Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File:                     BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier:          HOAWUrlFqvUHP4vgRZILh53MU6PHwtYHJDFBlra5mZc=
Subject key identifier:   BB:6D:36:83:66:CA:F3:F5:C6:4B:19:0B:88:6C:54:5B:22:90:02:E4
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       019EC36E8466E58CEAEE9732F78CE51BA543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number:          0DEB
Signing time:             Sun 14 Jun 2026 00:01:00 +0000
Manifest this update:     Sun 14 Jun 2026 00:01:00 +0000
Manifest next update:     Mon 15 Jun 2026 00:01:00 +0000
Files and hashes:         1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: s5R5cVz3SHR3YPxwCJCTh5+Nl9S45RvcvDZw33zJhwA=)
                          2: sY2TntCf1cm5rPVJjS36b5m6tZc.roa (hash: TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:84:66:e5:8c:ea:ee:97:32:f7:8c:e5:1b:a5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: Jun 14 00:01:00 2026 GMT
            Not After : Jun 15 00:01:00 2026 GMT
        Subject: CN=bb6d368366caf3f5c64b190b886c545b229002e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:e5:2d:f9:a5:3f:03:e1:25:45:1d:60:08:
                    9a:b5:6f:ac:1e:d0:3f:c6:c7:7f:77:ff:1c:68:2f:
                    c6:7b:77:05:a9:bf:b6:66:b0:27:3f:6c:4c:10:5c:
                    25:c6:35:75:fd:2e:ba:76:46:80:d5:2f:b8:f8:c0:
                    ed:8d:43:e2:db:73:de:f8:df:05:65:be:6d:3b:1a:
                    3b:95:4a:96:b8:f0:aa:c1:29:28:21:68:22:87:a4:
                    52:db:eb:ad:80:b9:0c:55:cf:19:b2:cf:d5:1d:0f:
                    26:27:45:eb:c5:a8:de:05:64:ac:cc:55:81:ef:ca:
                    8e:bd:73:35:3e:46:57:02:c5:f4:8e:11:2d:4b:4d:
                    47:30:ac:47:5c:bc:2b:c0:d4:52:20:bf:01:d2:f9:
                    b0:6a:9c:c6:16:4f:d3:25:14:83:46:41:86:64:df:
                    7e:25:e0:7d:0e:05:bf:2d:59:9e:0e:7b:1f:31:46:
                    e6:a6:d3:57:ca:0c:3f:ff:80:d8:a7:8b:42:cd:28:
                    38:c5:48:cb:5c:58:c3:f5:f4:f7:39:18:12:65:ea:
                    70:ef:a0:95:11:de:71:e1:01:53:cf:48:c1:09:40:
                    e7:34:95:ef:a0:01:bb:7f:e9:f2:ed:c0:04:3b:f8:
                    76:b5:8e:c4:5d:69:67:07:18:26:54:40:5b:2d:39:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6D:36:83:66:CA:F3:F5:C6:4B:19:0B:88:6C:54:5B:22:90:02:E4
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:1c:f0:e3:a9:77:ea:fe:05:17:4d:2c:59:80:c5:59:61:
         b2:7a:48:41:cf:79:03:2f:5a:2d:92:63:fb:d1:cc:c1:d0:3a:
         79:fd:54:f2:2c:c9:2d:4e:51:68:a9:9d:33:95:3b:65:09:bc:
         b5:c1:d5:6c:e0:fa:6a:4a:a0:9b:50:aa:85:93:75:6e:f3:04:
         36:d2:a0:1d:e8:5c:ff:d4:b5:6e:f1:a3:d9:52:cd:30:5d:27:
         2c:cc:c6:5b:66:29:00:46:0d:fd:db:0a:ee:58:35:90:ff:c3:
         82:13:75:be:6a:aa:24:43:a9:52:a6:13:80:86:d3:a0:99:f8:
         07:c8:07:b5:f9:4e:ba:f4:b8:dd:9f:c0:55:80:24:75:28:5f:
         cf:21:e3:58:86:e5:cd:61:6b:24:a8:8f:06:ed:15:9d:ab:17:
         dc:81:06:4d:bb:3b:84:7a:fc:04:90:ed:73:fb:78:20:77:18:
         8c:13:64:89:5b:07:0b:e0:20:39:af:65:9d:95:fb:68:59:5a:
         98:18:22:06:ea:32:31:db:6e:1e:b6:fd:e5:7d:52:09:04:19:
         62:ad:74:3f:7f:4d:b3:e8:82:bd:29:10:65:98:ed:f2:74:d0:
         20:e5:5a:84:c5:73:85:c6:3b:35:f8:fa:8c:96:5c:a2:41:ce:
         05:89:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:07 2026 by rpki-client