Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          503eEzd3F0CyKTBPIOWeBLNsZIGz3IjjWvyz6bJb5pE=
Subject key identifier:   3C:6E:FD:3C:DD:B7:03:46:33:9C:A0:20:A3:08:D8:4F:93:C1:4D:B8
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019EC0A3E36BD763BFA426FC1AA69A899BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          045B
Signing time:             Sat 13 Jun 2026 11:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:26 +0000
Files and hashes:         1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
                          2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
                          3: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: 2EKmk3wowWl7Ce+PwEcMhUcA99+wk7YOelk7ecbnHtw=)
                          4: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
                          5: RB6c02Y05ndL1tBmed3K3PYqOb8.roa (hash: HA3QTmLMd6DYrv7h2tvYadjPLlyjtL356EnCTt0Ef14=)
                          6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
                          7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
                          8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
                          9: xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa (hash: GdkhncA6Cz+FJ2IUdWjBXkrGRY/WRmJ/1R0l4xrrdNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:e3:6b:d7:63:bf:a4:26:fc:1a:a6:9a:89:9b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Jun 13 11:00:26 2026 GMT
            Not After : Jun 14 11:00:26 2026 GMT
        Subject: CN=3c6efd3cddb70346339ca020a308d84f93c14db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:e6:71:7f:ae:12:69:fe:72:cb:68:68:ae:
                    82:14:7e:b0:47:9d:bc:83:87:53:0a:f2:b0:8b:c9:
                    b8:94:bd:be:e5:de:a9:c2:af:98:36:d7:b7:dd:dd:
                    20:91:97:9e:0e:45:98:ce:35:30:29:a2:32:0a:fb:
                    9f:9d:36:d0:0e:a6:8a:dd:b2:6c:9f:55:9c:50:e6:
                    a4:2d:fd:80:ce:b6:ef:09:8c:96:b5:91:6f:1d:14:
                    fa:2c:58:a7:d3:40:45:80:30:ec:be:57:de:bb:27:
                    c9:f0:c4:d3:64:ac:08:1b:7d:e5:aa:ad:88:3a:21:
                    cb:96:07:c3:83:7b:3e:4c:d4:8a:7b:21:79:e6:09:
                    14:34:7f:9e:42:41:2a:90:8f:ed:76:38:73:a4:5a:
                    a2:87:a8:ac:f7:68:61:37:cf:1e:3b:0e:67:e4:9d:
                    b2:23:2e:76:61:09:0c:84:af:6d:01:b4:4a:cc:e2:
                    16:ac:2c:01:12:c5:94:28:44:c6:78:6d:f9:30:88:
                    b5:42:fd:9c:20:c7:90:5d:d1:00:97:c0:87:ba:53:
                    0e:24:a2:6c:6c:46:88:9e:46:41:b1:3e:21:f3:83:
                    2f:0b:02:0b:c2:a1:0d:d9:cc:96:95:78:57:8a:b8:
                    8a:54:d9:b9:b9:af:68:dc:06:d0:b3:8d:85:81:13:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:FD:3C:DD:B7:03:46:33:9C:A0:20:A3:08:D8:4F:93:C1:4D:B8
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:80:d0:67:b0:16:2c:d5:a0:88:23:0c:14:9c:9c:f9:44:
         1c:f9:94:cb:08:cc:2d:a5:d4:5b:3b:1d:d1:a8:3d:15:36:d0:
         11:ea:dc:79:38:4c:2e:aa:a8:c4:17:89:9b:78:4d:48:69:c4:
         0c:f9:bd:78:48:9f:71:fc:c6:2f:11:3f:ab:9d:ab:9a:a5:3c:
         31:a6:18:57:c7:cf:53:67:13:05:2e:9c:34:a1:3a:70:74:79:
         31:95:26:de:46:3d:bb:6e:a5:db:a9:2e:c2:aa:29:e2:c1:af:
         96:b5:cc:fd:a7:19:a6:11:c5:d3:43:a1:32:64:06:5b:c2:4d:
         f0:e7:3a:9f:29:6a:8d:e6:c9:4e:e5:b3:f4:5c:17:95:39:ad:
         1e:19:a7:b0:35:bb:47:7d:24:67:92:07:59:a9:48:03:ec:f6:
         74:f2:ac:f0:56:dd:a2:92:09:bb:e1:87:da:a7:a5:f4:af:fd:
         5d:90:6a:67:73:e8:ef:93:0f:e8:09:3c:39:fe:30:ec:cd:17:
         3f:e8:ff:46:9a:10:a6:e3:60:97:6a:33:d0:51:dd:d8:45:c7:
         cd:ca:1a:d0:98:55:0f:d9:b0:89:60:a9:14:64:79:25:8c:a2:
         29:f5:18:df:39:f7:7f:2a:00:f2:1a:0f:6f:71:00:2b:5d:ff:
         bb:3d:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:44 2026 by rpki-client