Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File:                     BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier:          xqSk4GHggtHPT+Icx8GjFUeFmwtXItqgAyQGThR+5rs=
Subject key identifier:   3C:98:FC:7C:3E:EA:D5:96:0D:3B:14:88:BD:DA:66:3F:86:86:45:E3
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer:       /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial:       019EBF5A8E3C639C494F7F2083F5F9C5C10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number:          18A9
Signing time:             Sat 13 Jun 2026 05:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:43 +0000
Files and hashes:         1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: jBhsYpJmS52C6qfTDH1AhNQcT6Ia/Mh7/Dj0V2rTfVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:8e:3c:63:9c:49:4f:7f:20:83:f5:f9:c5:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
        Validity
            Not Before: Jun 13 05:00:43 2026 GMT
            Not After : Jun 14 05:00:43 2026 GMT
        Subject: CN=3c98fc7c3eead5960d3b1488bdda663f868645e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:24:2c:5b:74:c2:33:b4:8a:49:1b:c6:78:
                    ed:c9:32:f3:1d:cb:97:13:e5:76:63:7a:44:89:b3:
                    d2:aa:9e:b7:17:55:78:a8:95:55:55:23:60:0a:f8:
                    ce:42:71:37:9c:c8:fd:2c:dc:26:f2:d7:28:f5:82:
                    5a:8f:b0:c6:32:04:f3:ce:23:d0:45:8d:a9:4e:b4:
                    20:06:ec:22:9a:aa:e5:d7:06:13:55:de:8f:c1:9b:
                    f4:1b:ca:7a:6d:bb:a6:8e:34:3a:2b:82:d0:e6:65:
                    e9:88:e8:40:bc:cb:1f:e2:64:31:fd:cf:b6:10:d9:
                    fd:cd:aa:ba:a8:2a:5e:85:be:27:ab:97:a6:11:d8:
                    4e:28:c8:c6:92:7c:82:80:5d:e1:b6:81:c3:01:b6:
                    ab:79:5e:ab:8a:ec:8c:1f:2e:f8:a2:2a:fe:a5:96:
                    50:4d:57:3a:d6:e8:6b:21:7e:ee:56:ce:13:3d:f1:
                    af:d0:8e:f5:f7:80:6e:02:91:da:16:80:df:d3:06:
                    11:74:7b:c5:94:91:da:89:0f:95:3a:fe:eb:f5:86:
                    d7:cb:ca:8e:93:b5:a8:58:57:23:30:f6:13:aa:59:
                    00:3d:35:af:5c:22:01:90:97:e2:ba:e1:17:3c:18:
                    91:63:07:91:4a:7a:2f:1a:ab:df:ad:74:29:ba:5d:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:FC:7C:3E:EA:D5:96:0D:3B:14:88:BD:DA:66:3F:86:86:45:E3
            X509v3 Authority Key Identifier:
                keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:a8:9c:fd:c6:b8:ee:60:30:36:c0:74:6d:98:5d:6a:fa:
         7a:c1:b5:6b:6a:3d:f4:35:7f:90:84:c2:a1:75:c4:a4:25:eb:
         ea:64:9c:9c:ad:cc:c7:82:55:e8:f1:eb:eb:b6:f7:34:66:61:
         52:3e:24:54:2a:84:8b:f5:f2:79:9b:0b:d8:a7:24:31:2f:f5:
         f5:b2:c1:e5:47:96:07:f8:15:bd:87:77:93:38:d3:40:bd:9f:
         39:0e:20:5b:29:5d:f4:d6:4c:b7:73:81:04:fe:37:15:2f:39:
         06:69:50:1d:53:9b:22:7f:d8:00:25:b6:e7:b2:9e:b6:c5:fa:
         dd:30:40:08:c1:af:e8:90:e6:3e:b0:11:23:80:5e:c3:da:df:
         cc:b8:9f:1f:84:d1:d7:e0:d7:37:f0:08:fb:1e:01:ab:9e:3d:
         bf:ef:a7:09:10:aa:23:99:b2:17:c1:d2:35:09:9d:fc:a3:60:
         43:33:b7:34:f4:71:a9:0a:4a:af:f9:a6:a5:f5:84:9b:99:82:
         46:0f:eb:a1:cb:98:5d:6f:8c:ec:84:56:c8:2e:1f:c9:c7:77:
         db:3c:a2:50:75:1f:87:2d:58:c9:77:54:6b:50:81:27:0d:bd:
         ec:f6:fc:17:0f:62:c4:70:65:88:b0:2e:70:87:a9:17:f0:4f:
         49:40:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:39 2026 by rpki-client