Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          JTjpRFvgqSQ58ZRbDZ6YenRiWMy8QdSiag1hNmBooOQ=
Subject key identifier:   8A:6B:C8:BC:13:A0:E8:51:FA:D9:4C:E4:52:40:4C:68:91:5D:65:52
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       019EBE7EE2B74B0F4E3A248B118063D705F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 01:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:47 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: Th493YD4RacxDIyxhpUrZbHXAVrs/MMUckLWw1mcsRY=)
                          2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e2:b7:4b:0f:4e:3a:24:8b:11:80:63:d7:05:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Jun 13 01:00:47 2026 GMT
            Not After : Jun 14 01:00:47 2026 GMT
        Subject: CN=8a6bc8bc13a0e851fad94ce452404c68915d6552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:21:75:35:e9:7e:e4:a1:f0:c2:3e:3b:18:
                    66:44:28:6e:59:68:ad:c0:cc:2c:fb:48:87:90:b4:
                    12:3c:87:9c:f3:fa:df:be:10:23:b3:c9:02:93:a0:
                    c1:fb:8b:31:58:e2:a0:18:ad:48:cd:11:72:bd:26:
                    8b:21:16:60:75:64:f5:82:4e:52:95:16:75:9d:d8:
                    07:c3:c4:95:50:78:56:54:fe:fd:0d:3e:35:81:f0:
                    f1:97:41:20:df:f3:ad:66:28:99:3c:b4:5d:f6:04:
                    ae:33:82:2e:7b:a6:30:a3:b6:bf:69:07:f3:48:35:
                    e8:93:ff:50:73:f3:ec:c7:6a:66:53:5a:ba:e2:ed:
                    e1:aa:d6:3c:13:a1:53:a1:17:c5:c6:12:f7:9d:41:
                    90:32:e8:87:fb:ef:29:7f:86:7d:5a:c3:01:cb:1f:
                    cc:d8:1b:c5:e0:b3:73:97:29:13:fd:c7:4c:3b:af:
                    e9:4c:af:08:19:a5:56:2c:17:28:bc:99:8e:6d:ed:
                    cc:2d:90:99:b9:57:31:63:f3:64:8e:83:75:cc:39:
                    3c:65:1d:0f:b3:bc:1a:32:f4:21:a3:c0:19:db:6a:
                    c0:98:2e:5b:96:36:55:a0:9a:1a:ec:a2:b6:63:ee:
                    4d:be:c8:a3:d3:b6:02:bd:dc:4d:e2:1e:41:03:14:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:C8:BC:13:A0:E8:51:FA:D9:4C:E4:52:40:4C:68:91:5D:65:52
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:39:37:4b:b0:fa:cd:aa:29:17:b5:af:29:59:29:88:fe:
         71:71:ee:5f:11:dd:90:23:39:23:ef:21:27:ba:a1:e6:be:42:
         c7:0b:3d:bb:46:d7:e2:8b:28:33:5e:99:28:78:88:74:0a:a1:
         ea:13:a5:85:90:17:e7:2c:1b:b3:5f:29:96:f3:58:d0:b2:d3:
         de:37:ea:b1:19:2b:dc:86:4b:cb:67:fc:81:26:c6:fa:20:92:
         a4:fe:cd:39:f1:f8:0a:2e:13:94:a1:99:f7:ad:a3:a7:c1:61:
         5c:a9:11:dd:6f:ec:8f:a4:e7:1f:81:bf:b7:d0:64:45:33:de:
         0c:f2:da:0b:f2:74:c6:19:4e:01:8b:89:36:b8:9a:fd:0d:ac:
         40:3f:5a:5a:b9:16:1b:c3:91:7b:45:4c:b5:cd:28:ec:ec:10:
         8e:2f:83:cd:0c:3d:a2:61:e4:66:90:1d:ab:2f:ed:a1:46:69:
         91:ed:35:ed:47:e2:5e:ea:ad:d5:77:fd:04:0d:09:99:55:9c:
         51:32:17:15:7a:00:4b:be:f1:94:64:2f:22:d0:e5:f7:63:13:
         b6:a7:a2:8e:31:e5:46:17:a4:33:52:39:ca:a1:44:18:04:fb:
         c8:75:4f:95:81:6a:47:f7:76:96:0e:53:ea:de:63:7f:36:de:
         e4:8f:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:05 2026 by rpki-client