Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          lZ632ZClgz4eNkpbL3JJKrnxJdcJI2/ZIoeauExlRqE=
Subject key identifier:   39:6F:E5:BD:C4:85:37:23:AF:35:74:6A:7C:07:37:7D:28:17:89:D1
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019F1867755B43EBE7ECEA3794FCF8841A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          1663
Signing time:             Tue 30 Jun 2026 12:01:01 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:01 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:01 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: rm9et2rXabIPYHAy6AFJoYB0WWJKLjtWrVyO+vXhqB0=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:75:5b:43:eb:e7:ec:ea:37:94:fc:f8:84:1a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jun 30 12:01:01 2026 GMT
            Not After : Jul  1 12:01:01 2026 GMT
        Subject: CN=396fe5bdc4853723af35746a7c07377d281789d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:63:74:a8:96:ce:2b:3e:e5:e7:c2:46:c8:
                    03:fa:34:3d:a4:31:fb:9c:0d:86:2f:dd:f2:5d:fe:
                    39:54:fe:eb:2c:77:ca:28:ae:f5:59:ac:1f:e8:6c:
                    cd:0f:0e:aa:61:ce:ef:bf:6f:13:d5:1c:49:96:95:
                    bc:25:d6:0d:f7:16:d1:06:f2:7e:08:6a:03:0d:91:
                    c7:eb:99:28:f5:75:9b:f1:fe:26:00:33:14:02:61:
                    70:15:6e:23:c6:97:5c:c8:a1:b7:99:93:8a:c3:56:
                    a0:ba:bf:29:29:6c:39:16:6b:63:df:b1:f4:c0:8e:
                    e2:0c:ab:3a:92:ef:82:38:e5:f1:7c:f8:01:b3:c2:
                    81:99:1a:12:90:a2:3e:52:14:d5:16:4d:e9:35:b7:
                    1b:4f:bb:1d:6e:d3:e7:2d:e1:33:a2:bc:c3:fd:8c:
                    80:51:ba:16:41:0c:72:40:69:35:a5:50:d2:af:92:
                    32:f9:38:bf:40:a9:46:ab:83:da:7f:52:7f:eb:6e:
                    67:d9:1d:34:c3:2f:2a:1d:74:92:3b:b1:91:38:c4:
                    b2:4b:16:e9:e8:3e:5a:74:04:3d:04:ff:ab:c3:48:
                    51:72:b3:ba:89:b5:ec:24:19:66:06:79:56:67:4f:
                    8d:7d:95:fd:4f:9d:fa:55:0a:37:ce:0d:a8:74:52:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:E5:BD:C4:85:37:23:AF:35:74:6A:7C:07:37:7D:28:17:89:D1
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:02:a3:94:8c:fa:25:7e:94:61:2b:43:06:d6:52:c1:a1:50:
         72:1e:02:0b:c2:8f:8b:a2:30:e3:9a:04:60:54:78:31:a7:46:
         49:39:cb:94:39:61:83:b2:f8:ee:d2:d9:a5:b1:87:76:c1:ba:
         07:b6:aa:31:0a:8f:8b:c5:21:e9:ef:8b:f4:11:3e:ef:a7:e8:
         9f:7b:93:1b:55:c5:9f:88:f0:af:7d:c2:6a:59:1e:e3:55:c1:
         7f:30:7f:79:b4:3b:e6:8f:85:63:5f:03:ab:76:77:64:90:d5:
         82:58:5d:4f:6b:3e:bc:2d:6d:7f:e9:11:33:0f:db:93:77:62:
         57:8e:4e:3a:e9:50:2f:1e:ad:d2:6a:1d:98:03:d0:1a:c1:8d:
         60:ca:d1:71:06:e7:91:e8:fb:13:c0:f3:39:47:f0:7b:04:4b:
         07:ae:1d:5d:2b:c3:2d:c6:a5:ad:1e:3a:95:3d:f6:9f:6d:aa:
         14:71:20:4f:f7:98:ba:65:cc:db:c3:cc:51:2a:1e:28:9b:a3:
         e7:97:b4:28:2e:1e:b6:df:b1:b2:f7:18:c8:a9:20:a4:84:3f:
         72:40:d3:dc:e5:9b:47:67:a5:11:0f:07:a8:6d:ce:ad:83:47:
         f4:a4:00:83:a5:67:70:24:75:11:8b:c1:99:c5:17:62:06:2c:
         e2:37:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:57 2026 by rpki-client