Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          yWcWUBW/kizn8FtXafWrkiPG6pJ7cLbKBv6xM3oc/zM=
Subject key identifier:   29:F9:36:70:27:2E:35:6A:7C:2D:BD:98:30:0B:B3:D7:12:9C:D3:21
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       019EC06D19DEE5F32C268196AE7140DC2ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 10:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:35 +0000
Files and hashes:         1: AiPCwT2mOHblP5OWBwZI_2If-qc.roa (hash: ZI02ce5tKSPDXFD64PX8BGZ+5za9hEAGoOG8T2YkDzY=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: TZJI7+yHnGZ8AArXVW1Gi3EmducpaEpBkxW+eTy2AME=)
                          3: R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa (hash: nb/6KQdFOLZV09sF9OK9gvGL0HQoI0XdoKq2+mGgfyY=)
                          4: Rv-jwelP5qAOVsTY2O3lL6StCzI.roa (hash: 3p4Tm23LFUYRqfwgQDQDi43EjAXLyoXTDot/c2J7+7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:19:de:e5:f3:2c:26:81:96:ae:71:40:dc:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Jun 13 10:00:35 2026 GMT
            Not After : Jun 14 10:00:35 2026 GMT
        Subject: CN=29f93670272e356a7c2dbd98300bb3d7129cd321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:a9:b7:8f:f7:e8:d3:48:da:43:a0:c5:1d:
                    e5:08:8d:62:3d:87:75:cd:db:48:88:5d:7e:d1:b4:
                    ba:6c:12:95:c2:20:35:e1:69:cd:03:a9:f9:16:9a:
                    79:f8:17:5a:14:32:38:1b:39:50:f4:b3:ca:76:38:
                    da:b4:c0:f6:49:06:52:f5:ad:9a:56:80:9e:b5:04:
                    57:17:0b:16:dd:82:c4:1c:ed:aa:2f:ed:09:43:dc:
                    2c:f8:d8:e6:ae:92:94:cc:39:b6:14:1e:5b:be:fb:
                    27:a5:f1:55:a0:3f:8c:5c:38:80:e9:e9:0d:f8:99:
                    8a:d6:a9:35:b1:a8:bc:d3:7d:23:c1:c1:66:ee:0d:
                    d7:92:08:4a:fa:bc:dc:0e:4d:8b:7a:f3:ca:5e:dd:
                    f5:f4:46:84:2e:48:c5:3e:38:89:06:2a:4f:20:d0:
                    6f:46:29:e0:18:1f:36:a4:eb:11:4e:78:5a:c5:1a:
                    09:c2:ff:39:c2:19:55:e6:c4:d9:14:42:1c:59:7f:
                    e2:3d:aa:23:76:6c:4e:92:3e:28:7e:8b:58:74:6c:
                    99:ed:c0:52:1d:50:3a:60:1a:11:ba:54:f4:56:a7:
                    6d:e2:bd:03:a8:8a:c6:41:36:d8:d8:16:8f:65:da:
                    12:f7:36:d1:5c:e4:e0:db:aa:9d:07:81:e6:a8:5a:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F9:36:70:27:2E:35:6A:7C:2D:BD:98:30:0B:B3:D7:12:9C:D3:21
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:66:d3:2e:c7:fa:3f:b4:09:63:1c:35:41:63:27:2b:66:
         8f:4d:7e:ac:dc:00:cb:dc:5e:84:9e:63:1d:a9:44:23:32:b0:
         aa:b5:b6:49:ee:1f:bf:a8:34:c4:1a:de:4a:5c:ff:6d:13:eb:
         a7:79:ec:2e:c6:07:d1:f7:63:30:6f:70:44:7a:c2:39:bf:b7:
         0a:bb:5d:2e:11:a5:6a:5f:fe:dc:72:00:ae:2c:94:39:da:5f:
         60:94:62:46:f4:f6:2d:e1:3d:44:65:a5:06:47:78:ed:e6:46:
         b9:b9:c1:14:1c:a7:55:9c:e4:67:d9:01:67:a0:ee:b9:ba:cb:
         e7:eb:ef:25:d4:78:36:c6:74:67:22:97:c6:0f:5d:b7:90:29:
         86:e1:81:6d:f9:5e:1d:0b:b7:2d:3e:ed:f5:a2:28:9f:a0:f2:
         8f:1a:80:c7:a3:3e:07:6f:5a:94:c9:49:15:99:c0:5d:82:b0:
         e3:9f:29:ef:3b:6a:89:71:2d:87:2f:37:98:2a:56:34:27:9e:
         8d:bb:49:79:06:0d:ab:eb:c1:0c:d4:38:4d:d8:47:cf:a5:e0:
         84:93:50:17:2b:82:11:dd:19:91:3d:5f:3a:dc:54:c3:90:39:
         70:d8:e6:12:86:c8:4f:a0:c1:ff:84:72:cf:29:5a:04:df:23:
         f3:de:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:20:49 2026 by rpki-client