Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          84qNWaxNJtjLsR/5SfZ+Fi3nt2djriH3p+VHvIxgznQ=
Subject key identifier:   BF:5C:CA:86:3C:0A:B6:35:E7:B8:B1:5F:BC:3B:D4:18:FB:0D:40:B8
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019EBDA32CB1F0491F5A24DB788B3852615E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          106B
Signing time:             Fri 12 Jun 2026 21:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:48 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: m3aVz0sv8i68kQaa7xaQcvInZPBaH57oSSGfDdcDKbA=)
                          2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a3:2c:b1:f0:49:1f:5a:24:db:78:8b:38:52:61:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Jun 12 21:00:48 2026 GMT
            Not After : Jun 13 21:00:48 2026 GMT
        Subject: CN=bf5cca863c0ab635e7b8b15fbc3bd418fb0d40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:74:4a:57:33:50:e3:dd:78:70:35:c2:15:
                    3f:aa:c4:c3:46:97:6e:f4:8a:4a:e6:36:f6:cb:eb:
                    0e:79:52:df:fd:6c:eb:a7:08:e5:36:81:bd:96:78:
                    51:6e:13:f9:dc:30:ee:32:ea:0e:8f:38:0f:5f:05:
                    45:a6:a9:bb:91:42:76:cd:7c:4e:04:61:1f:6b:fa:
                    dd:bc:d9:59:fe:db:92:42:69:f5:95:09:1b:c2:34:
                    83:2e:f6:a3:fa:ef:7d:9f:42:ee:52:a8:a7:c4:4a:
                    b5:63:dc:0c:55:92:b8:19:ff:f7:cc:8a:5e:14:1a:
                    9b:a4:0e:53:07:8b:15:f9:02:d1:cc:4b:a6:b1:a3:
                    72:4c:06:6c:22:3c:a8:6d:08:d6:c3:12:47:d6:1a:
                    01:ec:68:6d:ae:b7:d0:d4:6f:20:c8:5b:af:1c:59:
                    8f:e4:19:e7:e7:d7:48:26:22:63:e8:2d:a1:99:15:
                    32:b0:e4:66:eb:5c:35:a8:3a:a8:68:ba:1f:11:ae:
                    fc:07:21:97:ac:c5:85:19:16:f9:f7:cc:f0:db:6e:
                    4a:bc:72:a2:24:ca:a6:d9:3d:e3:93:da:d7:93:bd:
                    2e:19:f4:dc:86:3a:ba:74:7e:e1:cc:eb:cf:28:03:
                    e0:a7:82:a3:a3:f3:52:7c:1f:43:97:be:26:c2:1e:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:CA:86:3C:0A:B6:35:E7:B8:B1:5F:BC:3B:D4:18:FB:0D:40:B8
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:61:b9:d4:1c:f8:65:fd:47:55:86:d2:9b:69:af:46:c5:f8:
         af:a5:93:2a:fc:05:f5:ab:b5:7d:12:ae:36:cd:94:ed:50:bb:
         d8:a6:9b:c4:13:0e:5e:96:be:39:6d:01:f1:a3:3a:c7:03:15:
         6c:6a:0d:8b:e5:4a:c7:36:dd:23:01:55:6a:ff:7f:ac:a2:07:
         a8:ce:07:f4:67:79:e6:a1:e6:ba:70:8a:29:cd:b6:dd:a3:a1:
         d3:f0:96:5c:f9:1b:a6:ff:07:2f:bb:f1:99:ef:4a:c9:83:5c:
         84:79:28:14:4f:b8:af:6b:06:24:67:f8:48:b0:b8:b0:f0:20:
         61:df:bf:55:b7:a6:00:e9:f4:06:53:b7:a5:4d:29:17:eb:3f:
         85:a0:fa:29:f0:65:07:13:be:7e:45:43:7c:e2:0d:8a:0b:4d:
         03:8a:26:ae:da:7c:ae:18:64:02:3c:ae:70:26:64:46:7f:59:
         f0:a3:89:5c:29:52:9b:fd:3c:03:3a:b4:89:6f:a0:23:a9:6c:
         40:bc:05:e7:87:f7:dc:5c:07:fd:fe:83:b5:82:cc:ea:d5:a0:
         cf:95:ff:ce:61:9e:f4:bc:23:b4:d8:b5:58:f2:5d:c0:4b:7f:
         04:3a:05:26:36:60:08:d2:d9:d9:31:40:f9:96:f5:2e:c5:02:
         9e:d9:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client