Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File:                     v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier:          nuvZ0woCL7cJ7yH6OsgSq1U6/0WOmFqGwIb9CzLXr1U=
Subject key identifier:   1E:BD:BD:9A:8B:E5:19:BB:B8:EC:46:07:39:E1:B2:C3:D1:B8:A4:EB
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer:       /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial:       019EBF911AF47DE611F1544AAE0249F9BFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number:          06BA
Signing time:             Sat 13 Jun 2026 06:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:18 +0000
Files and hashes:         1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
                          2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
                          3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: xE0O/pfwmq4t13VimbkDgZICKKdI1t++7e6opXucUVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:1a:f4:7d:e6:11:f1:54:4a:ae:02:49:f9:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
        Validity
            Not Before: Jun 13 06:00:18 2026 GMT
            Not After : Jun 14 06:00:18 2026 GMT
        Subject: CN=1ebdbd9a8be519bbb8ec460739e1b2c3d1b8a4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:54:3b:2f:eb:f8:e3:42:a2:ec:e2:1e:41:
                    e3:2b:70:00:3e:ff:52:af:24:75:1b:82:2e:6c:88:
                    09:d9:61:5d:92:48:a0:61:5c:32:fc:4f:af:9d:44:
                    bb:de:9a:a4:21:cb:4a:95:01:9c:28:cb:bf:ab:28:
                    00:de:fc:84:67:98:7a:b1:54:8c:94:a1:64:c6:5c:
                    4c:1e:6b:60:e6:f9:ca:59:be:9b:5e:d4:33:d3:62:
                    4b:7d:14:60:a2:08:0d:fb:94:bb:6b:1c:e2:d1:57:
                    bd:b5:a1:e8:ba:e7:a3:c6:88:33:d8:03:0b:f3:9a:
                    3f:26:f7:ee:4e:e3:05:32:45:4a:f6:1b:8f:a2:a1:
                    41:34:d6:22:58:8e:95:f7:c4:7b:69:04:9a:73:f9:
                    03:d5:2a:3a:b3:af:92:ea:93:2a:2e:52:d9:d3:d2:
                    14:bc:ca:06:66:b2:b5:f9:0f:ff:3d:eb:27:6c:07:
                    0b:d5:59:19:81:2e:9d:b6:ca:b0:54:ed:96:51:53:
                    c4:8e:27:75:67:95:0a:5a:0d:cf:f5:1b:85:35:02:
                    6d:74:ae:d2:dc:1e:2a:f9:32:72:a3:de:db:0a:d7:
                    95:83:af:e3:0d:5c:38:75:1f:92:d6:2b:51:15:cd:
                    e5:c3:b2:fe:34:80:64:d4:ce:04:02:33:65:dc:96:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:BD:9A:8B:E5:19:BB:B8:EC:46:07:39:E1:B2:C3:D1:B8:A4:EB
            X509v3 Authority Key Identifier:
                keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:30:dd:3f:93:f1:7b:59:1a:b3:a3:cc:77:92:12:34:a6:
         61:7f:97:6e:3b:1b:f2:94:72:0b:26:2d:15:f3:7c:37:09:52:
         f2:cd:67:9c:2f:0d:e4:37:33:98:dd:09:1a:c3:e9:6e:71:ba:
         e5:f9:a8:f7:39:8b:10:b1:e9:00:bc:d0:25:99:3c:94:c7:a9:
         6b:dc:18:f9:18:3c:b6:2c:4a:7a:31:a0:7c:80:90:8e:73:6f:
         70:95:0a:da:96:8c:63:f2:00:17:9f:b7:f4:94:3b:1b:33:5f:
         1a:18:12:e7:e1:f2:bf:43:5c:6f:6c:ae:ac:54:44:26:67:34:
         13:46:12:5d:94:08:f2:43:88:73:fb:4d:64:50:8b:53:93:03:
         2a:d5:de:76:8c:a0:5c:92:15:9e:bf:91:46:99:bc:8d:6f:a7:
         1e:e2:8e:31:14:76:b9:fa:9b:50:b7:91:27:3d:24:e0:61:81:
         4f:f6:6d:47:cf:ed:bc:14:c1:83:d3:77:3b:1d:8c:50:3a:f7:
         dd:39:5e:15:e4:89:2c:88:89:a5:f9:0b:6d:8d:43:ed:c0:db:
         26:bc:5b:1a:d5:22:f2:7e:cb:4b:c1:cb:9b:34:95:0c:43:a3:
         75:5a:67:79:20:9a:26:2c:82:78:0e:5e:75:25:a2:de:1b:79:
         d4:97:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:38 2026 by rpki-client