Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          nYk6p8Gm6wzniOBZdLjYgxr4+w2ebE6YIthGCJnM24I=
Subject key identifier:   45:F8:8D:E7:C2:05:20:36:B1:F7:CB:02:57:3C:25:06:77:0C:DE:AE
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019EC1EE49BDEFAA7E30FFE2D08B5636902B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          14C8
Signing time:             Sat 13 Jun 2026 17:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:19 +0000
Files and hashes:         1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: XIzRnpu3P0S7meSY8i9/gBuHuG2LDxHuEcM04zK/dwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:49:bd:ef:aa:7e:30:ff:e2:d0:8b:56:36:90:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Jun 13 17:01:19 2026 GMT
            Not After : Jun 14 17:01:19 2026 GMT
        Subject: CN=45f88de7c2052036b1f7cb02573c2506770cdeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:17:cc:43:69:6e:1b:2f:3d:c8:b4:b5:fa:
                    da:fb:c8:d0:67:d4:aa:d0:84:98:33:a4:16:3a:ff:
                    99:b6:b8:85:94:18:79:ff:e1:11:5c:4f:59:da:31:
                    74:3c:eb:d9:46:e1:a7:02:89:1a:b5:0c:2d:70:b6:
                    f2:7d:3f:30:52:0a:75:62:f7:94:41:63:d7:8f:61:
                    6c:33:22:22:42:ac:49:3b:43:68:75:b0:8f:c5:f5:
                    d1:5b:85:25:fb:f4:7b:08:76:ee:5a:c4:5a:b9:5b:
                    81:5a:72:c6:92:03:61:89:6b:cc:0f:94:a4:d5:24:
                    b9:54:b4:f9:34:ee:ab:01:1c:24:7a:12:2c:b8:f5:
                    6e:e2:16:8c:86:cd:ea:2b:d3:83:6e:4b:4d:d8:e6:
                    b7:35:4f:3f:a4:2e:92:83:31:47:25:b1:4a:99:b7:
                    32:61:72:6a:50:0d:0c:0d:57:99:31:63:52:03:1c:
                    92:08:0d:be:d3:22:95:ae:01:01:1c:3e:79:b5:ab:
                    23:e5:2b:ec:c4:b3:fd:0e:5f:4e:70:a5:a3:58:37:
                    27:1a:17:7d:f2:c6:36:67:a9:3f:eb:ed:c1:1a:81:
                    78:dc:3e:07:a6:d4:c2:68:d9:e6:c9:98:dd:e3:61:
                    0b:d0:0d:77:02:ed:7a:43:17:6b:f9:94:fa:28:0c:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:8D:E7:C2:05:20:36:B1:F7:CB:02:57:3C:25:06:77:0C:DE:AE
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:94:19:41:77:c1:5f:56:91:07:d2:78:f2:ab:72:5c:2e:80:
         ab:65:b6:80:1c:25:e0:af:23:28:eb:63:2f:c0:78:75:33:2d:
         33:cd:af:c7:2b:71:7d:83:b2:b5:35:b5:2e:e1:be:c9:fb:33:
         e2:39:89:9d:08:b0:cb:25:87:5e:ad:d6:25:68:0f:d7:a3:d9:
         74:9c:fa:10:10:ba:27:ac:58:05:8b:3f:44:ed:e0:32:db:f6:
         2d:43:0e:23:e0:be:0f:f1:5d:96:01:1e:74:9c:a1:3c:48:f8:
         16:32:5d:f2:08:15:48:34:a6:4b:23:37:6c:39:24:de:a6:cc:
         5b:77:c2:dc:54:77:2b:cb:8b:03:86:e0:12:39:b9:15:58:01:
         d2:fc:0f:94:6a:8e:16:ff:43:c4:c2:03:36:77:c6:f0:66:ca:
         35:e4:20:34:aa:bf:e1:65:a0:1e:81:63:8d:80:fa:c4:91:b8:
         68:e2:b3:40:70:66:35:12:04:28:e5:fa:e0:c5:38:09:ae:5e:
         de:9e:fe:6a:47:03:3a:8a:4e:80:4a:59:1f:db:ce:95:86:18:
         9c:f0:44:ce:17:9d:da:8e:80:a3:1a:92:0b:dd:21:a2:87:2a:
         4b:f0:24:fb:41:3a:ef:1f:c4:77:b1:bf:b4:ac:54:7f:4c:1b:
         f3:b2:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:39 2026 by rpki-client