Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          uiA/sWLU94cNvtizFTTPzWHH8uzMFrkALRNkPF5qPL0=
Subject key identifier:   F3:8D:66:4D:24:9D:DA:88:51:A2:F2:73:47:59:4A:9C:FF:55:7D:72
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       019EBEEC8562FDBAAE84B6ECC0534E7DD7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0F49
Signing time:             Sat 13 Jun 2026 03:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:31 +0000
Files and hashes:         1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
                          2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: 4O37Yv1Ve1f0hkllYBawM5GfVyjyVOlufAkAAw3dpVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:85:62:fd:ba:ae:84:b6:ec:c0:53:4e:7d:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Jun 13 03:00:31 2026 GMT
            Not After : Jun 14 03:00:31 2026 GMT
        Subject: CN=f38d664d249dda8851a2f27347594a9cff557d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:cb:8c:ad:4f:8c:3a:18:15:26:6f:2e:b5:
                    f9:97:14:3a:41:5c:c7:af:21:90:be:97:96:f4:a4:
                    fe:93:81:97:a7:69:10:48:a4:c3:ff:34:27:e0:4c:
                    6d:82:68:22:09:a8:aa:bd:63:84:e0:0e:ac:4b:91:
                    d0:b9:21:d9:b1:78:db:54:e9:33:40:b2:da:b4:18:
                    6b:e2:9d:1a:48:4b:e2:4d:4e:f7:63:c0:ea:df:79:
                    35:a3:70:62:af:1e:64:76:60:22:61:a2:5b:3b:25:
                    be:55:90:d5:fc:e5:23:f5:41:1b:e5:36:52:d5:92:
                    0b:dd:50:af:28:c3:c4:b3:a9:af:e0:f1:4c:30:c1:
                    29:05:e9:10:b9:5b:6e:7c:97:d7:c3:72:b7:78:ee:
                    40:06:09:fc:bf:66:a0:c4:23:e2:08:e2:16:8e:60:
                    54:af:81:2a:09:89:5c:32:7d:39:2e:11:9a:35:55:
                    6e:77:83:21:d1:eb:8c:ae:8a:d2:d2:96:0c:68:18:
                    70:e8:34:b4:3b:7e:33:b4:df:0e:ad:93:48:02:3e:
                    75:ff:e3:ba:2d:28:7c:d4:9f:33:c4:5e:45:82:b8:
                    c5:82:9f:24:ad:4b:68:0f:e7:97:96:83:1d:92:69:
                    e4:e5:ae:5d:ee:f5:02:55:da:dd:30:de:81:d0:b6:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8D:66:4D:24:9D:DA:88:51:A2:F2:73:47:59:4A:9C:FF:55:7D:72
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:6e:fd:eb:27:d0:27:d1:25:e8:a0:2a:1b:68:f1:ac:5d:
         6e:25:98:7f:bb:f4:27:56:7f:3e:92:50:5c:40:b9:b7:54:18:
         a5:30:f8:bf:4a:93:f3:9c:a6:4d:ae:71:0f:67:28:24:8f:86:
         6e:06:31:46:05:04:5f:5c:8e:b4:a7:88:e0:fe:3d:dd:8a:c9:
         f8:4f:62:3e:7d:96:e5:bb:54:0b:83:15:8e:c2:52:82:71:11:
         2b:30:e5:e1:9b:b9:8a:33:aa:dc:17:4e:17:e8:d6:83:7c:44:
         95:1f:35:84:73:d1:4c:2e:37:8a:76:6d:84:2a:f4:08:25:65:
         07:ae:9f:46:36:46:e3:e2:df:95:63:43:58:91:11:9e:a1:e1:
         c9:f6:03:eb:ff:58:07:80:26:99:11:7b:b8:b3:25:6d:f9:8d:
         70:04:19:1e:a5:e4:b6:fb:19:eb:bb:50:3e:62:a3:9f:52:8f:
         cd:e5:4e:c2:9e:ca:07:25:39:a6:e0:03:f0:5d:4d:db:87:69:
         8c:33:63:87:71:fe:68:c3:0a:9c:0f:d5:28:20:2d:f0:cc:2b:
         d9:7a:a7:a9:a3:50:87:f0:08:38:5a:8e:a1:6a:17:53:2d:41:
         70:4c:7d:da:d9:cc:d8:56:5b:69:bf:ed:06:b6:55:fe:3c:62:
         8d:f9:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:22 2026 by rpki-client