Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier:          oBhiI99m2CkYhcWtUlBnrgJnNT4d/GrVUXbYl6IDTgE=
Subject key identifier:   D9:95:CF:F0:85:05:17:E6:0A:68:15:8A:ED:E6:55:AE:E0:DD:13:82
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer:       /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial:       019EBF23A594DA0DE3CE70ABE26FF7AC2431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 04:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:44 +0000
Files and hashes:         1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: 9Q4GoZIsUY5XrflgIG7AmABfq537YX2EyVREOLdYyGg=)
                          2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:a5:94:da:0d:e3:ce:70:ab:e2:6f:f7:ac:24:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Validity
            Not Before: Jun 13 04:00:44 2026 GMT
            Not After : Jun 14 04:00:44 2026 GMT
        Subject: CN=d995cff0850517e60a68158aede655aee0dd1382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:1c:7d:0f:df:ef:a0:56:8e:98:41:59:b9:
                    4b:e8:aa:83:4e:4a:b7:6a:a8:c7:08:f0:b6:d7:31:
                    7f:41:55:8b:d1:42:3f:64:81:b1:cf:5e:6f:82:fa:
                    4a:9d:ad:57:b6:ab:b0:24:a5:0d:d0:46:a9:22:bb:
                    d1:cd:34:71:43:71:35:78:8a:46:99:97:75:d1:26:
                    ad:01:6a:c3:75:64:49:f3:67:cf:a6:5e:51:c5:f4:
                    32:db:9d:22:79:83:06:94:81:0f:e2:ec:14:fe:5a:
                    74:6e:31:95:f6:7d:62:80:37:fd:d7:bb:04:2c:2d:
                    58:7d:49:65:67:34:4f:1f:ed:41:4d:15:e0:3a:87:
                    cb:36:78:6f:58:2e:4c:14:bd:00:3b:00:d9:95:33:
                    78:23:05:3d:e2:e7:f3:7e:dc:45:af:0e:d6:09:e0:
                    44:b2:03:59:ad:22:f2:90:eb:23:fe:2d:d5:a4:36:
                    e9:a4:9e:68:b1:79:f1:19:50:43:1a:6a:26:9d:14:
                    00:04:ed:2f:6d:39:ae:01:81:53:49:5b:fa:bb:5b:
                    09:79:b8:45:d4:ee:0f:20:77:cf:fd:14:72:ab:8e:
                    d1:ef:25:58:c0:20:ce:d8:35:96:c6:f2:3d:a2:49:
                    52:1e:5c:7c:24:5c:66:88:da:4f:06:de:64:aa:43:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:95:CF:F0:85:05:17:E6:0A:68:15:8A:ED:E6:55:AE:E0:DD:13:82
            X509v3 Authority Key Identifier:
                keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:b1:77:e8:70:51:93:75:88:58:ef:a4:fc:33:a5:19:3d:
         9d:96:ba:3b:fb:c3:0a:c9:05:e2:6d:7b:bf:cd:49:b2:4f:00:
         d4:d2:41:72:a2:dc:19:e0:9d:cf:5f:85:ce:10:ea:bf:7d:0a:
         a2:a9:ef:38:76:12:7d:1a:47:9b:66:3b:8b:89:50:49:88:16:
         2e:4a:41:47:fd:6e:59:15:1d:77:5e:64:3a:4b:eb:a3:5b:9f:
         44:71:c5:33:4d:59:9e:14:da:fd:ef:1d:ec:a4:ff:36:3c:33:
         cd:62:27:05:7f:12:ac:bf:41:0f:5c:f2:59:76:76:4e:f3:da:
         c0:dc:4f:eb:f3:f1:91:02:5c:ca:f9:18:1c:b6:2b:7a:f8:51:
         ae:59:b4:75:69:ba:e4:5f:60:f7:af:0a:2d:48:70:0d:bb:73:
         df:17:9f:e4:87:c1:65:e9:dc:06:3b:8e:2b:3d:59:89:2d:73:
         b5:8d:a3:4d:2e:53:67:53:df:f3:f3:3f:be:29:cf:92:a9:0d:
         59:d7:d9:a9:0b:3d:72:ac:ee:a7:09:3e:43:5b:bf:2a:f8:69:
         79:b7:65:06:4a:58:bf:27:50:23:0c:d8:47:49:f3:da:bc:c5:
         94:3b:9e:e6:53:10:da:e5:d8:f6:14:b3:2a:b3:57:45:d0:66:
         ba:a8:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:40 2026 by rpki-client