Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File:                     B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier:          XTTmUB1LkRJgJMemUSO/JAbYZsTB6dVldDRDMgQYLKA=
Subject key identifier:   77:D5:49:5F:84:5A:D1:DF:71:77:50:F2:56:69:CD:84:98:20:B6:58
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer:       /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial:       019EC25BC244A6E1A235D992D40D3D75FCAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number:          0377
Signing time:             Sat 13 Jun 2026 19:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:53 +0000
Files and hashes:         1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: RasyM+d4C51Ny0x/j2zQZaHAHQMIj9j+jnvoX2Fu0AM=)
                          2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:c2:44:a6:e1:a2:35:d9:92:d4:0d:3d:75:fc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
        Validity
            Not Before: Jun 13 19:00:53 2026 GMT
            Not After : Jun 14 19:00:53 2026 GMT
        Subject: CN=77d5495f845ad1df717750f25669cd849820b658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:0f:57:ac:75:f9:1e:cf:0f:8d:8d:7e:1d:
                    f1:7a:56:a8:ee:59:4f:2b:04:fe:57:9a:d4:50:99:
                    45:c4:ea:82:0b:54:71:9a:c3:20:ae:64:4f:66:4b:
                    a6:5f:69:cb:d7:45:20:d1:f8:5a:82:4d:35:07:37:
                    40:d6:3c:d7:d1:8d:e8:4c:94:18:d4:f4:05:fb:74:
                    ac:00:53:d1:7d:60:4c:9a:58:e7:f2:5a:e5:99:5f:
                    85:62:c8:03:e9:55:9d:04:d8:ab:40:fd:96:f2:78:
                    f8:5f:ea:b4:d4:67:4b:55:81:d5:e2:86:2c:b3:7c:
                    47:e2:75:90:fc:a3:b4:41:f7:00:c0:24:d6:68:2b:
                    4b:a8:0a:e5:3c:67:bc:61:af:bc:71:8e:9e:45:c3:
                    b1:92:72:cb:62:d2:a7:a6:cb:af:53:69:f9:85:87:
                    71:d8:e1:5a:38:ac:3a:95:a2:5c:03:fa:19:5f:8e:
                    e7:80:6d:eb:d4:6d:3e:07:32:76:57:84:91:dd:54:
                    77:3e:88:16:fc:bd:ad:c9:1a:56:e8:31:bf:6d:93:
                    9b:b4:b7:c4:fa:d3:9e:31:96:3e:cc:9b:eb:69:ef:
                    95:8b:6e:99:a2:2e:4c:11:17:31:a3:42:92:e2:56:
                    28:ad:aa:e0:43:42:f7:7d:4e:eb:22:a1:34:52:ab:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:49:5F:84:5A:D1:DF:71:77:50:F2:56:69:CD:84:98:20:B6:58
            X509v3 Authority Key Identifier:
                keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b1:85:80:5d:50:8d:89:fa:de:26:ee:a1:7f:27:73:0a:28:
         aa:87:b2:92:c2:30:a1:dc:18:d5:d5:8d:5f:9c:90:f4:f8:5f:
         99:7d:0d:80:81:e7:03:22:cb:73:4b:5c:96:8b:87:aa:f6:a0:
         56:a3:a3:69:63:f6:0e:cb:81:49:ae:47:2c:31:d3:03:8a:37:
         1b:12:06:c6:02:74:a6:2c:80:5b:d4:8f:64:13:0b:d6:e9:38:
         2e:6c:b0:00:b3:b7:53:b0:48:de:70:7e:8b:e0:2f:2d:ee:50:
         81:00:02:13:b1:74:7f:21:5a:98:44:0f:a3:ee:7c:00:8a:c9:
         eb:c4:f0:ff:07:c3:af:78:0a:98:3e:b2:73:84:8c:71:35:ed:
         e3:a3:ae:9f:f9:0d:8f:1f:b0:b2:ca:41:90:6b:96:cf:39:f4:
         00:de:10:45:bc:58:26:48:04:ed:51:93:d3:53:95:cf:e4:b2:
         9b:f3:95:09:fd:fd:b8:6d:6c:ca:1f:d1:e7:06:6d:69:f2:0e:
         19:a2:5c:81:0c:74:41:78:c4:3b:fc:9c:89:32:5d:6d:81:7b:
         98:4d:8f:29:56:3b:08:63:df:c0:e0:97:d7:0d:77:88:6d:ae:
         be:b4:f4:4a:07:5b:31:99:f9:02:77:10:7e:2f:de:93:75:97:
         eb:80:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:13 2026 by rpki-client