Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File:                     bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier:          rcee0hda0e5okGA49+vfYfANgtx2Pf1gLmQFDIbgqbI=
Subject key identifier:   84:D0:E4:5F:40:EC:43:A5:20:3B:5E:AC:59:69:14:65:C8:28:D6:99
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer:       /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial:       019EC337471DB16FF2FC6797351793348CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number:          0B0A
Signing time:             Sat 13 Jun 2026 23:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:40 +0000
Files and hashes:         1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
                          2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
                          3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: VcCfCDTNK2+i2qUj9owpF0hXrWWuxgWJoV5phh5ZvjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:47:1d:b1:6f:f2:fc:67:97:35:17:93:34:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
        Validity
            Not Before: Jun 13 23:00:40 2026 GMT
            Not After : Jun 14 23:00:40 2026 GMT
        Subject: CN=84d0e45f40ec43a5203b5eac59691465c828d699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:f7:71:75:68:61:32:f8:b7:a5:8c:0a:58:
                    b7:8a:8b:67:53:09:8f:62:7d:31:19:3d:20:4c:85:
                    3e:96:ad:f2:83:6b:75:52:6f:60:47:c3:7e:4c:a8:
                    24:4e:78:ed:3b:56:b7:53:77:67:54:fb:39:91:37:
                    5a:2d:88:33:a6:17:8c:7b:93:1a:18:58:d9:1b:b8:
                    51:37:69:6f:6f:2f:36:28:6a:fa:6b:2d:0e:9c:a5:
                    8c:61:b0:35:90:ea:47:d8:67:12:d2:d8:4e:cd:3e:
                    87:34:f4:71:a2:86:d2:ee:a2:07:22:42:e7:85:7f:
                    19:b8:3d:12:0d:30:e6:86:89:56:21:46:5b:c6:58:
                    59:b9:86:9d:13:31:8f:81:f8:ea:0a:70:12:cf:42:
                    52:0e:82:9d:5b:10:24:24:d1:9a:81:27:aa:3c:4e:
                    36:63:39:86:73:b1:11:f3:d3:79:c4:a8:92:2a:ca:
                    f2:fb:8c:8d:b1:e7:32:a4:08:96:6b:1b:28:5b:61:
                    a9:c9:87:6e:f6:f5:bc:6f:2f:21:15:19:fc:74:76:
                    c7:93:da:d9:b6:d6:d3:92:e8:ce:27:59:72:9e:e4:
                    d5:2e:53:94:96:d5:81:2f:ab:48:46:aa:8c:76:cd:
                    e1:94:2a:57:3c:5d:ec:90:06:a3:dd:4f:d0:fc:1f:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:E4:5F:40:EC:43:A5:20:3B:5E:AC:59:69:14:65:C8:28:D6:99
            X509v3 Authority Key Identifier:
                keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:71:0d:a0:f3:db:c0:11:49:8d:fa:4a:a1:90:f8:79:37:
         9e:b5:8e:b9:20:c8:30:fb:9e:e7:8d:dd:20:0f:c4:da:17:5e:
         36:10:12:e9:99:b8:dd:55:51:86:76:e1:46:cf:b8:56:50:6c:
         fd:04:ca:ff:e6:01:43:ec:4e:49:b9:d6:2f:7c:f7:09:2b:96:
         3b:c3:7d:12:32:42:fe:d8:ab:48:9f:bf:98:03:00:f2:27:2a:
         d7:e1:21:a0:ad:d8:c7:68:b0:c0:28:37:01:40:14:7a:9a:e6:
         6e:fd:d0:01:5e:09:59:dd:d4:be:9a:32:06:2a:60:01:74:5e:
         c9:e1:85:4c:ce:9e:7d:a0:57:bb:e3:8b:a0:66:a7:e8:b4:75:
         03:0e:3b:64:02:b8:2e:87:5d:75:e2:76:e6:35:fc:cc:1a:fb:
         ff:eb:47:8a:a4:65:7e:d0:29:1b:a8:44:39:5b:04:b7:91:ed:
         04:51:03:d9:dd:3c:40:d5:33:53:83:43:c2:3f:11:82:6a:64:
         d9:69:68:7e:36:5e:e7:e2:3d:94:ab:85:fb:07:58:cd:0b:ad:
         2a:f6:57:55:4e:de:13:e0:72:2b:dd:c4:4e:ef:16:32:b0:88:
         00:d6:21:58:af:fa:5a:c7:88:26:93:37:5b:c8:3f:e1:b8:5c:
         e1:e5:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:45 2026 by rpki-client