Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          CUvxWBGrk/8BbLKc3AjpCG03PEYbzrc93CmqtsqclHY=
Subject key identifier:   89:1A:22:1B:36:8E:61:8B:3C:D5:2F:E4:99:50:E0:C7:35:0A:AC:04
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019F17F988C8153E361490248A8C56F4B822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 10:00:56 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:56 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:56 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: pnpT6UNiT9OaFDy+UVdjUHWHrsHTLI5t4z33iVRFT8c=)
                          2: tcbkNHlV278WuPIHWR3nno0tNIU.roa (hash: 06lnHiwHQVCyQQPbik2oG2DAxVKNgLZC3M/2kyqLgGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:88:c8:15:3e:36:14:90:24:8a:8c:56:f4:b8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Jun 30 10:00:56 2026 GMT
            Not After : Jul  1 10:00:56 2026 GMT
        Subject: CN=891a221b368e618b3cd52fe49950e0c7350aac04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:62:01:e3:c7:b3:6b:74:00:11:43:f5:f7:
                    82:71:36:76:b6:b9:03:7a:0e:5c:fd:92:98:75:b7:
                    83:68:7e:ba:04:2f:9b:d1:bc:89:b9:29:e9:2c:12:
                    49:8d:30:87:e0:a9:6b:a4:83:56:d2:dc:83:f0:45:
                    2c:f6:d9:ee:21:47:be:8a:b2:b4:c2:9c:21:58:96:
                    1c:9f:56:62:92:28:61:3a:28:0b:a9:2e:3c:73:00:
                    b2:37:5e:a8:2b:96:ab:8a:7a:b4:b6:0d:a0:ed:6e:
                    10:07:16:de:45:66:2f:5e:4b:ef:e4:8d:45:49:8b:
                    3e:4f:16:15:45:a1:2b:d4:f9:2d:e3:cc:a8:5a:5a:
                    0a:a4:8b:f7:25:ce:9c:f4:52:6b:41:4b:3e:1c:c5:
                    e7:f7:44:d0:a4:bc:7e:da:5c:b3:1b:97:4c:f9:5a:
                    f5:59:d9:73:57:11:4f:d1:4d:34:11:56:8c:76:1b:
                    35:ef:72:c1:c9:27:7d:f5:b5:a1:a5:46:9a:37:46:
                    c3:05:3f:48:0e:3c:17:1f:f1:61:70:e9:42:82:57:
                    0b:70:0e:85:6e:46:be:6d:4a:55:bf:b8:ce:59:f9:
                    bc:fb:3a:07:e9:6c:18:34:57:67:2b:63:ee:31:89:
                    c1:51:c8:00:2e:48:db:66:6a:fb:1e:4a:4c:0b:d1:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1A:22:1B:36:8E:61:8B:3C:D5:2F:E4:99:50:E0:C7:35:0A:AC:04
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:08:5d:2a:da:a7:b6:5d:af:c1:4a:ec:33:50:78:74:3e:
         ed:46:68:ec:ab:2d:5e:67:e6:1c:12:e0:bb:d6:02:cb:12:c3:
         4e:89:dd:b3:12:41:2f:22:13:a5:08:d0:0a:39:89:00:10:4a:
         a3:96:86:e7:75:bb:6c:41:9f:74:1f:8d:bc:61:c9:da:7d:61:
         44:0e:6c:7e:dd:7c:f7:11:0a:8c:dc:9a:96:bc:ea:b0:d3:4d:
         11:99:0a:88:fc:d4:66:61:64:43:cb:9e:1e:1b:b6:0d:4b:ed:
         cc:f8:9e:a3:27:ff:c2:da:de:08:22:16:17:99:35:c3:3e:cb:
         76:ca:fa:3d:fc:ed:00:79:57:0e:75:2c:6b:db:9d:86:20:8e:
         4f:34:56:d1:9f:a9:cf:d1:46:88:84:5b:50:3a:c4:f9:18:68:
         1d:ec:fc:da:0a:fb:c7:33:59:92:a5:88:11:db:d6:7f:6d:35:
         6d:88:49:e0:c2:8b:95:18:b2:7c:a7:c2:45:cc:f4:5f:ab:ff:
         63:cb:80:d8:5d:41:e9:88:8b:9e:ad:8d:c8:68:df:2e:1d:1e:
         c8:61:06:7c:65:07:16:cc:dd:a7:0b:f4:cd:d2:1f:d2:88:d6:
         60:7f:b9:fe:59:07:a2:42:50:50:a6:9e:4c:4e:a1:df:1b:e5:
         4f:ef:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client