Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
File:                     vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json)
Hash identifier:          ZQOvQeqEf/b8FonrtQzNArV1wUehUljgntkAARSeM24=
Subject key identifier:   02:23:C1:31:89:6C:B9:88:19:C3:7C:BE:D9:3D:42:86:BB:B9:B1:51
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Certificate issuer:       /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial:       019EA8D258102CBBC7D4B73D1EF92C73754C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
Manifest number:          0BCA
Signing time:             Mon 08 Jun 2026 20:00:17 +0000
Manifest this update:     Mon 08 Jun 2026 20:00:17 +0000
Manifest next update:     Tue 09 Jun 2026 20:00:17 +0000
Files and hashes:         1: SCwYEksLc5pIHj0oq0DzbDwyJAg.roa (hash: fOZQNI/tC5DxhiQsazq5IbDEzwvFrMwOKbJ6WnLNRTg=)
                          2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: Jpx+801mq4XdKsrplhM1f23/Z8euW/20EIOBYbJtxFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:d2:58:10:2c:bb:c7:d4:b7:3d:1e:f9:2c:73:75:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
        Validity
            Not Before: Jun  8 20:00:17 2026 GMT
            Not After : Jun  9 20:00:17 2026 GMT
        Subject: CN=0223c131896cb98819c37cbed93d4286bbb9b151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:28:44:50:d2:3f:da:99:05:9c:7d:74:d0:
                    e8:fb:34:30:49:ac:15:32:cb:9f:7e:b3:71:19:92:
                    37:93:18:19:2e:d7:42:f4:43:ea:bb:23:10:96:13:
                    03:92:6a:0c:b2:5a:3c:74:e3:2a:bc:73:73:00:8e:
                    6e:d8:90:7e:c4:2b:26:ab:5a:59:31:eb:1e:a4:7b:
                    d0:be:27:7f:2e:66:8f:11:92:c7:51:af:25:78:22:
                    75:c5:c2:70:25:fd:76:da:8d:43:80:16:39:77:c6:
                    b3:d4:98:06:0d:7d:d8:6e:ea:d4:99:85:4e:57:40:
                    1c:b2:a3:54:1b:6f:2f:99:02:66:00:c5:24:79:3c:
                    27:bb:12:ff:9f:4b:57:24:5e:3a:16:22:5b:c2:59:
                    0e:77:0b:83:1e:5d:05:fe:1e:19:41:48:cb:7e:2e:
                    85:c0:71:1d:b6:6b:03:66:da:43:8a:c5:58:e2:23:
                    7c:6b:6c:b1:ff:7b:da:ab:cc:a8:97:43:77:a8:1f:
                    e5:ad:35:17:3b:58:51:b1:12:d5:f0:33:dd:c5:7d:
                    51:88:6c:3a:76:45:c1:ac:c5:f3:3c:2d:a3:c8:7d:
                    65:b1:a7:11:99:bc:f9:19:bc:be:79:67:1c:8e:97:
                    01:c1:24:cd:a9:ef:bc:13:03:69:7e:2a:d4:9d:e2:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:C1:31:89:6C:B9:88:19:C3:7C:BE:D9:3D:42:86:BB:B9:B1:51
            X509v3 Authority Key Identifier:
                keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:0c:9f:77:2b:f6:21:1d:e3:b8:f4:30:8b:c6:0b:f3:1d:
         e7:ef:03:6f:e7:91:54:61:8e:09:54:38:d6:91:1e:85:6d:3d:
         88:d4:ba:bb:77:67:c3:4a:26:fb:80:71:62:86:a4:91:bf:ac:
         e5:b4:e0:64:81:f0:88:78:e7:40:ef:85:3c:18:18:f4:18:b0:
         7c:96:c3:6a:ba:c3:ac:0d:2b:d6:c7:7c:33:d7:44:8d:7c:6e:
         94:07:ff:30:90:10:8e:46:b8:31:57:2b:18:50:20:47:1e:b5:
         7c:52:2b:39:33:f6:e1:68:5f:e9:67:98:47:b6:b4:00:ae:52:
         85:43:f0:76:1d:09:eb:9d:97:56:0a:c3:76:61:d0:d3:7d:60:
         c9:5d:ee:dd:55:47:f0:36:02:df:f5:75:77:4d:23:24:65:7d:
         33:8b:ac:18:dc:3c:23:96:31:c4:33:a2:27:15:e8:53:a4:be:
         12:e7:26:db:b9:a0:1f:b9:88:ab:30:33:e4:e3:c2:24:4f:82:
         a3:06:39:d0:c2:00:63:da:51:d3:b0:e8:39:79:eb:98:12:15:
         82:4f:14:d6:45:40:e4:ca:2a:f9:6a:b6:60:ba:e4:c5:b7:ef:
         e1:df:52:ef:a0:98:3d:42:66:29:a0:2f:94:07:c3:4a:ee:68:
         07:27:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:26:17 2026 by rpki-client