Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File:                     BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier:          zy1JMJpr2BLBXXTYY0FvO+t3FmZD92ZSTCIwUVB3a4k=
Subject key identifier:   EC:4A:51:85:35:16:66:59:96:C6:F6:BA:5D:68:C9:48:91:A0:4D:35
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer:       /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial:       019EBE11044877CDDB2DC3ECE265CB0F373A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number:          061C
Signing time:             Fri 12 Jun 2026 23:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:46 +0000
Files and hashes:         1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: afTpdtk6W0biqvkO718pGk11V7wVtbsIQf2+KJvj5is=)
                          2: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (hash: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:04:48:77:cd:db:2d:c3:ec:e2:65:cb:0f:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
        Validity
            Not Before: Jun 12 23:00:46 2026 GMT
            Not After : Jun 13 23:00:46 2026 GMT
        Subject: CN=ec4a51853516665996c6f6ba5d68c94891a04d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:25:df:51:18:3a:f0:e4:b9:e1:cf:2f:8c:
                    e9:2e:98:4a:8a:ad:27:f3:a0:b4:92:53:8a:8b:38:
                    f6:1f:89:64:2a:90:0f:cc:1c:55:31:b9:a3:56:05:
                    ba:e8:98:d7:13:38:fc:8b:8d:f5:d0:9b:a1:6b:29:
                    d6:89:ec:cc:6d:eb:2d:ec:33:22:3e:e4:a2:d2:3b:
                    75:9b:d8:ae:35:f1:8f:38:76:52:1c:17:8d:ee:9f:
                    9c:75:65:58:10:09:3e:a9:e2:cb:05:c9:98:47:f6:
                    e7:ae:0b:4e:e1:fc:c7:62:2d:20:15:65:2c:54:f0:
                    8c:70:1f:05:d8:8e:c6:bf:6b:bc:a3:ba:b3:31:26:
                    84:43:4e:13:3f:2f:55:d7:f3:85:c1:34:f4:c5:96:
                    e4:0b:13:8c:45:58:a1:9a:9a:1f:2b:58:f9:0e:62:
                    d6:d5:bd:da:80:43:5d:52:4b:8a:7f:f8:20:60:0f:
                    8f:d3:23:a8:ca:c2:4e:5d:c6:a6:97:8b:69:c3:4a:
                    dd:3c:b0:f5:8f:c1:71:7c:33:54:2c:ee:f9:83:74:
                    e7:fd:bc:bc:66:22:9f:61:2e:de:f5:e0:7f:d3:d6:
                    3b:4d:2d:d8:47:1d:0a:42:38:ee:a5:fa:0c:df:be:
                    0f:21:e3:d8:ef:f4:3b:af:65:2c:07:ee:37:53:05:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:51:85:35:16:66:59:96:C6:F6:BA:5D:68:C9:48:91:A0:4D:35
            X509v3 Authority Key Identifier:
                keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:06:41:2e:25:45:76:eb:c8:7a:dd:4f:78:37:05:c6:ab:c7:
         a1:16:4a:54:bc:cb:a4:05:64:3e:92:38:23:a9:a3:34:3c:6f:
         91:31:ab:3c:0c:ae:59:d8:28:f6:04:fc:3d:26:52:5a:b7:a5:
         2a:fc:ae:db:12:d7:70:48:a6:54:24:b8:73:22:b1:9b:b1:65:
         92:ca:af:39:82:de:e4:6e:62:d0:47:05:e3:c9:d5:67:1e:55:
         00:ed:68:69:2e:ab:9d:1d:bb:8b:7b:81:b9:24:2d:83:26:9f:
         da:f1:b8:3a:d3:2c:fa:b6:51:e5:f3:34:97:4c:86:e3:3f:71:
         bc:57:e8:3a:b7:ed:71:b2:58:f5:d1:85:3d:5a:f5:3a:0c:b1:
         aa:03:f9:a2:32:b6:e7:5e:ab:48:df:d1:22:61:31:70:15:8a:
         e8:43:0a:ef:93:1c:b8:33:70:d3:fd:c7:22:5b:06:e4:d6:3c:
         23:bb:32:e5:49:05:f9:35:b1:5a:65:67:8d:ce:f4:5e:d8:61:
         e9:51:2c:4e:6a:3d:eb:62:bf:36:3c:b2:48:29:9a:6d:3c:29:
         b9:13:25:e5:4f:6c:0c:8e:78:65:5f:3a:e9:9b:c2:11:65:12:
         c6:ba:d6:b6:6f:08:f2:ea:5a:9e:7d:2b:7b:9e:db:25:4d:48:
         eb:9a:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:40 2026 by rpki-client