Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          b6kicMJuhTTyle6NCNhSD+rcud1bBbR6KD/Wf1KuYZo=
Subject key identifier:   65:39:AC:4C:6E:9B:0E:1C:48:29:6E:76:A9:61:1B:E6:AF:87:B9:BE
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       019EBE10EE4392CC509A970FD4508CEC9683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 23:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:41 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: Jchqn+xPQ6LB/v++ZbspvkcyuBsld9QSvcr9pqbDcCk=)
                          2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:ee:43:92:cc:50:9a:97:0f:d4:50:8c:ec:96:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Jun 12 23:00:41 2026 GMT
            Not After : Jun 13 23:00:41 2026 GMT
        Subject: CN=6539ac4c6e9b0e1c48296e76a9611be6af87b9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:13:50:ff:d7:03:b5:c9:38:2e:8a:6d:96:
                    7f:a3:ac:51:a2:42:06:a6:f5:1e:76:17:b8:dc:04:
                    8c:51:01:38:37:83:e5:45:be:ac:de:25:7a:92:66:
                    72:11:4b:a1:5a:1e:a9:5b:10:4b:f3:1d:5e:17:4c:
                    19:25:50:7c:5f:7a:db:6d:ce:24:83:f9:a9:79:5d:
                    48:ff:95:5a:7a:21:56:2d:75:fe:91:c8:0e:24:12:
                    88:f8:ef:2b:de:e5:30:6e:e5:be:0f:8a:3e:e9:b2:
                    1e:3d:bf:4f:43:58:2e:b5:6d:57:40:87:9b:d0:fc:
                    fe:ab:1f:31:5b:62:0f:63:37:42:f5:d0:61:d7:b9:
                    37:e7:26:7a:e4:8c:04:9a:9f:65:02:ac:63:3c:10:
                    d2:3e:e7:aa:46:5f:93:12:65:ac:e9:80:ae:b4:1b:
                    4d:ef:4b:19:48:ef:f9:7d:f1:89:e6:14:4e:68:17:
                    94:cc:50:28:0d:2c:c7:12:57:23:3c:cd:da:9d:cf:
                    da:55:ed:5f:59:2b:6e:0c:aa:93:d6:e9:f6:e9:ad:
                    8e:0d:af:7d:12:79:50:ca:a3:1b:1c:74:6e:23:a0:
                    0b:4e:de:58:0c:03:04:cb:ea:fe:c1:df:31:89:d5:
                    a8:95:71:85:f5:27:7c:40:10:94:8c:58:d2:55:11:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:AC:4C:6E:9B:0E:1C:48:29:6E:76:A9:61:1B:E6:AF:87:B9:BE
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:d0:2c:a5:9e:97:ec:66:8c:ed:bb:3e:63:92:e0:dd:c5:
         67:81:e7:44:c3:c5:ae:88:ea:66:cc:e3:6b:46:11:3a:9d:30:
         1d:aa:b7:c5:61:2e:c8:c5:df:ac:f3:bd:2a:fe:ba:32:b3:51:
         2a:9f:c8:87:32:4b:d0:e7:06:ea:ed:bc:51:73:db:ec:d1:1a:
         37:e1:16:ad:c8:1d:62:15:eb:00:d1:a7:39:58:27:20:0d:09:
         47:8b:77:f4:68:7f:56:60:c9:d1:2a:ab:62:62:4b:8e:78:d8:
         1a:38:20:fc:60:21:06:26:92:07:05:f6:65:8d:e8:23:ea:27:
         c6:c4:a6:c9:ef:59:06:e5:f8:28:fd:4a:01:86:ce:7b:8e:fb:
         3b:a0:ae:5a:36:f8:4b:4e:26:f7:c3:94:0a:49:89:91:16:93:
         7c:8d:8a:f8:b9:4b:2e:75:62:fe:c1:bb:51:53:ae:34:d1:1b:
         0b:3b:99:ef:e1:45:ab:82:2d:ad:58:a8:7d:9a:0e:bf:6f:f2:
         2a:6a:a8:c7:10:41:3d:6d:66:f8:5d:bc:d7:4a:dd:a9:f9:0c:
         27:2f:f5:f6:9d:1a:6e:0e:e2:61:76:38:7a:98:2c:da:0a:a8:
         b5:1d:6e:17:db:07:85:dc:ac:2d:af:b2:3c:ce:2a:32:b7:a4:
         0f:82:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:14 2026 by rpki-client