Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File:                     bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier:          yTYLEbt8XFDQFdIR8inE71WgmgjxOTSjcsIt0M3NQas=
Subject key identifier:   2F:C2:6B:50:F2:06:8A:F9:36:22:0A:40:F0:CB:56:57:F0:C8:E5:8D
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer:       /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial:       019EB7A0EC888AD16CB168CD23B989B0E5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number:          1455
Signing time:             Thu 11 Jun 2026 17:00:37 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:37 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:37 +0000
Files and hashes:         1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: tlP123kLJ/GIR4OlZlHnLEL5A3d8HMas1rfhpX/Bq/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:ec:88:8a:d1:6c:b1:68:cd:23:b9:89:b0:e5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
        Validity
            Not Before: Jun 11 17:00:37 2026 GMT
            Not After : Jun 12 17:00:37 2026 GMT
        Subject: CN=2fc26b50f2068af936220a40f0cb5657f0c8e58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:1f:77:15:ed:27:2c:00:1e:71:e0:bf:3d:
                    0a:88:f9:b9:86:c9:2e:43:bc:c4:f1:6c:5c:46:3b:
                    e4:92:56:26:bf:83:16:e0:f9:01:9a:1d:d6:a8:8f:
                    cb:37:0e:73:af:9a:ce:93:4a:28:fb:d2:98:10:fb:
                    e7:c5:07:a5:ab:79:21:d5:44:0a:cb:86:7e:af:1d:
                    20:32:eb:2e:30:3e:73:35:f9:10:cc:80:39:3e:d2:
                    fe:bd:ef:20:82:5c:cd:7a:16:1d:ef:60:9f:00:e3:
                    19:89:0c:41:85:8d:48:0d:52:13:3f:79:54:b2:78:
                    fe:fa:8c:bd:22:e9:48:af:53:17:07:1a:fe:18:53:
                    ef:2c:94:99:64:f1:34:35:c2:a7:32:83:eb:7c:d3:
                    28:ad:dc:99:4b:d5:87:7a:8e:78:5b:76:09:f2:e0:
                    59:87:ea:57:d6:85:d9:05:d5:aa:11:22:c5:cf:1b:
                    e2:06:cf:ba:92:a9:e5:8c:75:99:15:33:be:7b:7f:
                    82:f1:d7:0c:36:38:ff:19:17:6f:5d:9e:8d:6a:85:
                    d4:49:e2:c2:ca:d9:0a:05:58:eb:8f:e9:8f:24:f4:
                    cd:4f:2a:14:e3:5d:c0:b1:82:86:8a:8a:3f:db:1b:
                    f8:e4:5d:3a:df:af:c0:cb:d6:ce:ed:ca:da:51:84:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:6B:50:F2:06:8A:F9:36:22:0A:40:F0:CB:56:57:F0:C8:E5:8D
            X509v3 Authority Key Identifier:
                keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:00:2c:7b:17:39:95:f3:71:42:84:7d:4e:a3:8d:06:00:79:
         a5:54:ea:01:a9:a3:43:03:fa:80:03:81:22:27:2a:de:69:a7:
         86:2e:d8:e2:27:f9:30:14:d0:5b:ea:de:65:d6:b3:c9:e4:dc:
         29:72:c4:87:61:0b:e8:97:88:be:2c:2f:e2:a1:59:8c:55:0b:
         d8:00:33:25:22:3e:c5:be:82:3d:dc:44:ca:53:56:c9:1a:5e:
         7a:ed:35:72:b6:e4:11:71:5c:e0:09:1a:c0:e3:81:3d:66:77:
         b6:0d:a2:65:c1:32:6f:81:16:a9:97:bd:71:0d:92:13:78:61:
         46:3b:f4:33:55:2b:d7:3b:93:0d:0a:16:29:01:a6:78:7d:da:
         54:fc:a3:b8:66:b9:0c:aa:44:ef:b8:56:12:ea:be:1b:62:c9:
         fc:74:e4:58:0c:d5:92:2f:60:05:97:85:89:90:f1:63:58:3c:
         7e:c7:90:79:b9:22:a0:56:99:a4:33:70:bc:68:73:f9:d0:79:
         3e:49:e9:1e:a5:f2:32:91:6e:e6:df:38:60:55:4e:18:14:55:
         cd:2a:0b:0b:cb:10:ff:08:91:01:b1:53:1d:61:f7:57:dc:9c:
         76:8a:21:b8:7e:c6:5f:4c:26:2b:bc:20:e9:33:fe:da:ea:ea:
         68:b2:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:26 2026 by rpki-client