Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          QxuK3FAj6cUnML5HjQMZm/cM7O/I6rVsznhzOtb3BB0=
Subject key identifier:   AC:8A:23:DE:93:B9:E2:A2:B7:D1:62:86:1A:2D:BE:A3:8C:A1:EF:5F
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       019E1BD8B9D4352DC89CBF602B06E6B7347D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 11:00:48 +0000
Manifest this update:     Tue 12 May 2026 11:00:48 +0000
Manifest next update:     Wed 13 May 2026 11:00:48 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: rROLKfUU3dZ6TCeWOIzCXwpQR5vSfy40Xk3Atx1dKoE=)
                          2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b9:d4:35:2d:c8:9c:bf:60:2b:06:e6:b7:34:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: May 12 11:00:48 2026 GMT
            Not After : May 13 11:00:48 2026 GMT
        Subject: CN=ac8a23de93b9e2a2b7d162861a2dbea38ca1ef5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:ec:45:5c:09:3e:ca:a4:b4:ec:ad:06:f8:
                    34:c2:56:c6:2e:db:00:ff:19:56:ad:14:59:98:12:
                    fd:f8:a0:6c:05:1b:ac:9d:f2:2e:d9:0f:c6:e8:66:
                    e3:2b:d0:7f:6e:1a:f5:e4:32:77:b8:2a:06:d0:2d:
                    e6:30:9b:94:c4:9a:70:3c:ed:6a:ee:a9:93:a5:41:
                    fc:e8:0e:62:cf:fe:d2:4e:ff:15:31:36:12:d6:bd:
                    8b:bd:d9:30:c2:9b:63:4b:05:3a:9d:d6:e3:e0:0c:
                    5c:56:36:a6:94:2f:8b:4b:bf:ec:ed:d8:81:79:d8:
                    d8:67:cd:33:e8:d8:98:e8:9b:b4:e5:61:82:27:1f:
                    17:45:14:fb:16:9d:f5:1d:bd:cf:b3:51:4d:38:41:
                    3d:74:94:31:21:c2:8a:ad:0f:93:93:5f:1b:88:96:
                    52:41:4b:fb:f7:8d:51:8e:6f:d8:c9:5c:4a:2f:cb:
                    6d:56:4b:f6:f4:d3:5c:fe:4b:52:63:1c:7c:98:d4:
                    7f:14:30:a8:8a:4c:89:5e:82:74:41:df:d0:52:ef:
                    4c:fc:d9:3a:af:53:e7:1e:db:da:64:c5:87:fb:92:
                    81:a0:e8:70:22:c1:c6:00:2f:f9:81:bd:e5:31:ae:
                    c1:b8:0f:eb:9a:33:ba:c0:af:01:d8:fe:9c:6f:81:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8A:23:DE:93:B9:E2:A2:B7:D1:62:86:1A:2D:BE:A3:8C:A1:EF:5F
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:9e:1a:29:46:6e:02:92:17:ef:34:83:c7:c0:4a:91:c4:
         99:fc:fc:e4:33:2d:34:5d:f7:97:fc:14:d0:80:2d:71:25:c3:
         4f:17:7c:04:0e:c8:5c:9c:51:f8:5e:a6:d6:cb:7d:7a:f9:e0:
         40:97:ed:06:94:4f:e6:cc:42:88:fd:43:60:b7:94:52:43:8a:
         9b:01:89:52:44:4e:d4:79:60:c8:3e:05:32:45:c0:d6:83:b5:
         ff:08:df:d4:81:c1:67:45:f1:ea:b3:c7:cd:59:92:2f:6e:b7:
         55:26:f5:db:4f:94:41:61:03:54:e8:29:2c:d6:b8:c3:ec:97:
         e9:ab:b1:7c:c6:15:36:48:1f:d4:58:6d:da:cd:96:ca:d7:ee:
         8f:60:26:7d:2f:ed:4b:a0:98:46:71:f2:df:34:87:20:d9:73:
         de:8f:be:b4:8a:e2:da:e7:5d:e7:08:fc:bb:62:f1:f8:aa:95:
         83:89:e4:8a:f7:bc:71:39:63:16:2e:9c:51:f3:b7:59:60:48:
         e3:22:1e:ab:21:01:a6:5f:2e:0f:81:6b:7f:75:23:06:2e:b9:
         2a:be:69:57:1a:4a:d7:5e:b0:48:1a:36:1c:60:f6:06:94:62:
         3e:9f:a0:0d:b2:93:81:95:93:c1:ff:3e:7a:d0:04:4e:e0:29:
         5f:67:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:47 2026 by rpki-client