Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          73LHQcBBZ1kBRD3cdRckY0dM6wD587ri0O/Po6bozK0=
Subject key identifier:   2D:A4:68:30:69:56:FB:BC:8F:05:B5:72:89:05:34:5E:87:DA:49:6A
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019ED3BD0D6CC96F443132BE9A02B709D8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          1966
Signing time:             Wed 17 Jun 2026 04:00:42 +0000
Manifest this update:     Wed 17 Jun 2026 04:00:42 +0000
Manifest next update:     Thu 18 Jun 2026 04:00:42 +0000
Files and hashes:         1: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: hvabzF8xU8Dcr+peOTOGsauuNHxBWYBmkk222twi48A=)
                          2: mKQPbj20_E3L-91-26uPTq60OeE.roa (hash: OslZn6jBG+ZPIoPrbXSvbnSCz6sOsKi2+HDmgyujhpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:0d:6c:c9:6f:44:31:32:be:9a:02:b7:09:d8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Jun 17 04:00:42 2026 GMT
            Not After : Jun 18 04:00:42 2026 GMT
        Subject: CN=2da468306956fbbc8f05b5728905345e87da496a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:8e:bb:af:d3:1b:21:0a:51:09:74:09:df:
                    13:5c:b7:69:ac:1e:37:53:16:8e:0e:20:95:d3:dc:
                    10:bf:8e:d1:ff:3a:5e:35:ae:91:d3:cc:ed:f1:1f:
                    55:5f:56:12:e4:bd:88:69:ac:c8:29:6a:cd:1a:a3:
                    31:0a:56:1b:b5:98:37:3f:7a:ae:9f:fe:44:0f:c1:
                    6a:0f:33:3d:4d:46:3e:ce:69:c6:93:51:c1:80:0f:
                    ed:53:37:35:a2:38:27:7b:90:7b:c4:e1:70:1b:dd:
                    41:58:95:a3:df:95:d5:8b:3c:38:9c:48:c4:76:24:
                    ad:2e:81:d2:3e:73:8e:e4:20:b7:b6:ed:65:09:b1:
                    c5:6e:24:ac:63:d3:fc:37:bd:46:2f:11:f2:00:89:
                    6f:cc:00:93:bd:80:ef:02:97:21:17:70:6c:59:ab:
                    67:ce:c3:64:9e:a4:81:8e:34:dd:2e:60:8b:df:3f:
                    7a:2e:c7:f0:45:bf:f3:b1:c7:12:01:5b:99:99:a9:
                    b7:ac:fa:6d:aa:f2:25:a0:33:e0:30:63:a1:49:cf:
                    3e:77:cc:5f:f8:65:a5:43:35:f8:05:e6:cf:e2:fb:
                    5b:02:95:a1:ef:69:43:2d:73:32:61:8b:48:8b:4e:
                    4e:c8:14:ad:07:09:d8:86:af:96:12:74:ab:89:be:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:68:30:69:56:FB:BC:8F:05:B5:72:89:05:34:5E:87:DA:49:6A
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:91:5c:2e:3f:3c:db:ed:b6:1e:6d:81:96:91:cc:a0:ce:
         e1:93:df:b2:8b:e3:ba:42:d0:1f:14:19:03:ed:b2:f8:ff:a3:
         58:9b:c5:af:4e:3c:ad:f0:a4:5f:a7:a6:67:6c:c8:d4:41:1b:
         cf:c7:74:d0:91:5a:6d:6c:89:e3:3f:ac:ca:a8:84:58:91:10:
         ea:a4:45:c0:2e:cc:98:32:85:ae:8d:42:76:e0:e5:f2:13:02:
         c7:b0:dc:72:df:75:86:a5:32:1c:6b:3c:03:16:76:be:a4:e7:
         1b:29:de:05:9d:57:d1:a3:31:71:e9:e0:fd:ba:b8:d2:c8:79:
         51:1f:e8:85:8a:91:6d:1c:47:f7:0b:32:10:35:1c:9b:d4:95:
         b9:0e:0c:3b:96:72:31:4d:8a:f0:37:10:6f:d5:18:34:e0:81:
         a0:a7:e7:05:30:e0:30:54:1d:f1:4a:c9:f8:b0:c5:06:24:5d:
         8f:87:f9:74:5f:c0:53:87:32:b6:ae:83:72:66:7a:2f:61:41:
         0c:cc:5a:4a:b4:ed:74:ec:d7:09:63:a4:ce:9f:6a:6f:91:e7:
         04:ac:c4:29:ba:ac:10:42:65:c5:03:61:76:7a:32:74:b2:d7:
         d0:5f:16:a6:fa:c6:27:6a:58:86:c6:fd:0e:63:d0:7b:4f:38:
         24:7f:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:38 2026 by rpki-client