Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          Zlh0LPyJkheCFiMXQK1yb8Py9B8gf3EmV5Ncuibx80c=
Subject key identifier:   0B:5A:E9:42:64:0B:9F:DA:E8:4C:98:B2:48:B1:ED:9F:6D:41:7F:68
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019EBE4821091D89FDD0CC2739A253077E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 00:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:58 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: 6cOr5oZWXA0Yw47Mq5dF8zEF8fgYGEVmP5oekEqEapo=)
                          3: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          4: dToYhaIhncI2M7qUF8E5Z-MUY1M.roa (hash: i3+aszgM830eFR0OQiZivcXRqqvq84jEAI5IvwlypUE=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:21:09:1d:89:fd:d0:cc:27:39:a2:53:07:7e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Jun 13 00:00:58 2026 GMT
            Not After : Jun 14 00:00:58 2026 GMT
        Subject: CN=0b5ae942640b9fdae84c98b248b1ed9f6d417f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:a2:12:55:2d:bf:a1:8c:48:89:80:0e:82:
                    aa:ae:f5:e5:d3:ea:75:41:14:5c:c7:be:cd:5e:3c:
                    ec:a0:b7:2e:b2:99:aa:43:80:0f:e8:29:df:74:7c:
                    42:84:b5:38:86:5f:57:bc:4e:a1:c0:bd:9e:21:9f:
                    8f:d9:12:50:26:68:f3:a4:3b:6c:33:97:18:e6:a0:
                    a6:f6:64:e5:10:42:a3:c2:f7:a0:ec:14:fa:f9:23:
                    5f:2c:d0:36:c3:a9:ab:08:fa:c1:da:25:50:4a:40:
                    28:86:81:1b:45:f2:09:b5:47:d5:c5:af:03:0e:b4:
                    af:d0:ce:1b:30:61:5a:a4:bd:80:6f:96:93:6f:3a:
                    1f:d0:8a:ea:a2:42:ad:dd:37:d3:f2:73:46:4b:92:
                    f4:83:3d:5a:c1:90:d7:d7:76:6e:8a:cb:02:52:9c:
                    ad:4e:c9:59:bf:c1:80:45:ce:5d:88:2a:f2:17:96:
                    3a:ed:a0:04:2b:5f:68:1a:36:35:72:c8:94:42:2e:
                    a5:51:83:6b:c9:1e:4f:a1:4c:ea:85:45:6c:d7:f3:
                    58:7f:cc:cc:ee:71:e1:e0:be:5c:61:ca:a7:70:77:
                    bc:49:5c:91:c3:e0:3c:50:6b:4e:90:40:f9:d1:49:
                    a5:29:4e:6b:8c:7c:17:84:94:44:2c:8b:b9:3c:0a:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:E9:42:64:0B:9F:DA:E8:4C:98:B2:48:B1:ED:9F:6D:41:7F:68
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:e1:e9:84:00:53:26:c1:01:11:b8:fb:69:fe:28:89:6b:
         cb:fb:66:80:4a:71:a4:1e:f1:d1:40:2e:b8:47:5d:79:ba:fa:
         97:31:84:e3:03:65:05:a1:27:98:e8:da:55:d0:15:5c:60:23:
         42:24:a0:fc:7d:9f:b4:30:5e:52:8c:22:b5:d7:c1:37:3f:1d:
         c8:4e:ae:8c:17:a9:20:56:69:26:18:c6:cb:93:7b:67:e4:e2:
         ea:df:99:28:87:ff:f7:18:ad:03:4a:2e:43:a2:2d:7c:37:5a:
         78:13:d6:d6:14:f8:48:d4:1b:c1:42:db:84:17:11:7a:12:f5:
         99:f4:87:db:0e:27:e2:37:cb:ba:f8:3d:4e:b7:7d:4c:8b:1d:
         13:e7:41:27:b2:cb:a1:b2:e9:38:b3:ba:a8:40:95:8a:3c:42:
         ce:08:3f:ba:1d:5c:9e:1b:5c:c4:32:6e:84:76:21:70:43:0f:
         82:96:72:10:df:16:f7:c3:01:08:81:23:75:d7:7f:3a:d5:28:
         01:34:1e:0d:4a:57:15:56:c0:2c:83:72:e9:c1:2d:1e:28:f8:
         e8:9f:dc:8f:f2:a2:aa:bc:09:f9:aa:d9:2a:24:81:9b:0a:32:
         36:03:ec:11:1b:b2:a9:c7:aa:49:a2:87:3d:5b:37:20:dd:fc:
         1b:98:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:57 2026 by rpki-client