Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File:                     bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier:          8qDh6EQ9+DdKPyMfEc12OC1FNFhmt1+xxowazlUHY38=
Subject key identifier:   07:C7:77:9C:01:E4:CC:42:BD:E8:22:B0:56:C3:7B:39:08:CD:AA:9E
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer:       /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial:       019F126547A1703ED82A45554969AAD0B281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number:          0219
Signing time:             Mon 29 Jun 2026 08:00:55 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:55 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:55 +0000
Files and hashes:         1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: yz5p+xz0rqv93Lo6b3+/OorbXgD185eUWpdmqqVY5Rg=)
                          2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
                          3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:47:a1:70:3e:d8:2a:45:55:49:69:aa:d0:b2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
        Validity
            Not Before: Jun 29 08:00:55 2026 GMT
            Not After : Jun 30 08:00:55 2026 GMT
        Subject: CN=07c7779c01e4cc42bde822b056c37b3908cdaa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:36:a7:60:8b:85:76:b2:6e:ac:a4:55:0c:a7:
                    15:a2:71:bc:03:9a:42:c0:5c:78:92:e1:86:6c:ee:
                    7a:37:46:4b:7f:bf:7c:64:16:a5:4f:ab:f2:ec:34:
                    e1:a6:fa:b2:58:2a:f8:ac:56:3a:fa:2f:eb:c2:13:
                    45:1b:56:e0:b8:52:ff:0b:63:ba:03:ba:f5:ac:a6:
                    c7:81:31:65:f8:4a:80:ed:19:a9:d4:9c:22:78:a4:
                    61:c4:f9:52:83:e9:aa:e5:d7:a2:c8:b4:c2:7c:ca:
                    ba:8b:f2:99:a2:77:17:3e:f0:f4:49:bb:49:35:cf:
                    2e:f2:86:79:f5:af:34:99:43:da:a1:5e:5b:15:e3:
                    ee:cd:40:50:8b:ae:e4:72:6b:fd:02:0b:ed:64:80:
                    d8:20:c5:92:7f:8e:02:4c:c0:15:93:62:8f:f3:ae:
                    8e:9b:50:73:22:35:36:7c:7d:73:e8:68:16:ff:c1:
                    f4:bb:4a:db:30:4c:e1:e0:c9:2c:24:61:0f:5e:21:
                    45:c9:7d:d8:00:19:88:5f:09:43:50:b1:c5:f8:23:
                    87:a3:df:a0:74:ef:4b:0d:a4:e2:4d:f1:6e:8a:87:
                    63:b4:76:3d:4f:91:ed:3c:06:cc:de:ec:94:d0:19:
                    e5:2f:67:38:9c:0f:5d:0b:d0:b6:77:a6:fd:a4:a6:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:77:9C:01:E4:CC:42:BD:E8:22:B0:56:C3:7B:39:08:CD:AA:9E
            X509v3 Authority Key Identifier:
                keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:88:5d:b4:e7:a4:0c:c3:c4:4a:40:a1:02:e7:29:ca:68:c0:
         af:f6:f1:7a:e2:48:f0:e8:5f:73:ba:9a:72:a7:bc:3e:c8:fa:
         07:c9:50:67:3b:ba:78:67:99:c0:01:90:af:a6:f1:35:bd:55:
         6b:38:6e:27:3e:ef:7c:e0:a7:14:78:be:e2:a8:62:7e:e7:bf:
         e8:d4:84:3d:bf:72:b0:f4:fe:f8:9a:83:02:a4:34:c1:6e:fe:
         d6:14:1a:ef:7b:f1:ad:fc:5c:15:08:fb:e0:74:6b:4e:7d:d9:
         73:cd:9a:0f:2a:17:37:ba:6b:9f:bc:f4:99:5d:ee:fe:39:6a:
         fc:06:cc:fa:b8:96:b3:5f:8a:2c:78:c2:c5:27:24:7f:e1:8a:
         86:5b:f0:31:f9:d8:58:cf:70:19:30:f0:12:eb:87:14:1d:fa:
         d0:cb:99:9f:63:a3:9b:fe:d8:2d:d5:61:21:a9:2f:59:a4:2b:
         f8:cb:2e:75:04:84:56:1b:09:05:8c:6f:4d:7d:d5:91:3b:24:
         66:d4:44:a2:e2:eb:f8:98:0e:f3:ae:d1:d4:9e:ed:20:37:ea:
         56:02:fb:13:05:c7:26:3e:d5:99:43:05:46:6b:d8:af:48:07:
         27:a9:37:20:9e:7c:ef:3c:29:b1:86:8d:4d:14:29:8d:bb:d6:
         83:e2:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:42 2026 by rpki-client