Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File:                     Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier:          tw76rz0+Pk7wu5ddx8QhLWnCdZaGZvPtKV+pZLYsRmg=
Subject key identifier:   37:A8:45:78:AF:3C:A6:B9:C0:C8:8E:08:C6:4D:52:07:00:6F:7E:7C
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer:       /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial:       019EBFFF17513E2C8C4229A0935AE13D5135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number:          03B0
Signing time:             Sat 13 Jun 2026 08:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:26 +0000
Files and hashes:         1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
                          2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: ubLjY3wuWzBv6NHv6EcClmA78fTqcJ6nNTDBGK3ojX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:17:51:3e:2c:8c:42:29:a0:93:5a:e1:3d:51:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
        Validity
            Not Before: Jun 13 08:00:26 2026 GMT
            Not After : Jun 14 08:00:26 2026 GMT
        Subject: CN=37a84578af3ca6b9c0c88e08c64d5207006f7e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:5c:71:6b:72:bd:84:c8:cd:9f:22:9f:4c:
                    8f:48:56:bb:f8:0d:2c:65:e8:3b:d9:f6:01:88:d3:
                    f7:74:8e:2c:13:7b:e2:79:d1:b6:10:33:d2:2f:46:
                    17:5e:c0:49:5b:8a:e8:57:57:a0:37:5b:b1:c4:89:
                    c3:45:9f:46:7a:f6:2d:ba:52:6d:5b:ba:7f:aa:e9:
                    37:04:6e:a4:be:d9:32:b5:e6:d1:1b:ab:1a:9c:de:
                    b1:f7:e0:05:2c:53:c2:e3:81:7b:b3:bf:f6:eb:ee:
                    71:53:61:81:b0:11:d3:53:8e:b7:fb:d3:73:fb:a2:
                    36:42:bd:6c:7b:78:d9:b4:e8:b1:b5:b1:da:26:10:
                    24:b2:09:87:d2:2a:b3:e3:4f:fc:e5:34:7e:e3:73:
                    0b:96:dc:33:df:e0:a5:66:6e:7a:e8:40:9b:6f:f2:
                    e2:e9:b3:cb:35:a7:ef:d9:1e:58:e9:55:87:ef:7e:
                    85:65:f9:5d:42:7f:e7:43:1e:d8:a4:6b:b5:05:49:
                    fe:fa:0b:0f:51:12:ae:df:54:fb:9f:7d:26:71:7d:
                    51:fa:8b:71:df:e7:bf:bf:e8:3f:ce:b4:04:8b:76:
                    bd:a1:6f:db:83:85:6f:d9:9b:80:ba:5b:28:af:23:
                    8b:86:f0:d4:85:e7:28:6e:78:e6:31:69:55:51:5c:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A8:45:78:AF:3C:A6:B9:C0:C8:8E:08:C6:4D:52:07:00:6F:7E:7C
            X509v3 Authority Key Identifier:
                keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f1:8e:33:89:ea:bf:8c:ba:37:31:a6:49:cd:85:99:f2:75:
         4b:dd:03:be:bf:b0:05:87:b1:c3:ca:2e:f7:25:ef:2a:e3:dd:
         6e:d8:ba:d3:e8:68:4f:4b:29:69:2e:14:6a:64:b7:a1:2e:8b:
         42:3d:20:44:5c:78:dc:5d:bc:25:8b:bb:44:14:0f:61:b6:ee:
         3b:db:8d:f1:1d:f2:b5:f6:f9:84:03:ba:79:5c:c4:48:49:b9:
         91:63:1f:dd:ff:8f:bb:0d:df:32:bd:77:87:fc:58:c9:a6:76:
         17:49:05:e9:27:9b:68:46:e9:67:2a:8c:1f:d9:a6:e9:99:8f:
         b8:7a:a4:39:08:41:24:a9:78:89:e8:67:96:f3:33:c8:91:48:
         af:a3:a0:6d:0c:52:94:cc:fb:1f:d9:ce:bb:b5:0f:40:41:ac:
         c3:5e:d6:98:d0:3c:1b:29:e3:26:b0:73:4b:bb:1a:71:59:32:
         aa:e1:20:a4:d9:5c:2e:1e:4a:53:aa:18:89:2c:32:86:d1:cb:
         c7:3a:a0:00:84:0e:aa:15:7c:35:f1:3c:43:f7:a4:1f:44:f1:
         8f:83:e9:11:ce:a5:1b:17:c8:db:1f:5a:b1:49:36:c5:aa:50:
         28:92:ff:19:bc:e9:9f:ee:be:3a:f7:9a:a4:b4:82:03:65:37:
         7e:76:fb:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//xdRPiyMQimgk1rhPVE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk
OWVjY2IwHhcNMjYwNjEzMDgwMDI2WhcNMjYwNjE0MDgwMDI2WjAzMTEwLwYDVQQD
EygzN2E4NDU3OGFmM2NhNmI5YzBjODhlMDhjNjRkNTIwNzAwNmY3ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokhccWtyvYTIzZ8in0yPSFa7+A0s
Zeg72fYBiNP3dI4sE3viedG2EDPSL0YXXsBJW4roV1egN1uxxInDRZ9GevYtulJt
W7p/quk3BG6kvtkytebRG6sanN6x9+AFLFPC44F7s7/26+5xU2GBsBHTU463+9Nz
+6I2Qr1se3jZtOixtbHaJhAksgmH0iqz40/85TR+43MLltwz3+ClZm566ECbb/Li
6bPLNafv2R5Y6VWH736FZfldQn/nQx7YpGu1BUn++gsPURKu31T7n30mcX1R+otx
3+e/v+g/zrQEi3a9oW/bg4Vv2ZuAulsoryOLhvDUhecobnjmMWlVUVx1oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeoRXivPKa5wMiOCMZNUgcAb358MB8GA1UdIwQY
MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt
MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi
LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPGOM4nq
v4y6NzGmSc2FmfJ1S90Dvr+wBYexw8ou9yXvKuPdbti60+hoT0spaS4UamS3oS6L
Qj0gRFx43F28JYu7RBQPYbbuO9uN8R3ytfb5hAO6eVzESEm5kWMf3f+Puw3fMr13
h/xYyaZ2F0kF6SebaEbpZyqMH9mm6ZmPuHqkOQhBJKl4iehnlvMzyJFIr6OgbQxS
lMz7H9nOu7UPQEGsw17WmNA8GynjJrBzS7sacVkyquEgpNlcLh5KU6oYiSwyhtHL
xzqgAIQOqhV8NfE8Q/ekH0Txj4PpEc6lGxfI2x9asUk2xapQKJL/Gbzpn+6+Ovea
pLSCA2U3fnb7OA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:07 2026 by rpki-client