Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          2x9uvSBKWM5c5t7oskPqzDgLZi5Y2m9kEnKuBl6hG6U=
Subject key identifier:   3F:3D:7F:C3:23:85:6E:5A:B1:0B:DE:6A:1E:51:52:B6:41:5C:D1:3A
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       019EC1492C2F0D4EBC00DEA992F7EA6AED98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          1729
Signing time:             Sat 13 Jun 2026 14:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:58 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: GJGnrvyoRRXdYOTzkZdWqgycC+pNnMP14y5s2Y28e4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:2c:2f:0d:4e:bc:00:de:a9:92:f7:ea:6a:ed:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Jun 13 14:00:58 2026 GMT
            Not After : Jun 14 14:00:58 2026 GMT
        Subject: CN=3f3d7fc323856e5ab10bde6a1e5152b6415cd13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:47:c4:07:8d:e2:77:e6:80:a8:a7:04:1e:
                    96:3f:47:cb:ea:fd:f1:66:d2:e3:4d:90:cb:e2:a9:
                    47:49:73:46:6d:82:96:d0:a8:e7:7d:fa:9a:f1:40:
                    96:4a:b6:88:d9:16:0a:32:e7:26:23:4c:db:1b:38:
                    a7:42:d8:3c:34:6c:9c:50:aa:c8:44:40:d0:0e:40:
                    ee:7e:a1:43:dd:a2:59:1d:9d:d0:8d:ce:b6:f2:81:
                    40:0e:d9:10:b1:70:5a:a2:74:f8:78:24:7f:af:3c:
                    de:7a:f3:c6:c0:0b:76:58:15:9a:77:ae:7b:43:7e:
                    b1:dd:64:35:2c:e0:e6:34:0e:70:d7:fe:77:95:06:
                    f0:a8:a4:e7:77:7e:20:fa:db:63:67:80:36:67:22:
                    18:56:0e:71:eb:7e:c3:e1:10:57:97:f2:e1:3b:f5:
                    5b:3c:25:ff:09:cf:b0:08:da:43:bf:bf:f4:80:68:
                    a3:a5:0f:03:f9:2c:cc:66:c8:24:39:a0:fa:e4:76:
                    cc:f6:e5:85:06:5b:0d:26:0c:52:88:b7:64:8e:7c:
                    38:72:a5:1d:5c:55:36:f1:33:ac:35:8a:07:c7:5a:
                    57:c4:5b:5c:0c:ed:36:34:cb:71:33:e7:7f:3c:52:
                    9f:e2:6d:16:8a:be:49:bb:71:dd:25:be:f9:d3:de:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:7F:C3:23:85:6E:5A:B1:0B:DE:6A:1E:51:52:B6:41:5C:D1:3A
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7b:fa:66:c2:65:7e:a8:00:4c:ba:18:c4:ef:75:47:ec:88:
         33:af:9f:4d:b0:05:c8:4a:77:3e:46:e5:f6:76:d7:d7:4d:c6:
         b9:bb:6f:22:a6:98:ea:2a:36:13:d7:fd:df:ed:55:f2:9b:4b:
         3c:8d:52:28:9c:f5:30:86:7e:8d:4f:d7:98:87:87:de:2c:e1:
         bf:ad:80:e2:54:42:32:26:a8:65:27:5f:79:5a:df:ec:26:52:
         b6:50:49:2f:ff:71:73:c5:70:61:4f:c6:87:b6:7b:78:31:ad:
         04:1a:d9:8d:24:a7:18:8c:ac:f9:c7:cb:d5:33:3e:2b:6f:5b:
         25:4c:a7:bd:1c:38:2c:68:fa:20:ba:31:9f:10:58:55:ac:67:
         da:71:73:fa:de:d5:16:94:92:93:d7:3a:d9:0c:44:cb:2c:c7:
         31:e4:d2:70:10:9f:ae:23:15:3e:43:18:92:20:f5:36:2c:55:
         df:05:d5:bf:3b:20:99:02:27:9b:24:ef:f0:81:57:87:d0:21:
         c6:67:34:c4:bb:16:d7:08:c2:d7:23:85:f2:8a:f7:ea:f2:34:
         ae:1a:60:1a:7d:c0:37:08:7b:1e:fe:c5:eb:36:6a:22:cb:58:
         d9:d2:84:69:e1:20:af:a7:fc:fa:c8:45:7c:ad:b5:83:c3:f8:
         54:c6:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:36 2026 by rpki-client