Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File:                     bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier:          VGYEM6CbHLR8QRkC1/Gg0dHogkG8+Ls5nls211GuD3w=
Subject key identifier:   04:B1:46:D4:99:32:49:38:AD:ED:0C:F2:74:1E:C0:0F:6E:D3:CB:FF
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer:       /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial:       019EC1EE58A6378BC267B88CC25BE2AEA5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number:          0285
Signing time:             Sat 13 Jun 2026 17:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:23 +0000
Files and hashes:         1: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: E/Atj98th2zq8eTXO6g6GbdZKA2vbDyDWhufxNl2XeI=)
                          2: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (hash: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A=)
                          3: rtWwTl9MBmDLdQSKYIL-yECsxyQ.roa (hash: +411KUF7k/iuzsKKk7k0b7Q2qWA88IGJo6IfbnCC2V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:58:a6:37:8b:c2:67:b8:8c:c2:5b:e2:ae:a5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
        Validity
            Not Before: Jun 13 17:01:23 2026 GMT
            Not After : Jun 14 17:01:23 2026 GMT
        Subject: CN=04b146d499324938aded0cf2741ec00f6ed3cbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:27:06:7d:aa:03:b5:1d:e6:e1:05:a1:62:
                    3f:ee:55:de:79:e5:65:be:a7:41:6e:22:00:2d:28:
                    2a:0b:63:4e:b4:f3:e7:fc:00:25:29:94:ad:aa:c5:
                    9e:d7:3c:38:f5:ff:7f:74:d6:34:e4:c5:6f:45:ae:
                    9f:d5:53:8d:c8:d3:cc:41:fa:80:56:19:89:e9:a1:
                    1a:b2:b7:b1:08:9c:6e:11:85:65:17:88:db:ad:fd:
                    7c:8f:70:56:17:19:f5:4d:06:fe:95:1a:2e:7f:f6:
                    dc:46:5c:23:d6:42:1a:16:bf:68:5c:e2:d3:fe:0c:
                    66:d7:2c:84:ce:dc:5b:67:96:50:b7:96:37:5a:1f:
                    db:fe:07:15:d0:0e:ae:c0:38:39:0c:dd:71:9e:f5:
                    09:fb:1c:50:d5:3f:17:68:4f:92:d7:a9:0c:0a:bd:
                    bf:74:81:5b:01:ee:8e:ee:a0:89:4b:8f:da:51:94:
                    51:d7:26:d8:54:ef:f7:10:fa:2a:63:4b:b4:ab:f2:
                    0f:66:9d:5f:65:95:8f:00:7e:03:85:fd:2f:39:11:
                    03:47:b5:00:43:ba:6d:21:f8:43:46:d8:2e:08:98:
                    85:4e:21:99:c4:4f:bd:be:2d:a8:33:85:b1:d4:27:
                    05:f3:e6:3b:f7:1e:ae:f0:b1:93:77:1f:31:d3:ea:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B1:46:D4:99:32:49:38:AD:ED:0C:F2:74:1E:C0:0F:6E:D3:CB:FF
            X509v3 Authority Key Identifier:
                keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:8a:5a:2e:47:11:69:56:49:62:4e:dd:16:3b:e0:bb:85:
         40:51:42:bf:1b:fb:e7:87:a0:29:26:26:d0:bc:ba:eb:67:0e:
         97:3f:7c:6d:96:a1:28:fa:f0:fa:49:de:d2:92:a8:53:d2:99:
         bc:f9:db:15:05:31:21:6f:bb:d3:09:b2:96:75:a3:f8:ae:d0:
         98:f9:0c:44:ec:d6:4c:59:cb:4f:1a:de:3b:23:b2:fd:92:65:
         b2:29:40:22:93:4c:0f:88:b6:32:99:d6:52:f0:29:f1:ea:d6:
         c4:a7:5d:70:4b:eb:f1:66:1a:a9:0c:0f:24:8e:b3:9d:38:fa:
         67:07:18:51:ca:ee:2f:bd:c5:77:13:52:da:a3:c6:e8:b3:c0:
         c3:8b:e6:3f:50:8e:cc:36:2d:c4:22:03:5f:d2:af:83:a1:c0:
         4a:b1:bb:9e:d1:ed:8e:3c:e8:72:51:48:61:b4:29:67:63:4a:
         b4:a6:b2:3a:fb:f1:d1:02:3e:55:b6:9c:10:44:18:2a:b4:d6:
         eb:d5:15:83:34:02:a9:38:c3:4a:b8:c5:2a:cb:fe:6e:9b:a6:
         25:4a:d2:f3:43:34:74:04:46:30:22:e3:29:47:5d:da:0c:d8:
         8c:00:23:5e:f7:05:13:ed:d7:26:db:65:43:00:ae:4d:96:b6:
         fe:8a:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:40 2026 by rpki-client