Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
File:                     BNhWAsroYaFGaoWobO-1rLA4qxI.mft (raw, json)
Hash identifier:          9WnwKw0i03dpe60zhdbht8NNmkuZyTsSbS6hiGhdaok=
Subject key identifier:   73:3C:CD:B6:59:A2:BE:AB:D5:CB:CC:32:68:12:EE:0A:B2:17:2F:60
Authority key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Certificate issuer:       /CN=04d85602cae861a1466a85a86cefb5acb038ab12
Certificate serial:       019ED318B5DC6167355BCECDFDF3AF99F9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
Manifest number:          64
Signing time:             Wed 17 Jun 2026 01:01:12 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:12 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:12 +0000
Files and hashes:         1: BNhWAsroYaFGaoWobO-1rLA4qxI.crl (hash: ki0rAURdUr6JZqFh07k7vVSRyj97+hx5dH6qAlZIP20=)
                          2: W4Jd97wklYPbtC1yRMX3CKRKmZA.roa (hash: 1Sm8Xnqv2nrDhx2KEVkLvXTxHHoxXzQJhfn447Uj43I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:b5:dc:61:67:35:5b:ce:cd:fd:f3:af:99:f9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d85602cae861a1466a85a86cefb5acb038ab12
        Validity
            Not Before: Jun 17 01:01:12 2026 GMT
            Not After : Jun 18 01:01:12 2026 GMT
        Subject: CN=733ccdb659a2beabd5cbcc326812ee0ab2172f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:22:f2:75:71:df:c0:2f:15:f8:a5:57:9a:
                    47:8a:e1:0c:6b:bd:f7:0d:fc:67:c6:75:bd:60:f4:
                    ef:43:c9:da:bb:1b:45:d3:d0:30:dd:e8:f6:1d:30:
                    b7:b1:c0:02:cf:98:66:47:eb:81:43:fd:34:53:8b:
                    57:d3:3b:e9:6f:8a:2e:a7:b2:cf:b6:c9:e6:72:a3:
                    c5:56:73:78:24:8d:5f:92:6b:2f:f9:6a:89:e2:6f:
                    9c:6f:c4:99:04:15:18:8b:f5:67:df:26:81:ee:c8:
                    44:c6:f9:15:5e:79:54:3c:77:ef:d0:a1:aa:f5:5c:
                    36:4e:b1:4c:46:c1:c8:13:ae:42:93:17:3b:40:f2:
                    98:00:5a:ab:39:0d:1b:c5:9f:4d:27:18:8b:5f:32:
                    50:12:82:1a:05:8d:2e:0f:aa:c5:bf:38:6b:ee:4a:
                    05:71:65:cb:f2:88:b2:04:31:4a:9d:67:60:e0:5e:
                    92:e1:e7:27:c1:1d:7d:ef:63:b0:a6:d5:87:eb:3f:
                    dd:8e:b5:4c:07:e3:f7:1a:ae:86:f7:9d:e8:34:b1:
                    1c:cc:76:ca:b5:b1:84:66:3f:80:b0:cd:ee:80:2a:
                    8e:25:eb:ea:c0:dd:21:5e:b5:4d:b5:7e:f0:b5:6f:
                    ae:74:3e:1d:74:ce:2b:4c:38:b1:98:0a:0b:76:cb:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:CD:B6:59:A2:BE:AB:D5:CB:CC:32:68:12:EE:0A:B2:17:2F:60
            X509v3 Authority Key Identifier:
                keyid:04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:49:7f:64:1e:34:5f:27:34:15:94:99:0b:a7:8b:66:30:
         c7:3a:fd:5a:b8:d7:1d:25:3b:84:2f:46:d4:f0:24:6e:25:db:
         68:fc:1f:42:87:81:4b:3e:0f:a6:9e:cf:7b:2b:dd:56:2a:df:
         d6:e5:70:d0:37:6c:89:eb:ba:ae:e9:58:a9:2a:e4:e7:63:c0:
         89:a2:8b:c8:4a:01:8e:89:6b:88:56:ec:24:f8:47:60:2b:a3:
         23:23:dd:b3:8c:7a:f0:85:c3:ce:8c:41:00:6c:f0:c9:fb:00:
         ba:f7:bf:34:36:3e:c7:f3:11:c9:b0:3b:86:15:80:ec:27:02:
         0e:42:e6:2d:b8:a5:d7:6c:37:b8:50:d1:f2:38:4b:5c:ef:83:
         04:fc:71:f6:9a:87:47:b4:42:8c:72:1f:b7:16:37:13:70:8b:
         77:3a:9a:18:18:71:55:20:15:d3:e4:45:5b:d0:29:e8:73:fb:
         52:1a:c2:7a:db:1f:7a:3a:7b:a2:de:d6:04:17:f2:ef:b6:87:
         8b:21:60:b6:43:d7:1c:bc:8f:5d:ed:c6:58:d1:c1:d8:46:6f:
         36:d3:49:72:43:ee:41:b3:e6:09:d9:d1:4e:f5:b7:b6:99:ed:
         a4:4d:16:73:ff:47:1d:2e:3f:67:34:d8:c0:45:f8:fb:4a:4f:
         00:ed:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:11:32 2026 by rpki-client