Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File:                     RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier:          3tCfe8TH8X7LzzsRJZOuwfXGTl1gHJf4+6kBvi9BLng=
Subject key identifier:   65:DB:AF:3A:C5:CE:8A:06:BF:E6:56:18:A2:4B:E8:1D:F4:6E:D4:39
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer:       /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial:       019EB80E91F200F81743F3796076452D2C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number:          0B94
Signing time:             Thu 11 Jun 2026 19:00:23 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:23 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:23 +0000
Files and hashes:         1: 1BErc-sCXugnHLg09q4n_ZjYz7I.roa (hash: 52qZtaxRHc/C+Jbo8eGgMzX6zH/fjvF2XaUR90mgHO4=)
                          2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: eGUZI2oljvCet78frtXaxczWqKEGRz7RW0wXVU9XClo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:91:f2:00:f8:17:43:f3:79:60:76:45:2d:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
        Validity
            Not Before: Jun 11 19:00:23 2026 GMT
            Not After : Jun 12 19:00:23 2026 GMT
        Subject: CN=65dbaf3ac5ce8a06bfe65618a24be81df46ed439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:c4:87:0b:e0:d8:47:bb:45:00:18:8a:11:
                    42:20:19:52:a0:30:1c:9d:be:cd:f4:b3:31:79:d5:
                    21:cb:42:5c:80:c8:8c:7f:78:3a:9a:46:3b:ff:cc:
                    7b:41:b0:e0:31:6c:b4:76:e4:59:bc:35:9e:36:63:
                    59:93:ce:76:8c:aa:9f:75:e7:b8:70:59:8c:63:12:
                    0e:dd:26:b8:94:81:d3:f3:fc:2e:34:15:1c:ba:6d:
                    6a:8f:73:b3:20:1b:10:ea:ce:60:8a:c1:e5:d2:20:
                    d9:f8:f9:b9:c3:0b:14:8e:7b:17:40:45:67:00:90:
                    67:1e:9a:77:a3:65:b5:bf:ac:f6:93:ab:77:76:56:
                    69:7e:17:eb:1e:16:b2:e8:da:88:06:2b:08:2a:6c:
                    4e:34:af:f1:bd:98:8f:04:21:74:22:55:dc:c1:2f:
                    a5:31:15:93:3b:89:90:ca:95:20:3e:d8:9d:7a:35:
                    79:c8:6c:91:5c:62:ed:88:1e:f1:fb:1c:20:cd:ab:
                    4e:01:ee:51:c0:93:4e:2e:ce:3a:a1:79:9a:0f:ad:
                    7b:ea:0f:4c:8b:fa:50:27:69:ea:e2:5f:86:9f:23:
                    84:5a:13:20:ec:86:6a:c0:bd:c9:36:a2:2c:29:f1:
                    56:7c:90:eb:c5:33:08:96:b7:7f:82:20:72:41:6a:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:AF:3A:C5:CE:8A:06:BF:E6:56:18:A2:4B:E8:1D:F4:6E:D4:39
            X509v3 Authority Key Identifier:
                keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:ee:8e:4c:8f:0d:4a:1b:87:ab:61:d0:83:cb:98:01:e9:
         c9:3e:80:bf:1b:68:2e:e2:63:6f:15:63:96:80:62:c3:81:fe:
         fd:ba:91:37:1b:59:1b:bd:f1:3b:2e:10:21:55:c7:b7:05:83:
         e0:a0:e2:6a:45:d1:73:f7:ba:42:b2:ca:db:7e:0c:a2:d7:df:
         e7:61:86:3b:e1:db:b1:64:48:33:80:bb:3c:28:c5:21:31:b0:
         69:21:5b:04:a0:b4:90:cb:40:32:fd:aa:6f:68:5f:64:1e:21:
         4f:e5:c3:b6:36:d4:ef:06:e1:7d:25:e3:d5:d5:8f:34:01:d9:
         45:ed:d0:02:3b:f7:a8:2b:62:da:c9:41:89:df:7e:48:7f:e5:
         a8:7d:10:41:84:38:8e:b2:87:d2:e4:11:37:92:f2:e8:73:0e:
         d5:ff:06:8b:cc:0a:52:5b:11:ea:dc:c8:16:01:ff:d4:69:60:
         59:e4:73:b6:9a:1c:6e:02:90:0d:e6:4d:35:4f:dd:e0:fb:b9:
         b6:20:3e:53:d1:57:30:18:36:6f:b1:9c:b5:a0:b5:23:e3:0d:
         88:36:52:6d:29:2f:3d:d6:d9:14:1f:81:2a:8b:76:92:e6:75:
         8b:4d:f2:58:28:5e:4f:f5:f0:a9:20:f1:2e:22:17:7d:b7:a1:
         1e:7a:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:22:05 2026 by rpki-client