Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          BVm0SWnHDFnEraKHMxuY3FpwFs6L2eZipnUo0X3btsQ=
Subject key identifier:   DF:0D:54:67:BC:96:28:BC:DC:EB:22:7B:20:A5:F6:C0:8B:D8:0D:C4
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       019EC2C99FEF112F5A6253080EE44F4E594A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0D68
Signing time:             Sat 13 Jun 2026 21:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:54 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: XERbdjPAxans++1hs4zp660ktl1l0ybsBbkz7lUnaeI=)
                          2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:9f:ef:11:2f:5a:62:53:08:0e:e4:4f:4e:59:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Jun 13 21:00:54 2026 GMT
            Not After : Jun 14 21:00:54 2026 GMT
        Subject: CN=df0d5467bc9628bcdceb227b20a5f6c08bd80dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:42:d6:3b:70:82:7d:64:1e:ca:af:92:5f:
                    4a:94:97:82:f9:5d:51:98:82:65:1f:2d:3b:26:f1:
                    f0:f2:9d:7c:0f:09:a2:bf:e1:49:ae:d6:2d:97:b6:
                    1e:87:6d:08:05:83:e4:ee:c7:6f:4d:30:eb:7d:5f:
                    2d:11:e4:13:10:7e:28:39:7e:0f:46:d2:a7:b6:75:
                    f3:21:e5:be:9f:15:af:d5:eb:20:72:d9:ee:a0:54:
                    e0:41:e0:cc:df:f1:2f:5d:5e:d8:93:fc:8c:5b:5e:
                    c0:81:c5:7c:e1:fe:f1:ce:e9:75:e9:97:f7:2b:4e:
                    7b:a7:c9:27:f7:e0:61:0c:d7:a5:e4:90:72:90:5c:
                    80:c4:84:e9:ac:e1:b4:51:05:01:9d:b0:13:51:12:
                    99:5f:55:13:6d:c1:bf:10:4a:e1:04:02:51:42:fa:
                    7b:81:9a:85:f4:dc:e9:bc:6d:86:23:2f:ab:d6:73:
                    83:1b:14:87:5d:25:e4:cb:5c:4f:95:b3:fa:1a:d6:
                    80:ba:a1:1f:30:9a:c1:07:43:98:0b:0d:88:8f:64:
                    ab:64:cc:58:47:17:96:86:8c:99:7c:83:ff:fe:c9:
                    10:ad:c2:8f:93:22:9c:05:87:b8:d5:c7:ad:1c:19:
                    e9:45:b4:15:4f:3d:e4:40:de:da:f1:01:44:89:c4:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:54:67:BC:96:28:BC:DC:EB:22:7B:20:A5:F6:C0:8B:D8:0D:C4
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:fc:9d:dd:59:dd:2b:b4:0b:d6:09:bf:59:b6:6f:f4:39:
         aa:c4:91:a6:08:83:87:55:55:24:d9:9c:9c:97:f2:35:e6:f6:
         6d:08:b7:81:e4:fd:36:76:0c:97:8e:1b:a7:70:7e:9f:8c:df:
         69:84:b3:d4:1e:f3:b3:d4:48:ec:9a:f2:e0:df:49:54:3e:13:
         cc:fb:9f:4d:4c:96:40:b9:73:16:38:42:54:34:31:26:fa:0c:
         64:54:f9:a8:3f:33:c6:b4:de:58:8c:8d:07:55:ee:c0:1c:8d:
         e6:6e:a3:b3:98:aa:23:64:ef:1e:03:3f:26:de:5d:4f:d0:78:
         54:5b:5b:61:1e:a3:0a:31:da:da:97:10:42:ba:43:f8:68:6e:
         2f:d2:c9:f0:0a:cd:b3:55:d4:46:1c:92:03:0b:67:0f:e7:60:
         af:2f:48:01:84:a5:5c:32:88:22:d2:bb:4c:6d:ff:48:81:36:
         e3:17:37:c6:aa:af:76:d4:fa:d7:0a:dc:fd:ad:38:ef:ba:99:
         46:c3:f5:3e:d3:b3:85:50:e7:28:89:8d:c6:ad:2a:70:f4:b1:
         a0:34:98:19:fb:f2:45:0c:47:91:12:6e:80:bb:3c:0e:2b:ee:
         b4:29:94:6a:56:62:64:f0:33:ff:37:d1:07:d1:fc:96:75:b0:
         9d:80:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:03 2026 by rpki-client