Ys0YzXgBU6Uj16A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:bf:26:31:90:49:dd:f0:c6:c1:06:47:10:01:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Jun 30 13:01:24 2026 GMT
            Not After : Jul  1 13:01:24 2026 GMT
        Subject: CN=bbe884b12d95a2e9770ea6f72cc0024ce8aeede2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:c7:32:4c:4f:ae:ac:ff:f6:eb:a8:32:6c:
                    a1:d3:d4:58:7a:f0:e2:c0:01:5d:03:b8:b4:bf:f4:
                    ca:20:bc:f3:57:d9:01:51:0e:18:c2:98:19:40:b3:
                    2d:5d:80:a0:0e:73:d2:f7:f0:ee:fb:52:1a:50:c6:
                    cd:64:fc:44:4e:06:24:93:e1:62:8d:3c:51:1b:90:
                    28:bd:0f:6b:4c:04:cc:0d:24:13:da:2c:5c:8f:72:
                    ef:7d:db:05:f6:0a:f5:b4:74:7d:af:c4:48:4c:4d:
                    70:49:01:b0:8d:4b:8b:61:4a:3f:da:26:2a:48:9f:
                    de:66:13:a9:c2:c8:59:f3:db:47:5f:38:8c:65:b3:
                    24:ea:d0:ed:0a:b6:22:06:88:b1:38:4b:02:ff:53:
                    58:d8:5a:47:64:cd:ba:75:60:66:c8:88:e4:9f:e6:
                    f7:73:ce:68:3c:e0:c5:b8:bd:a9:77:7f:83:7e:82:
                    3b:c5:09:9e:81:59:be:8a:6a:4f:33:3d:7e:6e:af:
                    10:36:bd:86:97:4e:10:a5:a5:5c:f3:c9:6b:66:08:
                    8d:6f:2f:b8:2d:04:bb:b4:70:23:21:03:4a:d0:dd:
                    42:58:2d:d4:ef:a6:bd:c6:b4:41:4e:82:5f:e1:e4:
                    6f:22:f8:f1:15:9c:80:ad:18:01:0c:6f:8a:d5:0a:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E8:84:B1:2D:95:A2:E9:77:0E:A6:F7:2C:C0:02:4C:E8:AE:ED:E2
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:85:5f:be:d3:58:ce:87:64:d9:3e:83:42:5f:3d:0d:e5:
         f9:1b:f0:eb:ff:07:af:87:c4:1c:09:b9:43:80:aa:cb:d4:37:
         c4:88:ba:98:75:9f:43:0e:5b:14:f7:4b:fb:6a:65:17:48:c5:
         df:ad:05:5a:eb:15:78:cd:7a:7d:31:cb:a2:33:eb:3b:77:21:
         5c:8d:2e:01:7a:37:bc:f4:2c:30:d5:87:87:ac:76:0d:9a:6b:
         33:8f:74:43:ce:fd:22:45:91:31:63:98:43:4a:c3:61:28:18:
         7d:99:bb:90:86:8c:15:05:03:b5:ac:63:58:a3:26:3c:df:7e:
         49:e5:5f:15:a5:86:17:43:d5:2f:6d:bd:38:bc:97:ad:fc:03:
         da:5a:d4:b9:ab:3e:71:8b:64:89:b5:59:dc:33:70:8d:52:60:
         2f:01:6f:69:bf:d6:dc:21:69:f8:de:f9:c6:d9:df:fe:52:39:
         5f:94:5d:3f:9c:d8:38:f1:3e:fe:4c:47:24:c7:77:90:92:b8:
         1f:8c:fc:c8:ca:97:37:51:61:60:d1:23:d4:ce:85:5a:ba:ea:
         e7:18:39:36:05:fe:84:f3:a7:a9:20:69:a7:50:78:2b:0d:40:
         19:6f:81:db:77:db:49:eb:7a:c6:f9:b9:df:f8:e2:56:e7:e1:
         69:c5:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:01 2026 by rpki-client