Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File:                     xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier:          a65nX8sdTNL8jk0QlWRqPH/fO+rtVQA5NVu5Jp+2U00=
Subject key identifier:   4A:74:99:FA:B9:29:14:65:D2:A1:6C:63:23:B8:00:B0:7F:10:95:17
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       019EC25B98785156621904F7DE0CA06EFEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number:          0EBE
Signing time:             Sat 13 Jun 2026 19:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:43 +0000
Files and hashes:         1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
                          2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: jiqbR2ZH7BMNwF5WC5PdxIjOy9xJqtH5xSKz2XyUG04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:98:78:51:56:62:19:04:f7:de:0c:a0:6e:fe:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: Jun 13 19:00:43 2026 GMT
            Not After : Jun 14 19:00:43 2026 GMT
        Subject: CN=4a7499fab9291465d2a16c6323b800b07f109517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:c1:7d:7a:28:19:96:c6:c8:25:16:f6:9c:
                    74:3c:6e:96:e0:e7:50:1d:33:9a:08:30:3f:9b:de:
                    5a:1b:2d:eb:af:ba:a0:7c:ab:a9:1c:e7:92:e4:87:
                    8f:b3:b2:dc:9a:50:4b:d9:9e:15:ba:36:dd:4e:6f:
                    07:47:e7:ff:16:ff:81:4c:f2:1f:cf:cc:f7:6d:14:
                    a6:b9:ec:90:70:27:4e:8b:bd:69:63:89:b3:a0:58:
                    99:f8:67:d8:8b:d6:bc:06:27:45:00:19:38:e5:9b:
                    00:e5:eb:e9:d9:27:45:ce:8d:33:f9:5d:2a:10:42:
                    22:43:49:cb:05:5a:75:34:35:0c:93:b7:27:0e:3e:
                    2f:6b:40:6c:5c:6b:67:4a:13:d9:43:ea:a7:f4:13:
                    0b:8b:8c:67:6c:15:89:2b:44:a7:cb:7a:37:ff:72:
                    de:86:d6:2c:17:c8:d9:90:bb:bd:1d:03:02:f0:ae:
                    af:0b:ff:aa:e8:46:24:4b:d5:1c:78:cd:88:3f:4c:
                    e2:56:ad:5e:4e:eb:34:77:f1:40:61:95:5e:4c:ba:
                    da:4e:ba:2e:23:e1:af:87:33:60:06:df:f3:5b:39:
                    56:08:8f:81:9c:96:8b:6e:b2:bf:93:a1:94:04:42:
                    62:e3:8c:b7:ad:76:43:65:6c:6f:c3:55:e8:92:bf:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:74:99:FA:B9:29:14:65:D2:A1:6C:63:23:B8:00:B0:7F:10:95:17
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:56:c4:59:87:22:9f:f1:91:42:bb:6e:2a:49:fb:fe:41:5d:
         ba:dd:48:c1:69:0b:d9:96:d9:1b:36:b8:cb:df:f0:e5:95:52:
         14:fa:86:69:40:b3:51:0a:a0:3b:35:af:b2:71:32:df:2e:57:
         38:84:f1:85:c8:2e:53:e3:86:98:b3:cd:51:01:c0:4d:91:1c:
         b1:2c:98:92:ba:c3:43:ce:60:9a:7c:87:34:6a:37:29:74:fb:
         a1:dd:ef:89:cf:01:99:87:14:1c:55:5e:51:2a:ee:1b:27:66:
         58:01:72:6c:be:e6:bc:05:1c:44:1e:33:dd:5c:ac:eb:1f:1a:
         d1:09:27:36:75:5d:88:cb:cc:d9:61:9f:85:cf:69:87:86:39:
         7a:52:8b:c4:d6:43:2e:68:69:89:8b:57:46:4f:ac:84:2c:1c:
         70:96:a4:5e:db:47:c7:66:5d:75:68:17:dd:ec:89:4e:78:59:
         5b:0a:25:cc:b9:f9:8e:5e:2f:55:b8:27:89:c9:61:42:29:22:
         de:b9:86:5b:01:3d:a0:75:70:a9:c8:6e:fb:d8:98:8b:9d:b1:
         be:c0:1f:af:fc:84:fe:c8:4b:55:ad:91:50:f8:10:bc:9e:55:
         a9:21:05:f0:9b:37:58:2f:98:4f:32:1e:8a:23:2a:88:ca:99:
         a1:09:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:53:41 2026 by rpki-client