Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File:                     Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier:          B2sgFVFPbouyL9DpQMT41LMzKcjlrYtM4mj1P+TZPrw=
Subject key identifier:   83:16:2B:B4:E8:2E:D4:A7:86:24:7D:9E:AE:D3:99:1B:30:A0:E1:CF
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer:       /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial:       019EC17FB1ED724542322E7C8FA592AF7420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number:          169E
Signing time:             Sat 13 Jun 2026 15:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:31 +0000
Files and hashes:         1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: 6BlTftENRleie7sWs/wPo9Cnl0V03muXoP3462PoLL4=)
                          2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b1:ed:72:45:42:32:2e:7c:8f:a5:92:af:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
        Validity
            Not Before: Jun 13 15:00:31 2026 GMT
            Not After : Jun 14 15:00:31 2026 GMT
        Subject: CN=83162bb4e82ed4a786247d9eaed3991b30a0e1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:eb:c9:8d:36:48:34:d8:14:96:03:cc:1b:
                    6a:2e:31:ce:b9:37:01:0c:12:a1:69:c5:cc:6e:26:
                    01:ad:66:8c:5c:79:a3:37:71:6d:ff:0f:c1:fa:a9:
                    01:7c:63:40:d3:73:9f:c5:00:c6:59:9a:b1:05:c8:
                    6d:2a:5a:3f:d7:58:76:67:be:c5:5b:64:30:9e:f8:
                    b3:e6:b7:76:99:04:a0:91:31:3c:cf:16:e6:45:17:
                    9d:dc:d2:75:bf:c7:8b:ee:36:db:e5:14:28:71:2c:
                    89:fc:35:fb:35:43:a0:27:5e:45:c9:20:0b:9e:f7:
                    51:b7:fd:9e:fb:b8:88:f1:bb:e4:de:0a:96:d9:77:
                    f0:c2:6e:65:d3:11:ef:35:7a:cb:16:8b:bf:5b:63:
                    71:61:8c:e5:0e:28:e9:88:ea:74:e6:da:6a:00:a4:
                    80:e4:81:7a:87:d4:1f:21:a3:a1:63:b1:ca:f6:51:
                    72:e9:d4:7c:87:40:6f:ac:2b:6c:94:f8:4c:27:53:
                    21:a2:97:44:7e:3a:d5:14:c4:a0:89:68:a2:85:08:
                    40:ca:77:9c:50:b0:01:2f:30:35:44:b4:7c:c1:e2:
                    0b:fe:5a:50:a3:0d:5d:1d:73:ea:52:92:00:59:3e:
                    31:74:42:19:0f:7c:26:d6:f0:72:92:99:b8:b1:26:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:2B:B4:E8:2E:D4:A7:86:24:7D:9E:AE:D3:99:1B:30:A0:E1:CF
            X509v3 Authority Key Identifier:
                keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:90:78:ed:d4:13:2c:56:05:21:c9:bc:df:d1:c8:17:71:
         ae:4a:a5:3b:93:91:da:de:c3:f1:56:3a:0b:be:d7:95:20:23:
         be:8b:0b:67:a3:46:58:1c:4e:50:fb:a6:65:62:f5:11:f0:57:
         fa:a6:fa:1c:66:bd:60:68:1f:5f:c2:cd:8e:6c:13:6a:62:52:
         2e:72:d8:e0:ec:01:ce:9d:b5:e1:42:a2:e4:01:1e:cb:e3:1d:
         5f:32:6f:af:71:54:8f:85:95:3e:02:8d:4e:5e:cf:35:5a:46:
         c5:1c:9c:35:3b:62:39:e1:29:0e:a9:4c:b7:2c:25:c4:d7:33:
         13:70:a5:0c:5c:ff:7b:6d:db:12:ff:cf:08:67:77:93:81:8a:
         6b:8c:69:da:3e:b9:90:22:5e:85:c0:69:eb:78:d0:56:80:57:
         08:67:0d:e0:ac:67:60:1a:dc:4e:23:f5:2e:9c:c1:e5:d9:ad:
         25:49:1e:7a:c7:d2:00:4b:62:37:68:49:e6:d9:86:ac:a4:67:
         be:a5:d5:d5:68:55:8f:45:7f:d1:05:52:bf:48:01:cb:ee:89:
         b3:84:1a:ae:ca:ce:f3:ef:a0:b5:ac:c6:d5:f9:ae:b3:7a:5d:
         f4:67:f4:16:f8:8e:fa:1c:08:0b:fb:f1:b5:9b:3f:fc:c2:af:
         0c:7a:75:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf7HtckVCMi58j6WSr3QgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2U1YjI4NDY2YjkyNzQyNTI2MDMxMzkyZDk0YmYxYTU1
OGU4NDQwHhcNMjYwNjEzMTUwMDMxWhcNMjYwNjE0MTUwMDMxWjAzMTEwLwYDVQQD
Eyg4MzE2MmJiNGU4MmVkNGE3ODYyNDdkOWVhZWQzOTkxYjMwYTBlMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSnryY02SDTYFJYDzBtqLjHOuTcB
DBKhacXMbiYBrWaMXHmjN3Ft/w/B+qkBfGNA03OfxQDGWZqxBchtKlo/11h2Z77F
W2Qwnviz5rd2mQSgkTE8zxbmRRed3NJ1v8eL7jbb5RQocSyJ/DX7NUOgJ15FySAL
nvdRt/2e+7iI8bvk3gqW2Xfwwm5l0xHvNXrLFou/W2NxYYzlDijpiOp05tpqAKSA
5IF6h9QfIaOhY7HK9lFy6dR8h0BvrCtslPhMJ1MhopdEfjrVFMSgiWiihQhAynec
ULABLzA1RLR8weIL/lpQow1dHXPqUpIAWT4xdEIZD3wm1vBykpm4sSbhAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMWK7ToLtSnhiR9nq7TmRswoOHPMB8GA1UdIwQY
MBaAFAbOWyhGa5J0JSYDE5LZS/GlWOhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGIt
NDg1YjIwOTUyZDkzLzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGItNDg1YjIwOTUyZDkz
LzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGuQeO3U
EyxWBSHJvN/RyBdxrkqlO5OR2t7D8VY6C77XlSAjvosLZ6NGWBxOUPumZWL1EfBX
+qb6HGa9YGgfX8LNjmwTamJSLnLY4OwBzp214UKi5AEey+MdXzJvr3FUj4WVPgKN
Tl7PNVpGxRycNTtiOeEpDqlMtywlxNczE3ClDFz/e23bEv/PCGd3k4GKa4xp2j65
kCJehcBp63jQVoBXCGcN4KxnYBrcTiP1LpzB5dmtJUkeesfSAEtiN2hJ5tmGrKRn
vqXV1WhVj0V/0QVSv0gBy+6Js4QarsrO8++gtazG1fmus3pd9Gf0FviO+hwIC/vx
tZs//MKvDHp1jw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:15 2026 by rpki-client