Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          IaR5aeYhq3nkrSswNO0k+d9Ogtvd14Fb1qKM5BfG4Fg=
Subject key identifier:   CF:65:F2:93:32:A6:5A:FF:B1:4E:21:A3:F8:A0:D1:40:77:CE:62:09
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       019EBE112E216B5F7C7C45770605168EE318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          1076
Signing time:             Fri 12 Jun 2026 23:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:57 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: BFIyc/cWd04NdTLRNGRwRJPIejx0lIv2YhTEv2YGOU0=)
                          2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:2e:21:6b:5f:7c:7c:45:77:06:05:16:8e:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: Jun 12 23:00:57 2026 GMT
            Not After : Jun 13 23:00:57 2026 GMT
        Subject: CN=cf65f29332a65affb14e21a3f8a0d14077ce6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:b0:21:0c:75:ce:06:99:cc:51:1c:a4:98:
                    b6:1a:06:c6:0b:a7:97:89:f7:8b:bd:7e:88:49:54:
                    19:99:48:9d:5e:ce:a6:c5:a4:ec:06:8d:a9:65:36:
                    3b:e3:dc:67:9e:0c:8b:74:2c:46:1a:20:3d:2d:06:
                    dc:48:85:2f:5e:1f:84:dd:93:e1:e3:11:1a:dd:0f:
                    14:98:ce:11:09:80:47:18:b7:b2:d2:9d:3a:85:da:
                    a5:75:ce:0b:cc:1b:19:d8:73:be:47:90:8e:98:c5:
                    ed:f4:56:f5:6a:e9:13:ea:31:af:45:7f:3b:31:b7:
                    26:45:5b:46:6b:64:06:e9:02:b9:bf:a4:a1:45:75:
                    55:0a:a4:f9:5c:28:62:78:a3:f4:f9:61:69:4a:15:
                    a0:3b:4d:d4:61:7d:68:d5:ab:95:d4:65:ec:a5:4f:
                    a7:a9:25:ce:4f:a2:cb:50:b5:96:64:a4:4a:eb:4d:
                    98:3d:5f:51:67:25:bc:ce:d6:e9:70:d4:f0:a8:c8:
                    2b:34:1f:96:ed:2f:69:fe:11:78:3f:72:4a:19:21:
                    85:25:16:d2:2e:70:e7:13:0d:af:3a:d5:84:84:3e:
                    92:76:3a:e4:7b:27:36:2b:c2:f3:f6:ba:bf:72:7e:
                    5b:6c:ad:76:a9:50:13:c9:49:c4:ae:3a:21:51:4e:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:65:F2:93:32:A6:5A:FF:B1:4E:21:A3:F8:A0:D1:40:77:CE:62:09
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:54:01:f5:91:08:76:40:c0:a3:e8:d5:cf:a0:fa:7f:9b:
         35:e2:c6:ab:3a:8a:89:f9:dd:24:9c:ff:f1:6b:03:2a:a1:50:
         a4:b9:2f:83:d5:96:5a:2b:d2:0b:c2:de:2e:0c:d5:bb:ab:68:
         1d:6b:5d:a2:06:c7:e6:82:2c:cf:9e:5f:8b:9a:81:ec:f1:0e:
         c1:d1:9a:d2:90:7c:fa:83:ed:d3:e6:60:f5:fe:77:ef:59:e9:
         ba:53:06:b5:c7:ea:29:bb:32:32:57:69:c3:0c:05:5f:6a:10:
         69:7a:0d:e3:2a:f6:17:63:02:9c:d8:1c:a6:b2:4e:05:06:8d:
         63:7e:92:be:eb:00:02:99:de:13:94:55:91:39:5d:cf:c2:d6:
         78:30:f8:d8:ff:cb:90:af:42:60:79:96:bb:49:b2:70:36:d8:
         1d:be:0c:5f:6b:2b:2b:9e:ec:43:38:12:9a:5c:36:4a:19:9c:
         dc:9f:d4:c4:a6:26:cb:7b:0f:28:4b:93:13:95:2f:6d:7d:4c:
         e2:b8:51:e8:a4:80:bb:81:23:53:97:f4:6c:8d:b1:b2:9d:d2:
         ab:fb:87:93:51:5d:83:26:e6:bd:2f:ae:39:89:ca:1e:ef:45:
         11:2f:ab:17:43:f0:b2:c4:78:0a:88:c3:e6:bd:d9:55:e7:82:
         83:54:51:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ES4ha198fEV3BgUWjuMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1
ZGRlMGEwHhcNMjYwNjEyMjMwMDU3WhcNMjYwNjEzMjMwMDU3WjAzMTEwLwYDVQQD
EyhjZjY1ZjI5MzMyYTY1YWZmYjE0ZTIxYTNmOGEwZDE0MDc3Y2U2MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIqwIQx1zgaZzFEcpJi2GgbGC6eX
ifeLvX6ISVQZmUidXs6mxaTsBo2pZTY749xnngyLdCxGGiA9LQbcSIUvXh+E3ZPh
4xEa3Q8UmM4RCYBHGLey0p06hdqldc4LzBsZ2HO+R5COmMXt9Fb1aukT6jGvRX87
MbcmRVtGa2QG6QK5v6ShRXVVCqT5XChieKP0+WFpShWgO03UYX1o1auV1GXspU+n
qSXOT6LLULWWZKRK602YPV9RZyW8ztbpcNTwqMgrNB+W7S9p/hF4P3JKGSGFJRbS
LnDnEw2vOtWEhD6Sdjrkeyc2K8Lz9rq/cn5bbK12qVATyUnErjohUU6RoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9l8pMyplr/sU4ho/ig0UB3zmIJMB8GA1UdIwQY
MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct
M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5
LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRBUAfWR
CHZAwKPo1c+g+n+bNeLGqzqKifndJJz/8WsDKqFQpLkvg9WWWivSC8LeLgzVu6to
HWtdogbH5oIsz55fi5qB7PEOwdGa0pB8+oPt0+Zg9f5371npulMGtcfqKbsyMldp
wwwFX2oQaXoN4yr2F2MCnNgcprJOBQaNY36SvusAApneE5RVkTldz8LWeDD42P/L
kK9CYHmWu0mycDbYHb4MX2srK57sQzgSmlw2Shmc3J/UxKYmy3sPKEuTE5UvbX1M
4rhR6KSAu4EjU5f0bI2xsp3Sq/uHk1FdgybmvS+uOYnKHu9FES+rF0PwssR4CojD
5r3ZVeeCg1RRLg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:25 2026 by rpki-client