Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File:                     bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier:          gxbHfY99W/GKBBI3NmSaA/1lclcdStl24zqSa7dpWfE=
Subject key identifier:   13:58:EA:50:B5:13:73:52:99:4C:5E:9E:8F:39:66:F6:88:D1:60:A1
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer:       /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial:       019EB9C6248EA1343862A3BE8C9BE03881FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 03:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:30 +0000
Files and hashes:         1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
                          2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: P+WAnNL2AVpyl5gVcz6qran+xTHYGfoSun1kEd/pBdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:24:8e:a1:34:38:62:a3:be:8c:9b:e0:38:81:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
        Validity
            Not Before: Jun 12 03:00:30 2026 GMT
            Not After : Jun 13 03:00:30 2026 GMT
        Subject: CN=1358ea50b5137352994c5e9e8f3966f688d160a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:b0:16:a4:46:20:57:0d:61:63:81:f4:b7:
                    38:1c:06:c0:76:ca:29:27:e6:29:6a:2c:0e:56:33:
                    9a:ee:ea:db:bb:42:bb:a5:3d:98:62:f7:9f:78:12:
                    b0:14:92:09:be:57:c6:1b:85:c7:28:be:31:d3:dc:
                    91:5f:3d:05:46:49:43:39:8c:9a:c3:0d:8f:0e:98:
                    a4:9e:c2:34:20:56:51:a6:1d:90:7f:d3:3a:18:48:
                    1a:f0:7a:fa:8f:c2:94:9a:fb:79:d1:a6:61:1c:fe:
                    14:f2:85:28:6e:89:ae:62:e0:8f:d5:87:1c:2c:69:
                    93:1c:62:13:3b:83:b4:84:28:ce:50:26:27:dc:d5:
                    b9:37:27:1e:51:60:37:d0:66:a0:71:ed:40:e3:bc:
                    dc:02:ce:54:98:8d:7e:80:81:90:be:b5:c0:e6:70:
                    57:43:bc:91:44:ce:58:98:e8:73:bf:1c:6c:04:ff:
                    01:f0:5c:3a:01:95:33:0a:a4:1f:49:47:b3:a6:a4:
                    47:81:23:e3:4d:cc:b4:3a:95:2c:ce:3d:44:9d:38:
                    32:b8:65:09:f3:40:2f:d1:cb:31:aa:a4:2d:d3:57:
                    df:a6:99:05:fd:31:df:2b:e8:98:06:dc:43:4a:de:
                    30:61:60:99:1f:a4:29:dd:dd:36:87:fd:23:27:dc:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:58:EA:50:B5:13:73:52:99:4C:5E:9E:8F:39:66:F6:88:D1:60:A1
            X509v3 Authority Key Identifier:
                keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:a2:95:20:70:f1:4b:d6:13:7c:b5:71:50:51:04:58:a3:
         07:19:61:a2:d5:b4:15:94:d7:d8:31:eb:1e:7b:1d:99:ff:9b:
         c2:ca:1f:1f:d5:35:f7:f2:49:a5:07:b3:45:5c:61:ec:b6:0b:
         04:be:f1:9a:4c:8c:b4:9e:61:1e:f2:64:ee:da:71:6d:20:89:
         13:c3:14:ac:cb:70:9d:59:07:52:d3:ec:ec:10:df:f3:a7:01:
         ac:27:7b:7a:81:a6:c2:e5:84:91:fe:19:6e:bb:91:f3:ac:53:
         be:e9:cc:49:be:b3:36:dd:c9:33:2a:89:dc:47:45:58:f7:45:
         fe:22:21:f0:13:ba:aa:bb:fc:57:35:9b:67:2e:93:62:95:dc:
         4d:af:03:f9:fa:6c:28:d0:47:7f:54:43:5e:33:56:34:8a:41:
         de:9d:7b:59:84:47:f2:9d:fe:5a:9f:2a:7f:96:68:6f:02:68:
         da:da:5b:c7:56:b4:44:5e:0a:3e:35:35:bf:fe:5e:72:6a:3b:
         7f:fc:ff:ec:47:37:cc:de:67:51:22:ed:8c:68:7e:34:04:93:
         ca:6e:5e:a0:73:2f:62:b8:d0:30:2a:97:d5:d4:7d:ef:4e:bd:
         0f:64:17:03:e5:20:76:f7:81:46:29:80:24:65:d0:32:72:e8:
         96:25:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:37 2026 by rpki-client