Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          rkC+5W7Cs59QMkzNdSpCE2xE+TM5am5PhZGHUGnkLPg=
Subject key identifier:   CE:30:C9:16:06:B0:CB:86:9E:BD:5B:4C:72:A4:E6:8B:94:B1:96:FB
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       019EBE109146AEBFEECD350451B851EF1F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 23:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:17 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: Xgisx01NIzipVVUzHAMUIFX/vM/gEreq2eQhUHeS8K0=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:91:46:ae:bf:ee:cd:35:04:51:b8:51:ef:1f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Jun 12 23:00:17 2026 GMT
            Not After : Jun 13 23:00:17 2026 GMT
        Subject: CN=ce30c91606b0cb869ebd5b4c72a4e68b94b196fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:ca:a3:21:dc:09:86:42:32:3d:19:17:b5:
                    f1:69:e3:26:f3:09:45:7c:d1:8c:e3:8a:07:dd:f0:
                    46:d1:e1:45:4f:6a:16:63:88:82:97:3c:52:e3:54:
                    b2:2a:a3:c6:80:1c:07:5a:8d:ba:40:6e:40:6d:c3:
                    cb:05:ed:04:cf:5d:3f:71:fe:5c:86:cc:1a:bb:67:
                    12:df:b2:8c:2b:17:77:1b:71:df:7b:45:26:25:12:
                    4f:36:ea:3c:e6:1b:0d:7c:53:7a:cf:5b:2d:17:87:
                    07:fe:6c:4b:56:f7:78:f9:f4:a7:78:f2:e5:16:a3:
                    26:4c:05:62:61:3e:8b:45:af:84:8a:c9:39:18:e4:
                    07:d7:56:61:42:07:be:9e:09:23:05:60:24:a7:9c:
                    cf:41:c2:0e:d0:fc:1f:85:b6:c2:c2:1a:2a:19:36:
                    92:de:05:ef:ae:a6:cd:e6:ae:df:88:e9:22:94:5e:
                    d0:cc:3a:14:cd:23:cb:de:a7:f4:89:a0:c3:c3:d2:
                    f9:bc:e2:8d:4b:87:77:94:ba:1b:7c:88:98:06:52:
                    10:16:75:8e:4e:ed:dc:40:75:78:e9:4b:58:78:04:
                    68:51:ad:e5:c3:8d:c7:cc:69:43:0f:82:5d:a7:25:
                    3c:e6:9e:03:3e:2b:2d:63:68:4e:d7:40:f9:39:67:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:30:C9:16:06:B0:CB:86:9E:BD:5B:4C:72:A4:E6:8B:94:B1:96:FB
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:cd:50:f4:25:a5:07:ff:91:50:4f:c6:85:ae:58:cf:92:
         54:71:d0:af:d3:ef:30:e6:9b:a9:c3:8c:79:ed:0b:bf:19:0b:
         2f:2f:7a:07:36:be:62:f3:01:63:e2:dd:c8:c4:b4:9b:32:02:
         07:92:22:5a:50:d9:85:db:af:55:65:34:3d:bb:b8:6d:1a:b7:
         be:18:5a:9d:f9:7d:56:a1:78:de:d0:3c:39:57:fc:11:80:17:
         ee:60:8e:fb:db:38:bb:3d:14:6f:f2:b9:a7:64:53:cb:9b:7c:
         f1:74:41:00:d3:f0:d6:7c:9c:8a:e2:be:c0:26:26:94:f5:c8:
         54:12:03:6d:4a:c1:37:47:e4:1c:b5:55:e6:3e:58:f5:58:93:
         eb:0b:73:18:56:ce:73:97:1c:f2:d2:a6:20:4e:96:f1:cb:13:
         f1:9b:2b:02:94:72:98:7f:a8:ca:75:1b:a1:ad:39:da:55:8d:
         b4:b9:10:e3:27:b4:32:39:87:2b:09:e7:75:73:16:79:1e:9a:
         75:a7:ed:da:b6:67:52:70:1c:0a:00:66:0f:11:e3:26:41:dc:
         60:76:e3:76:67:6f:38:3a:bc:3c:6b:5b:24:cc:00:07:16:b5:
         0a:12:02:72:32:2b:2a:3f:82:87:1f:1b:36:c8:0f:e4:22:a7:
         13:0e:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:14 2026 by rpki-client