Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          mT8aarXThgpfUrkyGkvZD6G7mhq4SxZ0VNWO+tuQ6jM=
Subject key identifier:   F4:E6:11:F9:98:5E:5E:B4:90:A6:8A:6D:5D:FB:FF:25:41:CF:27:2C
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       019EBEB5AF8C9625C46478BFBD25C1532333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          0758
Signing time:             Sat 13 Jun 2026 02:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:38 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: bKRGOzirr+Gc2N1JNNbALnbwir07eUtshsT8JF4SbKA=)
                          2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:af:8c:96:25:c4:64:78:bf:bd:25:c1:53:23:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Jun 13 02:00:38 2026 GMT
            Not After : Jun 14 02:00:38 2026 GMT
        Subject: CN=f4e611f9985e5eb490a68a6d5dfbff2541cf272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:76:36:2c:89:56:bb:b6:89:2f:da:35:e0:
                    08:06:70:83:c2:f6:7d:4a:33:47:92:2c:c0:ce:46:
                    fd:b4:4f:34:0a:e3:f8:77:a7:08:49:59:2d:d9:f3:
                    75:69:73:00:ca:07:76:11:3c:a3:21:e1:78:0d:fa:
                    22:0a:92:aa:76:ca:f9:50:f8:ec:05:d4:b2:09:bb:
                    c0:0b:6d:ef:17:da:19:72:5d:89:10:ad:2e:40:c1:
                    f5:58:03:8b:4d:dc:b8:a5:e1:a5:09:4a:ab:91:5d:
                    50:ca:91:37:be:91:33:c7:bf:9e:28:5a:d7:5b:fb:
                    e4:1e:1c:14:6a:2c:98:2a:48:cb:f8:ef:71:68:ca:
                    d0:e7:08:45:f1:bd:1a:64:f9:d1:17:7f:61:49:34:
                    32:86:c4:fd:b5:13:3b:bd:56:76:11:69:3e:2a:ce:
                    0a:44:f5:e9:bc:88:92:0f:cc:65:2c:b1:08:e7:5a:
                    e2:e5:94:88:86:4b:3e:7a:b2:b5:2a:20:46:73:cf:
                    22:8c:c8:bb:95:fd:15:2f:2e:1c:9a:cf:69:90:75:
                    38:2b:68:78:26:65:d1:29:ad:18:54:c8:99:7d:16:
                    76:64:33:59:53:1a:ff:8c:e0:6d:43:a2:6f:e3:a8:
                    37:d3:83:e7:1b:43:dc:3a:a5:1a:fd:87:20:b5:22:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E6:11:F9:98:5E:5E:B4:90:A6:8A:6D:5D:FB:FF:25:41:CF:27:2C
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:f5:c4:9a:3e:25:0d:bd:fb:e0:51:e6:a3:45:a5:47:34:
         68:36:3f:08:7e:50:bf:0e:11:3f:be:05:be:cc:90:bc:53:a5:
         42:3b:cb:94:fd:85:d2:1a:6c:47:c0:16:0f:29:29:4f:51:29:
         cb:c6:1e:e2:0c:6a:d1:55:ce:c3:ce:78:c6:64:db:ba:1a:a4:
         79:9a:f8:a7:37:02:83:93:a8:60:d6:30:4f:3e:c9:ed:35:22:
         47:01:f6:1e:b4:49:03:0d:4f:fb:52:a9:0e:be:9d:b9:56:d9:
         70:e5:81:48:8a:5a:94:6e:b7:e5:09:45:cd:6c:9b:50:23:a9:
         4f:61:0f:a8:ee:8b:ab:96:e3:63:62:d7:9c:18:4d:3c:8d:c8:
         66:c0:55:30:a9:5d:05:39:85:7e:b2:0d:95:07:fc:f5:3f:01:
         ee:3a:f7:fb:90:37:31:c6:50:18:af:84:c8:fd:26:88:fd:29:
         d0:7c:d2:39:e6:c4:1c:17:b1:77:b3:5f:ee:24:ab:27:23:97:
         48:2f:c5:c0:ec:c8:26:d3:fc:09:ba:4d:de:c5:c1:2a:12:ac:
         dc:14:c2:b2:a8:0d:07:00:54:3d:26:f5:d3:d7:ea:0a:79:65:
         c3:e2:9e:b5:7e:d3:30:28:c9:f2:26:59:55:e3:12:29:16:85:
         a3:b0:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:15 2026 by rpki-client