Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File:                     BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier:          3JUy7ShTwbLnTr59wi3cRJKczegIDrKsOIJkS5nUrjQ=
Subject key identifier:   0E:3D:1C:B1:5E:18:D5:44:4A:50:9F:B8:04:CF:BC:44:83:37:3B:DB
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer:       /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial:       019E31178560B7CBF8F1C2C045592F031A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number:          18A6
Signing time:             Sat 16 May 2026 14:01:25 +0000
Manifest this update:     Sat 16 May 2026 14:01:25 +0000
Manifest next update:     Sun 17 May 2026 14:01:25 +0000
Files and hashes:         1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: Lb6JzVbKW3slfA6LqrPti2kiellwRHBzI69OWA856d8=)
                          2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:85:60:b7:cb:f8:f1:c2:c0:45:59:2f:03:1a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
        Validity
            Not Before: May 16 14:01:25 2026 GMT
            Not After : May 17 14:01:25 2026 GMT
        Subject: CN=0e3d1cb15e18d5444a509fb804cfbc4483373bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:2f:5c:cd:b9:ac:7b:c8:15:12:c8:f0:65:
                    ae:98:b8:c4:a5:22:66:65:b7:d2:dc:19:30:81:ec:
                    3c:13:a0:3a:5f:5c:c5:ae:96:22:0d:d1:fe:ce:3f:
                    95:21:77:39:11:e7:4e:19:5c:ae:50:2e:64:bf:eb:
                    d7:0e:93:dc:5f:5f:90:fa:34:f7:2b:41:62:a5:10:
                    58:c7:f6:26:72:7d:2d:40:1e:51:5c:21:5e:9b:0a:
                    15:20:bc:1b:6a:7d:cc:ce:39:1f:de:61:49:b2:c0:
                    1c:3c:bb:43:06:7d:f1:ce:44:3d:4a:17:20:9c:ee:
                    d6:e5:eb:a9:b0:5d:cf:86:f2:2a:6f:b2:d5:41:40:
                    ad:54:11:0a:4b:46:e7:6a:46:e3:7c:6e:48:34:23:
                    eb:1d:07:a0:36:dc:60:c9:fc:66:89:94:e5:ee:38:
                    f5:fe:71:69:94:0e:bf:5b:bf:0d:d0:cc:e4:e3:f5:
                    96:77:04:cf:6d:7b:e3:66:77:d8:ca:46:3e:55:65:
                    5e:1e:84:80:17:64:51:23:d8:0a:82:2a:94:8b:b0:
                    f5:18:46:68:33:be:d6:27:46:ff:a1:d7:10:26:08:
                    ea:12:ce:8b:3e:d2:52:c0:2e:01:45:6b:1c:d8:a6:
                    14:fa:0f:5f:bf:6c:dc:6e:04:93:1a:0a:ae:45:50:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:1C:B1:5E:18:D5:44:4A:50:9F:B8:04:CF:BC:44:83:37:3B:DB
            X509v3 Authority Key Identifier:
                keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:03:82:bd:48:55:84:bc:a0:22:eb:cb:2d:af:c8:a1:07:
         25:4e:89:ad:80:22:47:57:ff:55:ff:6b:2f:9a:5f:5c:83:f7:
         e5:de:f7:a1:42:61:15:52:10:c4:9c:4d:a5:70:47:f5:bf:10:
         a2:5c:f7:ba:d9:bd:16:b2:d5:79:37:13:a3:54:99:26:63:b7:
         e5:76:c6:fa:31:c9:0d:87:06:6e:fd:21:88:a0:0e:76:e7:69:
         e9:f6:93:dd:4a:71:1a:a7:19:c2:f1:f7:b3:c3:9e:7f:cc:4f:
         2d:93:cf:08:59:b3:65:6e:d4:8f:4a:5b:ff:5f:a0:50:4d:99:
         b7:11:77:bb:9d:c8:28:a1:2b:fe:77:f7:66:f8:5f:ee:29:35:
         25:aa:a7:ab:13:93:21:e5:a6:b1:8b:fb:90:ec:ac:13:d4:1b:
         67:a6:55:7e:9d:f3:0e:23:aa:9b:1c:78:26:22:b2:a1:90:19:
         3a:16:32:7f:19:c7:21:1b:50:82:f8:48:a8:a8:b7:97:01:18:
         78:52:54:cd:00:06:80:b5:47:99:76:ab:14:56:b0:c8:8e:2a:
         08:3b:d4:6e:b9:7d:81:0f:82:ce:07:0e:ca:a8:4b:36:a5:d8:
         87:02:a7:50:72:3e:04:cf:fe:b9:1c:0f:9c:9f:ec:7f:06:fa:
         d0:4e:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:22 2026 by rpki-client