Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File:                     BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier:          5LWrMfRjqyX0xbd3ljr0CjWwHQY2EiBLioD2sKrCUV4=
Subject key identifier:   96:25:B3:91:F0:FE:41:80:16:F7:AA:B3:18:0F:90:17:D4:C6:14:9F
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer:       /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial:       019EBF5B2643C0B00A0E171F045A6D8B6AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number:          DE
Signing time:             Sat 13 Jun 2026 05:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:22 +0000
Files and hashes:         1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: mQXY0qZnY1ujOjvxViErjtgq6H5WVaxgrz+ga6KG/D8=)
                          2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:26:43:c0:b0:0a:0e:17:1f:04:5a:6d:8b:6a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
        Validity
            Not Before: Jun 13 05:01:22 2026 GMT
            Not After : Jun 14 05:01:22 2026 GMT
        Subject: CN=9625b391f0fe418016f7aab3180f9017d4c6149f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:8a:61:97:0d:da:a7:8a:c7:bf:8b:5e:c2:
                    a6:5e:3d:20:99:5f:62:22:e0:de:8d:82:79:ed:3a:
                    8a:d5:98:c7:7e:73:65:a9:91:c3:70:47:66:3e:4b:
                    07:12:ca:1b:12:d7:73:d3:f3:92:cf:0b:57:f2:41:
                    63:bb:91:a3:00:d3:aa:22:74:f4:c6:83:b0:42:81:
                    8f:dd:7a:13:54:ce:aa:ca:64:9f:37:43:a8:df:c6:
                    f4:34:4b:c3:29:08:5c:5b:a7:5f:60:fa:ce:a3:66:
                    7c:d4:7c:b6:67:2f:c5:34:50:da:a5:4b:1d:63:df:
                    6f:5f:d6:35:b2:16:c6:54:fb:f3:c0:49:02:6f:a7:
                    18:3f:1d:b4:73:98:26:6f:fa:15:54:5d:eb:1d:3c:
                    3f:37:91:b9:d1:6b:0e:e4:ab:cc:50:33:7d:b0:7c:
                    22:64:96:a6:61:1e:af:a6:3e:39:8b:f4:34:19:44:
                    f9:12:86:a5:66:35:52:49:81:01:87:ed:f4:3a:df:
                    bc:fa:19:8c:fa:ae:c6:bd:d4:2b:8a:41:e5:36:55:
                    75:09:7a:0e:98:95:c9:14:b5:6d:5a:92:0b:3c:e5:
                    17:0c:3c:4a:45:f1:f5:87:54:57:56:1f:99:31:1f:
                    44:ce:92:f2:78:20:9f:c8:0b:b0:19:3d:85:98:c2:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:B3:91:F0:FE:41:80:16:F7:AA:B3:18:0F:90:17:D4:C6:14:9F
            X509v3 Authority Key Identifier:
                keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:f4:ca:b4:5a:49:5d:37:d9:23:25:b1:f3:0b:d8:59:60:
         f6:35:31:c6:95:95:4a:af:8a:05:57:51:60:e3:0c:ce:d8:fc:
         37:65:d9:3c:07:2a:af:48:ad:07:8e:18:3f:11:6b:d8:ac:a6:
         96:f0:cb:6e:16:ad:9b:77:96:11:59:8c:8a:e3:a8:37:f7:dc:
         8d:29:de:31:75:e9:49:6f:13:3f:d0:7e:07:31:2e:0b:61:a8:
         0f:db:2e:11:82:7b:b7:ec:e8:f1:c6:de:9b:58:6e:64:3e:07:
         5e:0e:ee:d6:7f:f6:7e:6d:32:fe:f4:68:95:7d:fa:da:99:c1:
         e0:0e:6b:14:30:56:25:bb:b7:4d:31:ad:99:5e:d0:1f:6f:17:
         7a:c0:18:0b:99:81:d2:b1:0f:8a:50:63:af:61:d0:b9:5b:fb:
         6d:c4:d8:b7:1d:a1:ff:af:80:2e:f2:47:f4:04:43:c2:0d:a3:
         87:69:fe:8c:b7:91:20:93:b4:e6:2b:d3:98:5b:3c:eb:da:64:
         c3:f4:c3:13:f8:bc:98:f6:f9:62:6b:5a:79:e7:40:f0:da:eb:
         d6:09:40:09:a0:ac:b2:c8:28:75:5f:9d:e0:43:9e:7f:36:23:
         32:11:5e:ad:0e:ca:ef:57:8b:d4:c2:2f:4f:9a:45:90:33:b7:
         b5:db:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:24 2026 by rpki-client