Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File:                     bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier:          0MQZq6kZVjoxRzuLWpW6tEbaFaI1PMRWqEMh7VjZ0g4=
Subject key identifier:   C9:AE:B4:7C:8B:A2:99:C9:8C:B5:1B:C2:0F:AB:27:F4:B2:B6:89:36
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer:       /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial:       019EC1800C07C76C53AEE1371058EB90397D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 15:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:54 +0000
Files and hashes:         1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
                          2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: Y9nK5fhQb6VjdRaXDSiBsuCMtOWxsIHXG739z3H7iGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:0c:07:c7:6c:53:ae:e1:37:10:58:eb:90:39:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
        Validity
            Not Before: Jun 13 15:00:54 2026 GMT
            Not After : Jun 14 15:00:54 2026 GMT
        Subject: CN=c9aeb47c8ba299c98cb51bc20fab27f4b2b68936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:dc:52:b8:70:74:9e:9a:a5:ef:cf:fc:cb:
                    bf:b6:cf:0e:f4:17:2e:70:1a:ae:b7:e3:93:d2:64:
                    59:7c:c2:7e:a9:67:21:48:6b:94:1e:d6:80:54:84:
                    55:c0:d5:7d:a2:21:c1:aa:1e:a3:7b:d8:a6:f8:0f:
                    1b:ec:9d:8e:c4:fb:b6:79:9d:90:61:2f:30:1f:38:
                    36:4e:5f:2a:b1:1f:fb:e3:78:d5:15:a1:56:50:e2:
                    35:ee:90:8f:e6:b8:6b:d2:94:ee:02:41:63:1c:04:
                    94:46:58:53:5f:b4:a9:7d:18:14:4c:84:d4:bd:f8:
                    e0:e5:24:38:48:44:b7:29:7c:3d:1a:27:1c:d6:29:
                    de:0b:0a:3b:53:e4:2e:c8:59:72:3e:78:80:cc:d8:
                    10:7e:ed:a2:dc:a6:f7:36:c3:9b:6e:3f:c1:58:80:
                    19:ea:69:76:e3:8b:8f:0e:e4:60:ce:80:cb:07:01:
                    d1:d5:94:27:a4:bb:1b:c6:79:84:49:35:da:af:b1:
                    22:94:fd:6c:24:ff:c1:c1:81:a7:30:0b:9d:82:de:
                    cd:88:90:5d:64:24:dc:1f:c4:bf:5d:0c:09:bb:b3:
                    08:9b:dd:72:f6:5a:12:99:2b:d3:9b:82:0d:c1:d2:
                    a4:db:f9:b4:14:4d:68:77:17:6a:32:6a:4b:f1:23:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AE:B4:7C:8B:A2:99:C9:8C:B5:1B:C2:0F:AB:27:F4:B2:B6:89:36
            X509v3 Authority Key Identifier:
                keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b1:d8:23:0f:ad:c4:a3:fb:de:2e:18:f0:68:9e:ab:2f:85:
         b5:0b:30:8e:26:e3:83:bd:4a:e2:e6:44:77:b2:b6:83:f6:6b:
         16:7f:07:26:64:c5:de:26:17:61:bd:4f:cc:2e:71:d3:cc:ef:
         8f:05:3f:5e:9e:0d:f6:19:31:d7:6c:2d:d8:92:91:bd:7f:52:
         3a:21:5b:cb:e0:cc:77:53:2d:6e:47:3b:5f:e9:22:fc:7e:fe:
         6f:19:31:aa:19:83:45:f3:60:63:14:4b:c6:4d:f8:13:d0:07:
         f6:3f:0a:34:e3:24:e3:aa:77:08:32:56:d2:da:f4:55:77:82:
         1d:db:9b:72:45:6b:bf:26:b8:63:77:ce:4f:1d:74:d4:32:ee:
         bc:7e:b1:4d:b7:ff:11:d8:46:0c:7f:9c:81:6f:07:21:67:57:
         29:33:20:44:d2:a7:3e:78:a7:f5:55:cd:68:a2:01:f4:94:b7:
         b0:5e:34:36:52:ff:34:f0:3f:59:3e:58:33:ff:d1:d2:16:3c:
         2a:f5:03:da:98:7a:e4:c3:89:66:ca:e5:3d:bb:60:b0:85:5d:
         09:e1:d6:9d:73:28:e0:1c:d2:3d:52:53:95:94:1a:5c:01:f7:
         de:e3:cc:a2:c2:01:68:e4:00:c6:f0:65:2f:b7:2d:b9:31:88:
         9a:f2:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:57 2026 by rpki-client