Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          7D87oaWdOVV/clAHRKgq5joPD/0DzAmvEGMy1Mocovo=
Subject key identifier:   13:69:01:51:30:95:AF:36:E9:34:44:8B:36:01:32:9B:9B:E0:CF:A9
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       019EBE7F9F8822CA9FD2BBE5EEBEDEE509AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          0BCF
Signing time:             Sat 13 Jun 2026 01:01:35 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:35 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:35 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: 5K+zFuVJgK/zcBlR0+Cgw2GByj2iMJwIPihNBSvEeMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:9f:88:22:ca:9f:d2:bb:e5:ee:be:de:e5:09:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Jun 13 01:01:35 2026 GMT
            Not After : Jun 14 01:01:35 2026 GMT
        Subject: CN=136901513095af36e934448b3601329b9be0cfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:87:59:ae:67:56:b8:02:b9:69:c0:11:9f:
                    f3:58:a6:1b:25:74:5e:de:eb:ce:bf:89:05:cf:0c:
                    75:2a:a4:c6:61:d2:ac:1d:8f:f1:62:ec:57:a1:da:
                    1e:94:ae:0f:e6:2b:e3:73:bb:e4:8f:05:81:6e:78:
                    b7:fc:9c:29:6f:d7:d9:e0:c7:b5:98:76:b3:28:c9:
                    36:0c:61:51:0f:e3:1f:8c:a2:20:5f:26:30:70:b7:
                    3b:03:e8:80:3e:3e:51:2f:d8:c3:7e:ac:4e:75:1b:
                    39:e1:24:50:f1:ba:40:79:43:92:98:df:51:83:cd:
                    58:e7:8f:b1:04:68:e8:9a:05:5d:5c:84:4c:42:9c:
                    95:5a:41:e9:bf:26:11:1c:2d:2b:d2:db:df:4d:ca:
                    03:d1:48:a8:cd:db:69:3f:7c:86:ab:60:e9:1c:bb:
                    23:2b:ee:90:6a:2a:ba:07:df:02:1b:38:74:ed:b7:
                    c9:0d:32:7e:df:f4:25:fa:8b:21:ff:c6:c0:87:b5:
                    11:bc:2c:ce:1b:f9:9d:c6:08:75:4d:9a:68:b9:b0:
                    00:91:6f:ab:cc:72:07:88:b7:a6:18:59:5e:8a:3f:
                    52:ba:5d:c2:45:e6:d2:df:95:36:8c:cc:ea:d4:89:
                    1e:37:89:5e:99:6a:41:07:99:3b:33:a7:8e:1c:5b:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:69:01:51:30:95:AF:36:E9:34:44:8B:36:01:32:9B:9B:E0:CF:A9
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:74:d2:ae:2f:21:6a:64:bc:39:7e:91:6e:74:c7:6c:71:ee:
         c6:91:07:9f:5a:a3:00:8d:3f:97:76:6b:31:6c:4e:9a:dc:a9:
         aa:30:f4:c5:ea:c0:60:d8:04:64:96:cb:fc:64:87:53:c5:d1:
         ff:e4:62:23:6c:ce:41:3e:16:12:57:71:0f:54:07:2c:bf:b1:
         fd:9f:0c:72:5d:0e:f9:b4:da:88:bb:93:cc:31:ae:8a:c0:34:
         88:cb:94:ee:8f:f1:55:f6:69:c5:67:98:5b:77:48:61:ee:be:
         21:9d:40:75:1d:8a:b0:e0:dc:8a:cc:23:04:07:c1:a3:23:69:
         ba:bb:7e:5e:fb:a0:4c:44:80:92:5a:1d:b5:35:1f:e2:78:15:
         ee:05:bd:6c:71:b4:23:1b:72:c8:c3:48:da:4a:9e:28:71:29:
         4f:2f:1f:fe:d4:27:6e:aa:b0:cf:2e:6a:3f:16:4f:7a:06:94:
         05:4b:32:f5:b5:e9:3a:1f:6d:7b:7d:fa:ad:39:fe:11:a0:46:
         82:0f:b6:66:33:8b:0b:9f:a5:31:0d:fe:e1:97:29:72:88:92:
         4d:4d:7d:57:23:aa:64:cd:37:0f:d1:d7:69:3f:7b:85:f9:96:
         d0:e6:65:b0:56:84:70:f8:79:10:05:60:92:fd:7e:83:5d:a1:
         ce:c6:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:22 2026 by rpki-client