Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File:                     bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier:          vhMGjEvadN4rY0leYVTByFYhzperCczxX8i9nXSBwjs=
Subject key identifier:   2B:45:5C:9E:69:B8:16:63:63:7C:51:20:0C:63:6E:0B:52:47:19:69
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer:       /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial:       019EC148AEE14B6F27B799DF760460DB85E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number:          0616
Signing time:             Sat 13 Jun 2026 14:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:26 +0000
Files and hashes:         1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
                          2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: dH+sLCKKtPzzfctaq3bJUgKEZIxBdK6k8Jbep7iytxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:ae:e1:4b:6f:27:b7:99:df:76:04:60:db:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
        Validity
            Not Before: Jun 13 14:00:26 2026 GMT
            Not After : Jun 14 14:00:26 2026 GMT
        Subject: CN=2b455c9e69b81663637c51200c636e0b52471969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:77:5d:29:cc:3f:bd:9c:3d:b6:a6:30:dc:
                    f5:de:fd:31:79:7d:d6:c1:de:ae:31:31:32:d9:3a:
                    55:45:4b:3a:81:ed:9d:eb:ef:e6:56:c2:35:e0:a2:
                    46:70:78:f8:9c:19:79:e6:30:f9:09:e3:3e:a5:17:
                    dd:b5:5a:27:eb:4a:f5:ce:4c:a7:48:09:83:6b:3f:
                    c9:7f:6d:32:5b:e5:db:f8:2f:41:02:e5:bf:9f:ef:
                    13:23:da:cc:de:ce:32:21:cb:a4:29:bf:ee:94:55:
                    d2:57:1b:c1:a6:ba:21:cb:ae:22:f5:91:41:2a:95:
                    cd:3a:fb:40:8d:c8:5a:c0:d6:84:bc:fc:40:48:30:
                    b7:fc:be:d3:17:a7:66:df:d2:f8:df:80:a8:89:ba:
                    b5:30:18:75:e6:51:1d:8f:f2:16:2f:66:28:88:f3:
                    2a:2b:da:e2:10:43:dd:0c:49:ab:06:65:74:09:97:
                    dc:ae:ae:61:82:43:dc:15:b2:76:a3:39:27:89:83:
                    02:05:76:ae:56:54:85:66:ce:18:ca:9e:ca:60:30:
                    e7:7e:61:24:16:20:e9:74:98:fc:30:76:0f:f7:3c:
                    35:bd:6b:0b:cd:75:fb:1b:32:8e:59:db:f7:1c:c4:
                    2f:ac:7f:09:c5:6c:de:3d:ff:42:c8:e1:a3:75:47:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:5C:9E:69:B8:16:63:63:7C:51:20:0C:63:6E:0B:52:47:19:69
            X509v3 Authority Key Identifier:
                keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:96:cf:42:00:de:08:df:a6:43:dd:41:97:7a:30:8f:0b:a6:
         39:d3:36:6d:f3:a8:f2:20:99:af:87:37:29:03:23:fc:e2:fb:
         8e:1e:43:d6:e7:f3:47:32:86:b5:02:61:98:8d:1a:96:88:fa:
         a3:95:8f:b2:2a:46:71:9a:3c:59:94:6e:3c:d8:39:d5:7d:95:
         b6:08:d5:5b:9f:4e:06:aa:85:e5:de:c4:ed:8c:71:59:4b:6f:
         39:bc:2f:a3:cd:02:20:17:80:eb:47:9b:39:20:dc:41:09:d3:
         65:19:ef:9f:aa:19:53:8f:a8:44:8c:99:1c:b2:d2:c5:9e:01:
         27:d4:49:28:d0:d9:e8:3d:8d:b7:0a:3a:6e:54:4a:81:8c:eb:
         5b:fc:45:9b:4f:0e:cb:65:26:5d:5a:b2:f7:a9:d6:e8:9a:b3:
         d0:a4:0b:ef:03:85:ba:8a:67:83:2a:43:95:22:4e:d6:15:a6:
         b2:83:03:0f:78:ed:69:ba:24:a5:86:53:a4:fe:a0:67:8e:31:
         92:74:f2:4c:1f:f0:bf:c2:91:4a:fb:0f:30:50:4a:e3:88:77:
         03:87:cf:9c:ea:d2:6c:d9:58:87:95:e7:44:2e:56:2c:40:e9:
         e9:bd:df:51:eb:26:b0:fd:7e:03:a3:a6:48:3e:d9:47:c2:82:
         76:47:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:25 2026 by rpki-client