Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          EhD882tDmKApr8KIbYESuhPCthhAK35eYkilsQTsndg=
Subject key identifier:   2B:AC:90:42:19:21:C3:44:0D:60:C9:B7:83:B6:B3:61:FF:D3:CA:E1
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       019E1EDA16D2A1B0B032E0E223CC4DA14792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          06B7
Signing time:             Wed 13 May 2026 01:01:09 +0000
Manifest this update:     Wed 13 May 2026 01:01:09 +0000
Manifest next update:     Thu 14 May 2026 01:01:09 +0000
Files and hashes:         1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: pIxQbx/YhYK9yikPmuYdjaL8i9gOJKIEr8UE6gjidlw=)
                          2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:16:d2:a1:b0:b0:32:e0:e2:23:cc:4d:a1:47:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: May 13 01:01:09 2026 GMT
            Not After : May 14 01:01:09 2026 GMT
        Subject: CN=2bac90421921c3440d60c9b783b6b361ffd3cae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:54:6b:73:4e:04:8a:af:87:af:49:46:08:
                    bc:0f:76:c5:28:9d:7e:60:de:ad:ba:12:2e:95:4e:
                    5d:c6:a7:b2:e1:b4:8c:9d:70:ab:d8:a0:8e:ad:bc:
                    d0:f2:db:f4:b8:b8:55:4c:b2:c7:4a:7a:5e:78:06:
                    28:e8:6b:58:68:72:0d:46:e5:c1:2c:dc:15:4a:79:
                    4f:56:d4:4a:99:88:e8:d9:44:ec:8d:cf:3b:c3:1e:
                    6f:b7:27:95:d6:c1:7b:6f:54:88:dc:f3:35:67:cf:
                    2a:87:db:2f:d3:a7:95:92:af:ff:80:17:4a:26:89:
                    a7:d2:27:41:57:76:69:a3:c0:e9:5e:21:d3:ff:39:
                    5b:44:ee:59:af:0f:b3:72:5f:96:3d:13:be:fa:3b:
                    87:a3:c6:7c:92:d3:0f:4f:12:0d:f8:ce:5d:b3:5a:
                    3a:ef:a7:e7:c3:7d:5f:f0:97:f3:e1:ed:3a:46:8f:
                    3d:b4:dc:01:ad:f8:64:b9:0f:05:73:c3:94:07:dc:
                    d9:cc:92:d9:55:bd:7f:c3:db:c8:d5:38:cb:7e:80:
                    9a:a9:bf:d4:88:3e:df:1f:19:91:ea:14:e1:f6:7b:
                    44:fd:e0:23:c2:8b:91:8c:49:6b:50:dc:34:f4:4a:
                    fb:31:f8:f4:cd:66:c2:88:70:85:49:69:c8:d4:cb:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:90:42:19:21:C3:44:0D:60:C9:B7:83:B6:B3:61:FF:D3:CA:E1
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:70:1b:3c:ae:9a:e7:b0:37:84:b5:60:96:3d:62:0c:05:
         41:8d:70:de:de:dc:54:8f:34:39:a4:67:b6:7e:46:ec:cd:2f:
         2e:68:f2:40:b5:92:7d:a5:0a:98:b2:3d:ff:a2:95:1a:b0:7d:
         65:9e:e3:1a:ec:c1:f6:03:c3:60:d1:18:28:6d:25:39:37:db:
         e6:f8:b0:ef:f4:dc:60:a1:2e:3b:78:0b:79:bc:2b:e2:59:78:
         a7:4c:de:38:4d:f5:c9:60:ab:d7:54:d8:c2:d7:3c:5b:c7:51:
         f5:cc:cf:de:b8:64:61:5c:d2:ba:11:22:86:de:c4:28:ac:91:
         e1:f7:81:ee:87:44:a5:09:89:00:ad:4d:3e:8d:2d:86:29:1b:
         30:ea:4f:c1:a9:67:d9:61:63:f0:1d:a4:7e:49:a1:7b:8a:68:
         61:d4:ed:31:7d:6d:59:9a:fe:37:e4:cd:cf:db:ff:c6:42:e8:
         2f:96:9d:ec:fe:1c:64:ae:52:91:a7:91:38:14:6b:88:0b:33:
         74:e9:e3:7d:3d:60:fd:c4:22:66:98:55:e6:f5:95:8c:68:6c:
         a0:3b:89:c4:dc:f8:dd:8c:fa:fb:b1:45:aa:98:ca:b3:79:59:
         c0:67:fc:a2:33:c0:25:c8:d5:b6:7e:46:8d:7b:3f:31:1e:f5:
         e3:77:bd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2hbSobCwMuDiI8xNoUeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz
NTA5ZTYwHhcNMjYwNTEzMDEwMTA5WhcNMjYwNTE0MDEwMTA5WjAzMTEwLwYDVQQD
EygyYmFjOTA0MjE5MjFjMzQ0MGQ2MGM5Yjc4M2I2YjM2MWZmZDNjYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeJUa3NOBIqvh69JRgi8D3bFKJ1+
YN6tuhIulU5dxqey4bSMnXCr2KCOrbzQ8tv0uLhVTLLHSnpeeAYo6GtYaHINRuXB
LNwVSnlPVtRKmYjo2UTsjc87wx5vtyeV1sF7b1SI3PM1Z88qh9sv06eVkq//gBdK
Jomn0idBV3Zpo8DpXiHT/zlbRO5Zrw+zcl+WPRO++juHo8Z8ktMPTxIN+M5ds1o6
76fnw31f8Jfz4e06Ro89tNwBrfhkuQ8Fc8OUB9zZzJLZVb1/w9vI1TjLfoCaqb/U
iD7fHxmR6hTh9ntE/eAjwouRjElrUNw09Er7Mfj0zWbCiHCFSWnI1Mu0HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuskEIZIcNEDWDJt4O2s2H/08rhMB8GA1UdIwQY
MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt
OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl
LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx9wGzyu
muewN4S1YJY9YgwFQY1w3t7cVI80OaRntn5G7M0vLmjyQLWSfaUKmLI9/6KVGrB9
ZZ7jGuzB9gPDYNEYKG0lOTfb5viw7/TcYKEuO3gLebwr4ll4p0zeOE31yWCr11TY
wtc8W8dR9czP3rhkYVzSuhEiht7EKKyR4feB7odEpQmJAK1NPo0thikbMOpPwaln
2WFj8B2kfkmhe4poYdTtMX1tWZr+N+TNz9v/xkLoL5ad7P4cZK5SkaeROBRriAsz
dOnjfT1g/cQiZphV5vWVjGhsoDuJxNz43Yz6+7FFqpjKs3lZwGf8ojPAJcjVtn5G
jXs/MR7143e9gQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:57 2026 by rpki-client