Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File:                     BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier:          rZskPJ3EVQo4qfrTGTxsXlTWh5cnj1nO7kwYF/ijGAE=
Subject key identifier:   D2:2E:5B:95:38:02:98:4E:27:56:3C:97:AA:BE:53:46:1D:86:E8:CA
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer:       /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial:       019EBDA2BF766A3BEB41D43BB66069170558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 21:00:19 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:19 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:19 +0000
Files and hashes:         1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: JJohsvrzrDmYTcKVkkrdL6Vi/CikpUAQWrjLRL3Voik=)
                          2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:bf:76:6a:3b:eb:41:d4:3b:b6:60:69:17:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
        Validity
            Not Before: Jun 12 21:00:19 2026 GMT
            Not After : Jun 13 21:00:19 2026 GMT
        Subject: CN=d22e5b953802984e27563c97aabe53461d86e8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:1e:f2:6f:1e:1d:9f:fa:3f:af:62:b8:50:
                    c1:46:1f:cf:f1:47:f8:6b:2e:43:bf:2e:b5:55:08:
                    b3:2c:95:76:23:5b:0f:af:25:29:aa:9f:09:d8:bd:
                    fc:8d:4a:a8:2e:c9:d0:fc:a4:a3:45:d9:13:a6:ff:
                    01:dc:1b:b4:f0:e3:d1:03:ea:94:d6:13:59:b9:72:
                    56:db:5d:b2:18:5a:2d:b0:d2:3c:7e:c0:85:26:8a:
                    27:d6:08:2c:32:19:b8:9b:b6:c1:1e:f5:48:84:4c:
                    21:fe:ef:16:3f:97:8d:7a:5f:d6:d4:4a:15:e0:62:
                    6e:d3:34:47:35:8b:ec:a8:5a:8c:af:95:d8:a1:49:
                    05:69:61:d6:13:ac:87:9c:1f:d0:d7:1a:0c:b7:12:
                    05:d3:ec:d8:ab:c5:19:1a:db:df:f3:70:46:3c:9e:
                    6a:8d:d9:19:98:7f:83:53:2f:1e:d3:63:41:47:66:
                    4f:18:95:bf:84:24:9e:9e:3d:3c:85:aa:61:e2:8c:
                    02:90:14:fa:07:ef:f9:d1:fb:42:b9:da:68:04:52:
                    ec:92:55:3d:98:5c:f5:9a:b1:d3:0c:8d:16:98:04:
                    0e:ea:b2:ab:ce:6f:0b:40:c3:5e:de:56:4c:2c:43:
                    0c:e7:1a:51:f7:3e:f6:dd:8f:66:cd:6a:e8:3a:95:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:5B:95:38:02:98:4E:27:56:3C:97:AA:BE:53:46:1D:86:E8:CA
            X509v3 Authority Key Identifier:
                keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:70:72:f7:f6:8f:c2:e7:c4:be:0a:fe:43:4f:af:b6:47:ea:
         0f:63:f8:6a:62:c7:e8:e7:8b:a8:f6:31:c5:f2:44:7a:81:20:
         d0:cd:59:6a:98:07:50:fa:00:27:65:1d:14:ab:a2:db:88:bb:
         9e:fe:02:d2:89:6f:93:15:c6:6a:fa:6f:96:bb:0c:d4:9c:cb:
         5c:fa:10:90:6c:43:db:76:61:75:e3:8e:88:d0:de:48:cf:4b:
         8a:ce:56:c3:46:19:f4:96:64:2c:47:3a:64:92:6a:63:9e:3d:
         87:6d:02:a2:21:b7:38:4b:04:0d:23:8e:2b:67:5c:27:54:90:
         c7:75:47:15:d1:fe:af:03:ea:b0:14:0a:b3:f6:be:08:e5:24:
         3d:d8:08:ba:bd:2c:3a:7a:2d:fb:21:4d:ce:c8:63:2c:66:9c:
         b0:38:8c:1c:23:51:10:a1:5a:67:cb:d1:c0:a8:74:c1:76:e2:
         84:43:08:c0:27:c1:37:3b:60:ec:10:68:b9:d4:49:3f:65:bf:
         f2:f4:42:9a:c7:ba:09:58:fd:8a:5c:7a:4a:e4:10:37:73:61:
         7c:b5:cb:e4:ac:87:fc:b0:4b:df:1c:80:a5:59:fc:09:9e:a9:
         f7:05:cd:97:96:e5:f9:a7:bc:d9:4a:05:e3:20:f6:24:91:59:
         33:31:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:31 2026 by rpki-client