Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File:                     BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier:          dOzQAtxOvOJcOPd9xPE5LqODletj+hXxnssu8Qf4d4Y=
Subject key identifier:   63:C3:34:F7:2E:5B:19:B7:90:93:E4:D2:4C:DF:3F:DA:4A:4C:CD:61
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer:       /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial:       019EC36E2CF1564172806EFB04F9D33A37DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number:          02B4
Signing time:             Sun 14 Jun 2026 00:00:38 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:38 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:38 +0000
Files and hashes:         1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=)
                          2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: QV0iSgX5QY8Gc8lbcuhtREliu7B2gsC8w+qoJdN2QVY=)
                          3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=)
                          4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:2c:f1:56:41:72:80:6e:fb:04:f9:d3:3a:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
        Validity
            Not Before: Jun 14 00:00:38 2026 GMT
            Not After : Jun 15 00:00:38 2026 GMT
        Subject: CN=63c334f72e5b19b79093e4d24cdf3fda4a4ccd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:a3:be:ed:01:50:98:4e:51:16:4f:34:ce:
                    3d:13:7b:4f:5e:88:25:f8:99:56:3a:e6:37:3d:dc:
                    e2:6b:f9:b8:c1:12:e9:a5:d1:a0:11:6c:ea:58:fa:
                    d5:19:6a:eb:8e:b7:3d:c7:ae:93:0c:62:a7:f0:e0:
                    af:65:73:77:8e:90:c9:96:80:e7:cd:08:a7:3f:ff:
                    a7:f6:82:ca:a6:3f:10:6d:8d:da:f4:10:18:df:62:
                    8e:7a:44:6c:38:9b:00:b1:d5:9c:8e:17:51:93:79:
                    2f:30:2e:43:ef:03:8b:1e:bc:87:a1:4c:83:45:3b:
                    10:54:c7:20:ca:b0:91:11:03:6b:6c:41:14:6f:8e:
                    ff:53:c1:66:0e:38:a2:ca:01:38:e2:e1:59:94:68:
                    64:63:d0:2b:03:99:1f:b9:1d:54:9f:d4:9f:f4:b4:
                    3c:d2:25:a4:3f:d5:57:54:a0:0c:83:09:2f:d5:15:
                    59:20:c3:51:0d:8c:b2:64:cc:80:6d:04:8e:5f:64:
                    d0:65:61:96:5a:c5:b7:26:a8:7f:4d:78:e4:2a:b3:
                    f6:f3:2f:b3:5a:c1:6c:70:b1:ff:06:88:c2:4a:ff:
                    7b:20:db:ce:ff:eb:a9:64:1d:b0:7c:60:4a:df:59:
                    83:8c:50:de:1e:a8:c1:ff:52:0b:02:3c:05:12:36:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:34:F7:2E:5B:19:B7:90:93:E4:D2:4C:DF:3F:DA:4A:4C:CD:61
            X509v3 Authority Key Identifier:
                keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:96:7d:bf:ad:a7:e6:8c:46:3b:37:c0:64:9a:2e:e0:73:92:
         b7:36:23:14:ae:d1:8e:77:a4:03:b5:41:7e:0b:41:42:33:52:
         99:b5:32:86:17:99:b7:5c:a5:a0:0a:34:d4:fb:90:85:89:98:
         64:83:e4:d2:d4:ed:60:9e:2e:02:81:9c:19:50:e5:8b:f9:4f:
         e6:b5:94:f2:39:4b:34:87:c1:ac:75:9b:95:a2:8d:c6:40:f2:
         54:62:2b:cb:ec:b5:d0:69:60:8e:7b:ae:bc:f7:7a:20:24:c9:
         88:67:15:a7:91:00:27:09:09:1a:01:53:41:d1:f7:85:92:04:
         02:17:f5:dd:9e:12:0d:72:78:7a:81:18:cd:b2:64:49:14:3f:
         27:23:13:f6:83:86:26:c9:43:d4:77:ef:da:8a:4b:df:02:48:
         43:3e:ff:eb:52:ad:2a:c2:cd:65:3b:ba:b1:83:bc:48:50:c1:
         0c:23:93:ce:8f:b6:27:f9:c3:66:03:47:54:3b:55:bd:90:c2:
         36:c9:14:64:0a:0c:99:3d:dc:0d:b0:68:d9:e3:ee:a8:4b:87:
         23:cf:66:16:ec:60:62:08:ad:93:6a:36:60:36:c8:2c:c6:df:
         66:eb:71:a1:f4:82:28:21:43:c5:1b:f7:05:7e:58:fc:d3:ee:
         68:68:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:04 2026 by rpki-client