Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          eG/KPTYU2j7eJG3NxqNx/hzE7fLd4BipII9MRNqHfVg=
Subject key identifier:   0C:05:FC:40:66:9F:9A:8E:5F:6A:8A:78:BB:8D:8E:60:00:E1:1B:F9
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019EBFC882DFF5DFB7D55CB746558F038F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 07:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:49 +0000
Files and hashes:         1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=)
                          2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: ebXBxFVmJHc/EGlxuSlyjeigOlJAq4WBqzZXLFwLMsk=)
                          4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=)
                          5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:82:df:f5:df:b7:d5:5c:b7:46:55:8f:03:8f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Jun 13 07:00:49 2026 GMT
            Not After : Jun 14 07:00:49 2026 GMT
        Subject: CN=0c05fc40669f9a8e5f6a8a78bb8d8e6000e11bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:8d:5e:e0:24:6f:2c:d1:75:8d:b7:ad:d0:
                    4f:05:a2:f1:73:fa:60:63:59:66:d3:f6:16:db:1f:
                    71:10:1b:24:23:b6:88:a6:18:f1:30:7f:4f:e0:8c:
                    e6:0a:64:69:81:1e:17:54:4d:52:0e:09:a2:79:ba:
                    f5:15:3e:5a:45:e0:c2:4b:72:c9:58:4c:e2:ca:7b:
                    e3:fb:f3:31:5c:78:43:c1:b1:17:54:3f:22:c7:db:
                    9b:84:8c:25:aa:8f:f6:13:f2:8e:eb:31:f8:e4:08:
                    b9:b8:9f:56:b5:1c:78:80:7d:e8:dc:77:1d:fe:1a:
                    26:f1:ba:64:5b:4b:26:71:c6:d5:c8:ab:d7:f4:92:
                    96:2b:24:70:5a:21:9c:46:ef:3b:06:aa:17:c1:aa:
                    52:bc:82:e6:a1:0e:29:ac:28:cd:89:26:ee:1d:07:
                    d6:1d:69:cd:c7:f3:24:46:dd:de:55:07:55:41:ef:
                    c3:7c:b6:03:c9:cd:dc:38:4a:75:4f:58:6b:cb:d6:
                    89:fd:bb:d6:3c:44:76:a0:8b:dd:54:a0:94:0c:c7:
                    f3:47:0f:30:8e:cf:88:10:e8:8d:a5:ff:9f:9e:c5:
                    79:ef:8d:40:8f:d9:18:41:3f:86:fb:3e:93:ee:c2:
                    f4:0e:28:30:d5:ea:a7:c5:4a:f4:fe:0d:42:ad:bf:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:FC:40:66:9F:9A:8E:5F:6A:8A:78:BB:8D:8E:60:00:E1:1B:F9
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:55:74:e0:08:8c:7c:14:fb:07:5d:5d:c1:ca:c4:74:a0:
         5e:b6:af:28:4c:0b:84:cb:e0:b4:d8:00:8b:c8:07:ca:8a:7b:
         30:6f:de:cf:24:4a:d1:af:d2:4c:46:24:3f:e0:37:73:3a:af:
         e0:9b:ec:62:45:57:18:56:ac:05:91:de:ae:ad:40:2c:98:85:
         0f:67:02:86:43:de:76:15:d0:fe:d4:d8:7c:f7:a3:24:72:1e:
         37:e8:d0:68:88:fc:8e:cf:88:9f:9b:71:25:0b:4d:8e:d0:98:
         1f:9c:4d:10:6b:17:da:fd:d5:d2:ad:3c:4b:1c:e9:d4:5e:50:
         c0:0d:16:85:ef:ff:34:e2:fd:a3:b9:21:62:97:98:ed:cd:ad:
         83:7d:00:bc:a7:d7:47:99:a1:76:a6:59:63:8f:3c:fe:1c:5d:
         4b:59:dd:92:18:1b:d1:f8:6f:6b:32:7a:c2:65:37:62:9f:99:
         e1:ed:8f:23:fc:7a:bb:ac:50:19:ab:9f:29:3a:35:5a:e3:6e:
         a8:48:54:24:2d:dd:fa:b9:1d:f4:cf:06:2d:c7:b3:4f:90:72:
         6f:3b:3b:cb:c2:33:cf:f3:56:f0:85:fc:e3:f4:88:b0:a7:e8:
         aa:0f:00:98:79:8e:d5:c6:a5:2f:c3:ee:76:a1:7b:87:e4:47:
         3a:61:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:43 2026 by rpki-client