Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File:                     bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier:          dRIIilEN3kaoKubdudod7L0GOkdQo2uQeegQ8uwg/yk=
Subject key identifier:   DE:5C:D2:90:41:E9:E0:66:28:31:E6:70:3F:04:65:81:79:28:1B:BE
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer:       /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial:       019ED2742AFB93DEF5A27923E3931BAB2343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number:          18F7
Signing time:             Tue 16 Jun 2026 22:01:28 +0000
Manifest this update:     Tue 16 Jun 2026 22:01:28 +0000
Manifest next update:     Wed 17 Jun 2026 22:01:28 +0000
Files and hashes:         1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
                          2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: tsJXHCKYoYgaI7PirrEp7GjtzoCkgZAg28nZ+ZZS9SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:74:2a:fb:93:de:f5:a2:79:23:e3:93:1b:ab:23:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
        Validity
            Not Before: Jun 16 22:01:28 2026 GMT
            Not After : Jun 17 22:01:28 2026 GMT
        Subject: CN=de5cd29041e9e0662831e6703f04658179281bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:34:3a:30:b2:e3:01:d3:df:9a:5b:97:f9:
                    2f:5c:d9:77:89:d3:b2:a7:fb:1d:8a:18:f0:41:e6:
                    42:bc:95:36:87:5d:4a:a6:e0:00:7b:b2:2a:69:b0:
                    52:d1:f3:81:8f:f4:5f:07:7d:d6:86:ef:24:ac:ef:
                    1a:cb:7f:b8:f8:b5:9a:09:1b:1e:c5:34:8c:4c:e2:
                    bc:19:11:54:96:bb:5c:4d:dc:67:18:e2:1b:34:21:
                    5b:17:ea:a3:d4:5e:ce:fa:85:1a:11:75:d4:54:e1:
                    a8:81:2e:dd:48:3d:11:d3:05:81:83:1d:51:9b:bc:
                    56:9b:29:92:e6:4f:54:82:30:92:4e:9c:8a:2e:63:
                    6a:f5:6c:9d:5b:57:e5:fd:d2:d3:69:92:ed:e0:60:
                    33:65:e4:f8:7c:c8:40:0d:95:e9:53:84:d9:ed:d1:
                    27:1c:aa:99:e7:b2:15:04:f9:06:a3:94:8f:fa:c9:
                    e5:09:c1:05:e0:32:7d:87:fb:65:f3:9e:c5:f3:c5:
                    3f:d2:7c:96:bd:e9:67:ae:f5:d3:62:e0:16:6b:57:
                    2b:24:30:c5:e3:78:c0:17:1c:92:93:fe:fd:71:ff:
                    09:5e:91:99:6b:88:fe:68:9e:19:22:e2:d6:a1:e7:
                    66:ce:7c:18:8f:76:db:f3:9d:d1:af:ef:aa:f0:3b:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5C:D2:90:41:E9:E0:66:28:31:E6:70:3F:04:65:81:79:28:1B:BE
            X509v3 Authority Key Identifier:
                keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:50:9e:69:11:f1:81:1b:e4:b4:98:3f:63:2c:15:f9:75:cc:
         f7:cc:7d:d8:e7:20:43:8e:d8:91:45:1a:55:9c:ec:64:2d:7f:
         cf:5e:50:17:62:3b:78:f0:76:26:00:3f:9e:be:4f:e6:c9:b1:
         fb:47:04:f8:d1:6d:57:75:fa:09:bb:dd:9b:a5:de:3d:e0:e5:
         e6:ea:44:2c:a2:76:9d:34:5c:0a:72:e5:45:66:a3:5c:9d:43:
         38:fe:02:18:df:0b:e8:7e:d1:bf:1a:f8:49:4e:e7:f1:52:6f:
         20:91:3c:9b:4a:9f:c7:e4:63:86:34:b3:3e:1a:b8:23:2a:ac:
         8b:43:7f:d7:d1:21:ea:5d:48:6a:01:8a:56:62:22:57:02:96:
         22:c4:6d:cf:a4:fc:3b:75:85:ce:52:b6:f2:66:3f:2c:11:d2:
         e8:fc:00:f8:d6:f2:67:7c:ce:57:a2:4a:6b:19:07:38:49:e0:
         cd:ea:d8:5d:c8:73:08:68:93:d2:22:ee:d9:4f:34:81:12:fe:
         31:5e:c7:ff:01:d1:20:b2:e7:b1:65:86:bc:60:19:98:df:98:
         2b:b8:33:97:7c:cd:05:16:8b:93:ef:f5:e5:78:7f:6e:46:d6:
         2c:0b:a4:e1:94:96:ba:3e:d4:d5:70:e4:81:4c:18:87:01:a6:
         70:57:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:51:35 2026 by rpki-client