Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File:                     BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier:          WiyUc3J/o6Tjnd54WxKjOROwd1EgKDmvSuXYcIVW7KY=
Subject key identifier:   3E:E9:5A:04:18:81:FB:01:C5:61:5D:CA:24:88:A9:FF:6F:96:57:BF
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer:       /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial:       019EBFC8791F72B0190CA98A61989F05DB54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number:          1634
Signing time:             Sat 13 Jun 2026 07:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:46 +0000
Files and hashes:         1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: 4S8Y7Ttv62ndiDyJlOzxj7DvK/5O+INtQFPLhQylU8M=)
                          2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:79:1f:72:b0:19:0c:a9:8a:61:98:9f:05:db:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
        Validity
            Not Before: Jun 13 07:00:46 2026 GMT
            Not After : Jun 14 07:00:46 2026 GMT
        Subject: CN=3ee95a041881fb01c5615dca2488a9ff6f9657bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:5b:13:1e:ea:2d:4c:81:f3:e6:6e:55:1c:
                    05:2a:0f:14:b8:ff:f8:30:9a:6b:37:89:4b:cf:ee:
                    54:01:91:64:f7:9d:4c:f8:2f:e7:7a:ce:47:e4:9b:
                    bf:01:b2:98:c9:56:d9:2d:b1:7c:76:af:3f:ea:58:
                    e4:6a:bc:1a:9f:2f:31:66:23:c0:e7:c1:89:18:05:
                    d7:3c:40:52:1c:0e:06:a1:89:6b:70:30:7d:6b:54:
                    a3:23:ec:eb:84:68:d3:9f:83:e4:b8:66:6d:09:c5:
                    8c:9e:80:7e:d5:5c:bb:06:21:26:2b:51:ea:49:d2:
                    1b:55:b1:0f:79:51:57:a2:78:89:e9:8f:6c:0e:a0:
                    2b:25:0a:1a:9e:98:c3:46:fb:92:dd:e3:6b:10:e8:
                    7d:d5:12:d4:b4:58:bd:e9:8c:39:a0:2a:86:8a:a0:
                    ea:00:4d:34:31:62:eb:be:4e:ee:3c:53:b7:19:17:
                    af:2f:8b:f8:00:d4:61:a8:b6:ac:75:2d:46:57:21:
                    05:23:c8:da:a0:85:08:b9:44:ab:48:db:b1:75:d0:
                    70:dd:61:ef:f7:1e:78:1f:c2:1e:b1:ea:76:ca:8a:
                    b9:31:5e:d7:42:e5:c3:4f:35:2a:f6:a0:f2:af:d6:
                    03:7f:c0:5d:f3:f9:31:d1:8e:18:92:1e:07:57:81:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E9:5A:04:18:81:FB:01:C5:61:5D:CA:24:88:A9:FF:6F:96:57:BF
            X509v3 Authority Key Identifier:
                keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:ec:34:76:79:9b:a6:18:e8:58:2f:f2:cd:13:7d:93:f8:
         bd:eb:1b:6b:15:b0:57:65:fa:6e:61:0b:8f:3f:17:42:7f:56:
         d5:45:4d:f9:9b:77:48:27:91:bc:1b:81:38:c6:65:08:bc:2f:
         cb:7f:7f:45:2f:54:5b:11:4f:01:b4:65:a2:a8:25:5d:40:e3:
         81:7b:fb:b3:14:61:bd:27:54:8f:cd:6f:2f:4b:c3:55:98:d7:
         8e:df:e4:b3:05:d5:78:9c:10:5f:94:3a:ca:75:3a:30:bd:b8:
         f3:66:cd:00:80:81:8c:13:dc:ba:02:da:f8:a7:4c:86:27:18:
         17:fb:1e:c5:8b:68:07:85:d0:42:e3:80:3a:74:69:e0:d6:f0:
         36:c7:b2:e6:63:63:97:c4:76:55:5d:59:9e:b4:2d:9f:1e:05:
         f9:6a:5c:ac:80:45:7d:ed:fc:91:b0:37:55:19:f1:22:8b:82:
         14:77:26:e7:b2:2e:02:ca:19:ab:a8:3a:fa:0d:b0:c1:2e:0d:
         c2:2d:1a:57:3f:7e:16:3b:5c:93:67:bd:32:bd:6b:b9:25:36:
         ac:78:30:ef:84:dc:5b:84:6b:c3:51:31:36:99:3c:ce:f5:ad:
         45:e9:a5:03:86:56:93:12:87:4a:95:5e:b7:b6:96:ab:08:ea:
         32:e4:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:56 2026 by rpki-client