Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File:                     Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier:          8lkTr4puYcE4yNYkjdGSvVBrY3PfAB57X0uU1aQmFRk=
Subject key identifier:   E4:2C:3D:11:D1:26:29:84:60:1A:54:CC:47:DA:F1:9A:25:01:0D:9A
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer:       /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial:       019EC30031FAD99E0688826C23D803785A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number:          14B7
Signing time:             Sat 13 Jun 2026 22:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:30 +0000
Files and hashes:         1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: hU5bz0F+SkDbfjNhFpHn3FjDMk1RdD6/Y2/SZWqETvw=)
                          2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:31:fa:d9:9e:06:88:82:6c:23:d8:03:78:5a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
        Validity
            Not Before: Jun 13 22:00:30 2026 GMT
            Not After : Jun 14 22:00:30 2026 GMT
        Subject: CN=e42c3d11d1262984601a54cc47daf19a25010d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:9a:86:42:1e:0b:76:ed:e9:aa:31:f7:72:
                    ee:bc:1c:4f:b1:bc:92:81:97:e7:b1:53:92:74:bf:
                    6e:d3:9d:d5:a5:90:fe:37:fe:c7:ec:06:1f:0c:12:
                    b9:2a:46:f6:d7:97:09:93:5a:b6:43:07:3e:40:cc:
                    d9:53:3a:1f:a1:64:eb:fd:3a:67:f6:a8:70:2f:d0:
                    9a:09:b6:6d:e6:a9:10:34:76:2f:79:44:36:8e:e4:
                    38:bd:a7:e7:32:01:e6:c5:d0:b6:80:21:8d:e4:ad:
                    09:78:a1:71:5f:53:ca:fa:11:df:7b:c2:37:ad:cb:
                    38:3d:ff:0f:a0:d8:93:ed:9d:d3:3b:45:c7:86:bc:
                    2f:12:83:28:d4:54:68:01:b4:03:55:78:cb:bd:29:
                    0c:a2:1e:42:2e:70:8f:59:b3:90:7f:eb:c7:9b:77:
                    46:92:8c:5d:2a:61:ec:86:0d:23:eb:96:b5:9d:a7:
                    e1:06:43:26:63:63:56:7d:b8:b3:3f:00:ff:7f:d7:
                    42:b3:05:92:a8:af:97:53:ff:a3:7f:4a:d6:13:05:
                    38:d5:9d:51:81:db:33:ce:ff:26:6b:9f:32:6d:25:
                    5e:15:c4:94:47:2f:a6:d4:fe:66:cd:5a:06:56:a6:
                    b2:f9:dc:9c:f5:49:6b:2a:d5:3c:31:8b:f9:b5:c8:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2C:3D:11:D1:26:29:84:60:1A:54:CC:47:DA:F1:9A:25:01:0D:9A
            X509v3 Authority Key Identifier:
                keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:42:79:f7:03:ed:b2:f0:2b:d0:06:8c:17:fc:63:35:7a:
         5c:15:d6:35:48:eb:39:c3:1b:94:8f:3f:96:c9:c6:0a:49:e1:
         b1:03:63:d4:96:a0:aa:ef:f1:c8:25:82:39:b8:44:0c:90:39:
         a9:d4:e8:72:2d:b8:c4:ca:fa:d1:b4:b6:05:4f:00:61:41:e7:
         51:41:ad:73:72:89:d7:f9:17:e8:e1:0f:3a:06:b0:83:37:39:
         02:4f:cd:2d:18:6b:b9:ef:aa:7a:40:c8:32:c8:cd:e1:72:9b:
         6f:63:21:8d:84:4d:a8:14:33:7c:eb:c1:5c:18:04:74:cd:9f:
         cb:bf:5b:4e:c9:8b:79:03:13:de:2c:5f:87:68:7b:85:09:48:
         31:50:3a:23:55:67:44:bb:05:c7:a8:85:4c:0a:de:73:2b:2e:
         10:53:94:d1:0b:c1:22:28:b5:6b:33:9a:79:d3:9f:22:1d:bc:
         f9:a0:3e:2d:20:52:1b:de:bb:23:49:44:41:cc:dd:3e:0f:df:
         46:75:53:9e:8b:b5:f7:0b:0b:97:11:9f:a2:b8:9d:b9:5f:95:
         63:ec:42:a5:07:ed:16:61:8d:e0:65:87:cf:9a:ff:78:05:d4:
         82:eb:ab:4b:74:50:6f:0c:57:b1:4a:a6:e8:14:c0:d6:90:a8:
         ec:5e:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:05 2026 by rpki-client