Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          D8+47Luces3D5Lt1ChU5Bw7Dv/xhbjtYDWGIsELgUcw=
Subject key identifier:   7A:34:00:89:9B:29:35:E2:2E:50:CE:D1:2F:37:E7:55:FB:5F:A1:FB
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       019EBDA2C4FD3D6ECD28DF3E718D54B63588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          1393
Signing time:             Fri 12 Jun 2026 21:00:21 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:21 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:21 +0000
Files and hashes:         1: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: CnvSVmtaNitvi92N3JHYfdRQQk6/TWB2e3MaVNHJ13I=)
                          2: DAk9scQvo5DMV_VlSztOmztoUsk.roa (hash: LbZH4yFltHGub7MlaORytCaFKFzBncecl1qi4I5mXh8=)
                          3: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (hash: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY=)
                          4: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (hash: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk=)
                          5: wMacMmZmC6K_Z3E-FK6eIoDMt20.roa (hash: hMurJd6LHvL4x1id8j/j+B6VkNrcZEazX5VFQz1CkR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:c4:fd:3d:6e:cd:28:df:3e:71:8d:54:b6:35:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Jun 12 21:00:21 2026 GMT
            Not After : Jun 13 21:00:21 2026 GMT
        Subject: CN=7a3400899b2935e22e50ced12f37e755fb5fa1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:a0:42:6a:08:71:e7:3b:bb:c2:f5:b3:59:
                    19:69:a0:42:97:92:93:b0:f4:03:d8:a0:17:79:dd:
                    ee:6a:77:49:fd:c8:7d:9c:95:b0:bb:42:65:4d:e2:
                    75:5e:62:f6:59:0b:75:5e:53:c9:dc:66:31:3d:81:
                    56:15:09:32:da:90:f0:0a:3f:00:50:09:41:4b:da:
                    6d:20:36:6f:6b:c1:2d:5d:70:4d:9b:87:5e:54:cd:
                    a5:6f:c8:dc:69:40:06:39:fe:a4:9b:24:20:16:6f:
                    f4:2f:ff:0c:f5:56:1e:b8:88:0a:e4:51:30:de:1b:
                    1b:7a:1a:9c:0c:3d:8d:f1:d7:91:15:1f:a4:23:c3:
                    29:2e:33:04:e8:25:f0:b3:d6:68:fc:52:0a:69:9d:
                    3b:b5:69:86:19:e0:3b:8b:b2:3f:30:a5:a1:c2:0d:
                    19:3c:54:8f:b4:7c:77:87:dd:a4:a2:6c:d5:cd:43:
                    b0:65:58:88:60:30:ba:98:01:00:68:9f:5b:7c:78:
                    ee:6d:1c:4a:79:1e:64:5a:f2:55:7d:48:6c:98:bc:
                    f8:60:c8:ba:46:f4:63:45:06:5a:6b:16:e3:ed:8b:
                    dc:62:7f:25:c7:e6:e6:51:09:0f:30:75:ac:7d:cf:
                    40:7a:df:71:6e:e2:3a:6c:c3:59:f8:f4:c8:39:43:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:00:89:9B:29:35:E2:2E:50:CE:D1:2F:37:E7:55:FB:5F:A1:FB
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:dd:c4:ba:25:01:ed:a6:60:20:68:c4:34:9b:10:f1:2f:
         ee:1d:98:1c:a2:78:5e:53:02:6b:81:5c:78:8b:18:20:cc:8c:
         9c:e9:b2:79:b8:e7:c8:3e:68:8a:22:cf:ea:95:f8:dc:9b:98:
         56:0c:66:96:31:b3:b9:0b:11:e6:0b:eb:d8:aa:4b:03:23:55:
         d4:22:e7:d8:b6:73:1a:ce:45:bd:f2:16:09:4c:3a:8f:c5:e1:
         a4:a1:70:2e:bf:56:fb:69:a7:17:d5:f6:f7:db:2c:ea:b1:a8:
         9d:8e:0c:8f:8a:d9:66:b1:54:50:55:70:5a:2a:8b:45:c7:12:
         71:dc:fa:6e:c4:d0:92:a3:29:e9:5e:2e:55:8d:b9:65:91:f3:
         1d:fc:05:9b:d0:ad:57:55:09:23:7d:40:f1:fe:e4:9d:da:7b:
         7b:18:42:bb:9f:f8:07:0e:53:1a:ce:f9:0a:29:86:9a:66:fe:
         1a:a4:4c:69:0f:1b:60:1e:37:5e:f8:22:89:80:cd:30:8f:65:
         90:76:ef:52:2d:ec:cf:e7:7f:96:ca:a7:71:b9:45:e9:b7:f5:
         fe:9e:3b:32:a3:d4:c4:a2:80:d1:4c:4c:ca:57:4f:46:84:dc:
         c0:32:74:ba:e8:95:c0:3a:c4:18:53:d1:d6:21:96:de:94:96:
         fe:01:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:43 2026 by rpki-client