Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File:                     bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier:          wyLhFjoAfl2zrT+oZf4hLfqvQ/iFznMGLOIleVIrYcc=
Subject key identifier:   6A:B4:9B:87:D3:36:A3:36:2C:60:F5:2D:CD:83:5C:B7:59:12:BA:94
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer:       /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial:       019EC17FAEC27D96800D9EA15238CE744175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 15:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:30 +0000
Files and hashes:         1: QfIo87XsCuJzTUYuuoqKD3WaLb0.roa (hash: 3OJrGr0r+PmdJst/a4vFJ2BEBu96S/fI6q0nYYtF9LQ=)
                          2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: TiefdJPNBgpXbwxEXnwDWoAE9GV4ij65tbrB+yVQIiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:ae:c2:7d:96:80:0d:9e:a1:52:38:ce:74:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
        Validity
            Not Before: Jun 13 15:00:30 2026 GMT
            Not After : Jun 14 15:00:30 2026 GMT
        Subject: CN=6ab49b87d336a3362c60f52dcd835cb75912ba94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:be:ac:e1:22:4a:42:8b:72:5c:6b:d6:01:
                    ca:ac:33:e9:18:1e:fa:f3:66:3e:df:17:5d:86:2b:
                    48:84:03:3c:98:bc:0e:5e:17:8c:8d:2a:cd:fe:42:
                    6a:b3:3e:8b:f1:42:4b:b9:09:9f:ad:9d:f4:01:22:
                    03:37:78:0a:ae:0d:b1:13:81:09:e1:24:52:f5:cd:
                    f1:3d:38:c1:34:a6:1b:4c:87:be:52:b0:42:1a:48:
                    10:a0:b4:5b:33:a2:18:63:8b:e9:a6:02:d1:cf:ed:
                    12:23:66:83:4f:ac:32:d8:26:bd:c0:a0:cd:b5:a6:
                    75:ae:4d:e7:32:fe:a4:a0:06:89:bf:6f:77:ca:4e:
                    b6:8c:af:6d:1b:6e:4f:a2:42:3c:0b:81:2b:b7:86:
                    e6:a5:4c:d8:a5:f4:33:c9:5b:bd:20:ba:e8:35:5b:
                    42:72:a5:2a:58:57:49:76:3c:ec:16:6f:85:02:a4:
                    c3:80:f2:b6:da:68:cb:be:67:08:2d:99:7d:d9:2f:
                    8a:f0:60:16:b0:b4:42:35:90:b9:07:ca:a5:57:62:
                    70:13:9a:2d:1a:12:b9:55:aa:86:9f:39:a3:dc:58:
                    4c:7f:37:f9:ea:c6:9e:c6:d6:32:52:7f:fc:1e:86:
                    ca:7f:c0:c1:7d:fc:6f:9d:a7:8a:86:db:76:00:8e:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:9B:87:D3:36:A3:36:2C:60:F5:2D:CD:83:5C:B7:59:12:BA:94
            X509v3 Authority Key Identifier:
                keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:d0:1e:d7:d9:a8:e2:96:57:59:4f:df:f2:fa:77:a0:b9:
         fe:51:63:10:25:be:d2:94:7f:b5:47:20:60:0f:59:de:4d:3f:
         3c:af:45:23:33:2a:a8:da:04:69:31:fb:b2:6c:29:62:8d:25:
         d3:10:61:92:46:66:36:e5:a8:d3:6e:25:b9:43:2a:b4:ae:eb:
         68:64:ac:88:b4:e6:67:fc:b8:aa:c1:84:4f:bd:8c:dd:c5:25:
         37:6d:63:d4:60:30:4f:a9:b6:82:e0:f5:1a:e1:e8:b9:5e:a1:
         af:b7:ef:24:0d:e6:2f:97:d9:0f:49:ef:ff:8d:93:11:1b:ab:
         95:72:08:55:c9:29:ba:5f:89:30:a8:71:c6:35:c9:cf:fc:e1:
         98:f0:74:1c:d4:45:67:a0:dc:da:db:77:bf:0e:1d:3b:06:68:
         31:b3:b6:ed:93:5e:fc:19:78:d2:b1:81:34:c5:70:ca:ed:3f:
         30:90:15:5b:0b:ce:27:58:62:23:df:1d:96:a9:d0:69:05:0b:
         a1:b5:4a:04:c5:6c:19:1a:89:0b:60:1c:ce:fb:f2:94:87:43:
         95:45:11:64:a6:56:a3:aa:5a:74:3e:16:d5:2e:36:e4:99:26:
         16:92:35:d8:b4:27:60:76:d8:cb:07:7b:15:94:4a:d5:bc:35:
         c3:85:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:33 2026 by rpki-client