Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          DdszgdFNm5Yb2XthO6ffqOvb5dIANpMWph20caa3v5I=
Subject key identifier:   98:E8:A3:BE:B9:42:B7:53:00:2F:02:CE:73:E2:05:87:EA:93:BB:14
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019EBF9146122674FD3574AB491EC09AFE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          1635
Signing time:             Sat 13 Jun 2026 06:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:29 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: E1Y4wp5AqNq0rs0EU+Ahc0zAqYoHFWIqF7Lvg/5VqEw=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:46:12:26:74:fd:35:74:ab:49:1e:c0:9a:fe:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jun 13 06:00:29 2026 GMT
            Not After : Jun 14 06:00:29 2026 GMT
        Subject: CN=98e8a3beb942b753002f02ce73e20587ea93bb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:e7:b8:53:18:be:ef:19:06:e8:9d:8a:ce:
                    b5:a7:4e:64:e8:b0:c1:27:e8:d3:e9:55:c1:75:43:
                    00:7f:5b:72:a4:42:10:b0:8c:af:1a:aa:cb:50:98:
                    92:3c:60:f1:9a:db:4a:61:57:56:88:a5:65:e1:bd:
                    83:9f:70:31:e8:aa:d0:61:54:04:d3:e2:da:4e:58:
                    e3:8c:20:88:c5:c1:a3:66:7e:64:b1:06:dc:61:9c:
                    6e:85:1e:1a:a4:24:16:e5:01:88:f6:79:ce:de:b5:
                    3e:74:04:98:d2:0e:5c:b5:fc:e9:61:bf:06:46:38:
                    61:9b:33:d4:51:f6:85:d4:fa:ee:d8:0b:87:36:93:
                    7c:91:05:51:f7:f3:56:d5:5c:e7:86:a5:79:a6:2e:
                    be:08:40:e6:69:ae:19:2e:70:10:1d:cc:55:a8:a0:
                    cf:39:04:8d:b9:69:96:4f:9b:19:c3:83:e7:07:66:
                    0f:82:3d:11:8f:cc:3e:78:43:cd:78:80:98:d1:57:
                    2d:6e:c2:4a:c7:26:f8:4e:4b:70:df:54:c5:eb:1c:
                    12:ce:cc:11:79:a0:82:94:7d:f9:6d:d5:9f:c6:d1:
                    ed:48:02:1e:ed:d9:58:5f:b9:21:1a:41:14:e3:2d:
                    12:9d:c2:ed:8c:a7:e9:b8:f1:48:4b:1c:53:9d:32:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:A3:BE:B9:42:B7:53:00:2F:02:CE:73:E2:05:87:EA:93:BB:14
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:5a:2c:8a:c0:19:cf:72:48:c6:95:22:05:20:3b:98:a4:
         cb:58:83:cd:6e:83:e7:c0:30:ce:1c:81:c6:e9:cd:7f:fd:50:
         09:a7:b5:11:37:1d:cd:90:ef:b6:27:06:15:0f:87:85:ea:78:
         88:14:51:fa:4b:48:81:d9:76:09:b6:7e:58:46:cd:37:2d:63:
         78:e9:c7:f8:e0:76:3d:33:43:59:21:d5:b5:cc:49:88:74:57:
         f6:73:9f:bf:e3:f9:11:19:74:b5:46:a7:51:bb:ef:56:b5:3c:
         dd:27:09:8e:64:66:1e:3c:de:6c:c3:bf:18:55:40:a9:3d:0d:
         a9:de:55:ce:5f:e1:3a:a6:f8:9e:68:bf:8a:73:08:db:d7:2f:
         38:61:09:1b:e0:dc:3d:4d:c3:c5:9b:8d:ba:f8:61:67:a8:10:
         32:7e:36:15:35:a9:fd:ed:f0:7f:60:5e:86:6d:57:da:ac:a8:
         da:82:7c:db:d1:1a:8e:23:ae:bf:f1:81:ab:59:4d:55:4e:8f:
         3a:7a:a2:d7:15:af:f4:f8:a8:fc:a0:52:34:b8:55:95:dc:09:
         86:fe:ed:ee:3e:ab:26:7f:6d:6b:75:2f:aa:56:33:7d:fb:d7:
         e4:fc:0c:38:be:d4:fe:65:fc:0c:ab:e1:77:2d:62:41:68:ac:
         2a:f8:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:15 2026 by rpki-client