Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File:                     BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier:          IGxfrIB37Hl82bUwpU2MNJ/r5/wua+69tVz+cJT2h+w=
Subject key identifier:   1F:1F:D2:71:A8:67:26:7B:2B:62:9F:CF:B0:86:59:FD:F1:B7:FE:59
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer:       /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial:       019EBDD9D1E666F1D23D4A0DCC57A7420112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number:          0C2A
Signing time:             Fri 12 Jun 2026 22:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:29 +0000
Files and hashes:         1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: iDX7PwpCJ+i2yAn8Ab68b8dYNcPZjPnT5ojnbCJ6V9w=)
                          2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:d1:e6:66:f1:d2:3d:4a:0d:cc:57:a7:42:01:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
        Validity
            Not Before: Jun 12 22:00:29 2026 GMT
            Not After : Jun 13 22:00:29 2026 GMT
        Subject: CN=1f1fd271a867267b2b629fcfb08659fdf1b7fe59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:e0:bc:b3:f1:b7:7f:09:53:d3:8f:85:fc:
                    83:5a:11:51:17:69:30:dc:f0:61:40:94:56:6e:48:
                    65:c7:ad:b7:d4:a6:17:2a:56:29:68:25:14:49:74:
                    c4:f8:48:78:e5:b4:47:69:73:93:64:34:5b:2e:ad:
                    e4:53:2f:59:e2:0b:8a:5d:df:e9:bf:a5:db:ca:cc:
                    a6:06:87:4d:f4:a4:67:b3:57:33:21:cc:42:25:4d:
                    57:b6:d8:05:65:ea:94:b0:8f:f6:de:c0:3c:74:d8:
                    ec:69:eb:0f:b3:a1:b3:9f:95:d1:99:5f:ea:45:97:
                    dc:fa:fa:d8:8a:06:d0:24:59:80:9b:a1:45:82:a8:
                    f8:6a:f2:28:0f:1f:c9:c0:57:64:6e:1d:49:61:cf:
                    1c:18:e3:09:8e:16:c9:93:c1:97:fa:e4:30:b3:94:
                    e9:59:2c:7c:96:bc:9d:35:43:45:6f:6b:f4:d1:3a:
                    0e:36:cd:33:2d:e2:d2:dc:45:d3:06:d3:6f:4a:08:
                    82:10:7c:c7:45:87:80:a0:50:66:6b:e3:b5:23:85:
                    fa:d7:31:ce:85:21:72:71:1e:1f:b0:5e:02:0b:0f:
                    3e:3a:f9:cb:97:5d:97:7c:43:7a:c2:8b:25:d7:46:
                    51:e3:94:84:8d:8b:9a:32:a7:f5:2e:2a:38:f3:0e:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1F:D2:71:A8:67:26:7B:2B:62:9F:CF:B0:86:59:FD:F1:B7:FE:59
            X509v3 Authority Key Identifier:
                keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:24:57:e0:10:0b:06:6b:17:d5:ad:da:2b:26:be:77:7f:4b:
         4b:9b:73:66:73:8f:ac:73:ee:bf:cf:ed:16:5f:ce:ec:13:4b:
         7c:db:7f:e4:5f:5e:25:a8:e4:57:4d:95:cd:35:3d:31:e1:02:
         1b:d0:1f:1a:af:f4:e6:7a:65:20:9c:0d:b3:90:03:36:5e:70:
         56:37:67:1f:1b:a2:07:a2:55:0f:7b:5b:f2:f1:3a:bb:5c:d1:
         07:f3:5f:c0:2e:f1:ec:32:88:76:68:d5:15:fd:27:71:dc:39:
         54:f6:f6:de:2e:b2:ca:7a:4f:3f:4b:4c:a8:7d:23:8e:16:56:
         8a:1c:64:1e:00:82:96:b5:fc:4f:15:14:48:a6:e0:f8:62:94:
         5b:cb:c3:bc:8d:1f:37:f8:fc:f5:48:de:3c:21:be:fa:df:63:
         61:aa:c0:a4:dc:39:c1:b0:27:cf:b6:6a:41:e6:8e:dd:0f:09:
         ef:6a:97:a2:64:e3:e5:ba:1e:76:ec:ea:42:a3:a5:ba:49:91:
         be:58:a3:cd:61:56:01:eb:94:63:91:1c:a4:72:68:35:96:cb:
         50:8d:bb:64:cd:c0:4c:f9:39:22:00:1c:64:d3:a5:d8:38:ff:
         d7:3a:f5:67:8d:55:18:bf:d3:95:50:64:4f:a3:8c:05:ec:af:
         7b:99:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:36 2026 by rpki-client