Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          VvrXjptCc3BoY8sz7mck+ZFjSA3g7z5dJN2n2TjjOQ8=
Subject key identifier:   E4:E1:64:4F:24:5A:51:8C:C6:57:8D:B3:B3:0B:05:12:AC:8C:22:66
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       019EBE4805383158F3C66F51AB374AD93526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          0DA8
Signing time:             Sat 13 Jun 2026 00:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:51 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: Bn1g0KqBklSZvVLFdfEhh/N3FDjo4uNSaUpXSZKL6wI=)
                          2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:05:38:31:58:f3:c6:6f:51:ab:37:4a:d9:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Jun 13 00:00:51 2026 GMT
            Not After : Jun 14 00:00:51 2026 GMT
        Subject: CN=e4e1644f245a518cc6578db3b30b0512ac8c2266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:d7:59:5f:df:3e:f7:bb:25:17:e7:18:ba:
                    fc:80:fe:92:2b:e6:0c:7e:4c:01:2e:df:3c:d6:62:
                    48:c0:08:be:b0:e4:8b:e7:e0:fa:68:14:67:a1:ce:
                    f2:4e:c0:23:ff:fa:61:b1:3c:ce:ef:fa:c2:2c:a2:
                    2c:78:3e:94:3c:a5:ce:5f:fc:1e:94:fe:1b:3d:d1:
                    52:2e:04:10:5a:fb:35:30:9c:ac:ea:4b:ec:0c:25:
                    2e:0d:11:61:e3:c7:ea:f9:f4:dd:de:22:5f:c8:b4:
                    4e:51:ba:2e:d1:6b:e8:ec:93:45:9a:2b:c1:fa:b9:
                    16:04:80:2e:f3:ce:2f:12:92:cd:3c:f0:8e:42:b7:
                    a2:48:c7:17:b7:1f:e5:c4:bf:65:25:f8:14:db:c3:
                    59:ac:99:88:53:cc:96:c5:88:a8:ce:1a:b1:72:85:
                    5c:e3:c1:33:39:96:25:c8:84:ab:5e:d1:36:bc:f3:
                    d8:f5:36:9c:57:f6:d9:03:b9:4a:4f:b2:6d:ce:19:
                    2c:74:fe:2b:c6:9d:34:9b:79:3c:81:e8:ca:a9:40:
                    c7:26:d2:f5:bf:68:b2:8c:a8:a3:69:46:15:e8:50:
                    48:2b:21:e4:e5:25:73:b8:3b:dc:a9:45:93:de:cc:
                    f6:92:b7:d1:c1:ff:a5:b5:5e:2b:24:d0:77:b9:b2:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:64:4F:24:5A:51:8C:C6:57:8D:B3:B3:0B:05:12:AC:8C:22:66
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:be:a8:b6:79:a4:8c:63:75:e8:d3:f5:02:94:9d:79:da:
         fb:0a:98:da:77:5c:23:27:72:5c:11:17:a7:b3:cb:7c:8b:68:
         2c:7d:84:e2:a7:cc:34:f6:84:29:8a:bc:c5:42:e7:c8:f0:62:
         9f:40:f1:d3:26:9b:68:42:a6:5f:81:27:4c:21:86:73:48:09:
         47:df:0b:fb:16:89:95:7e:76:d6:58:2d:61:a7:25:f3:2b:55:
         f8:75:06:2b:bb:55:35:7f:25:76:10:22:44:0a:19:10:2c:51:
         5f:15:37:9d:49:ae:de:4a:19:b6:f7:7e:b6:eb:22:e4:44:dd:
         68:9e:7f:6a:68:1b:29:82:e3:0a:cf:db:5a:1b:e2:f3:26:de:
         63:97:24:a8:2e:35:f7:39:09:c3:70:36:12:6a:cd:4e:19:d6:
         4f:0e:6e:0e:a7:8a:23:f1:cf:db:b5:df:b8:a2:ac:7f:bc:b1:
         f3:7f:81:cb:d4:8e:b4:3a:36:2b:a1:26:82:1b:f3:e9:17:ab:
         13:68:1f:ee:fd:c6:0e:ba:f6:eb:cb:97:5b:7e:db:b1:33:a5:
         29:1d:41:91:a8:10:1f:15:c6:55:73:e3:24:c9:ec:56:a2:3d:
         ba:0c:03:c4:7d:5a:3d:a7:da:55:9b:1c:a8:18:c6:d3:d0:75:
         59:2a:12:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:47 2026 by rpki-client