Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          2fBa0nHnD0+XeR5rWcU+M80CntxufkmH8WG80aY9M2s=
Subject key identifier:   A7:34:88:4F:C9:F1:ED:4D:B2:FC:24:6C:88:D5:3E:56:3E:C6:E6:0F
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       019ED386ED5EEF5EC4BDC3D6D4CE740E7C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          1964
Signing time:             Wed 17 Jun 2026 03:01:35 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:35 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:35 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: Yc0AEVcMmybNA39OPr0zUMPwXHgvtzcNXNaoqwZ55W0=)
                          2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:ed:5e:ef:5e:c4:bd:c3:d6:d4:ce:74:0e:7c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Jun 17 03:01:35 2026 GMT
            Not After : Jun 18 03:01:35 2026 GMT
        Subject: CN=a734884fc9f1ed4db2fc246c88d53e563ec6e60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:fa:86:4a:e2:36:cc:c2:13:f3:28:46:26:
                    36:98:8a:28:2c:f5:26:de:f0:2b:b6:ef:3d:a5:27:
                    9a:2b:07:26:20:98:16:8b:27:fa:14:41:24:6d:f7:
                    33:29:1b:df:95:58:4b:d1:f6:df:4a:79:52:74:62:
                    b3:b1:1b:d0:3d:a6:91:00:9b:d2:2a:be:5d:b1:2a:
                    67:49:27:06:19:8a:9e:9d:9d:f1:0a:ae:79:c4:91:
                    56:b4:e7:04:df:b9:a7:69:12:14:fc:1a:fb:5a:44:
                    f4:0a:8c:63:f6:c6:15:70:21:6c:9b:58:0e:ec:3a:
                    1d:27:f3:0c:36:72:3a:65:b6:0c:be:16:88:b5:dc:
                    6f:57:d2:2c:c5:8e:4b:8c:0b:91:9a:0e:44:26:2f:
                    ee:55:69:d2:e2:13:a1:3c:c7:1f:9a:b9:eb:65:3c:
                    7d:a5:1a:3d:6b:3a:0a:c0:22:78:83:c0:03:76:94:
                    bb:a3:e1:e4:3c:7e:92:22:dd:28:d6:7b:5d:c4:9a:
                    cc:9f:fe:35:e8:73:eb:a9:6c:0e:82:1e:a1:d1:91:
                    6b:cd:91:3e:f7:27:c5:50:8f:1e:cf:0c:13:5c:ef:
                    2f:41:e0:08:a9:d5:31:6d:d0:07:7f:e1:05:c0:8b:
                    81:57:ba:37:ee:d4:78:54:0b:58:7e:ab:a7:b0:9d:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:34:88:4F:C9:F1:ED:4D:B2:FC:24:6C:88:D5:3E:56:3E:C6:E6:0F
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:0c:57:f5:1f:d5:01:f9:47:94:7e:d5:76:81:e2:b2:ea:
         2c:34:7c:8a:d8:23:18:81:2a:00:b6:e2:54:ab:61:bd:23:a5:
         30:53:3e:30:c5:1d:e1:93:1a:7b:c2:17:93:83:59:34:37:5f:
         52:d7:d7:9f:41:84:c3:94:f9:a0:e9:e4:78:bc:00:e7:cb:2e:
         ad:95:c8:47:36:40:4f:35:76:6d:d4:63:fb:11:16:55:7d:0b:
         19:c6:07:08:dc:fe:8e:a0:b0:b1:07:b8:9b:b7:af:f5:de:db:
         4c:e5:d8:b6:05:8f:c9:2c:b1:be:e3:5c:c7:cb:7e:cc:52:53:
         b4:82:e4:ce:37:e6:ec:1b:61:1f:cf:4c:94:6b:80:0a:5d:b1:
         6e:5b:6b:9e:1f:74:77:1d:83:ff:74:6a:9b:23:d2:41:d1:19:
         07:df:b6:86:b9:e8:b3:66:e6:14:7b:71:1b:e3:f1:2d:f7:2c:
         32:a7:c6:4a:35:ee:56:2b:a2:1f:f1:88:ef:dc:33:1d:7e:c2:
         54:9a:b4:66:c3:c5:00:ce:40:c2:5e:e6:79:85:1d:5f:67:7d:
         55:26:9f:63:de:41:d4:7c:4b:88:67:d7:22:99:5d:36:bb:50:
         c4:7b:07:e8:d7:d4:d7:ac:b7:aa:0d:42:6e:d9:02:3b:4a:9d:
         ae:6e:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:56:58 2026 by rpki-client