Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File:                     bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier:          puT3SZ1Eh7+9Kp7QjQP6aixsagfAo6J+pm/0PX5iWsg=
Subject key identifier:   85:E1:3D:91:BA:76:91:5D:93:27:70:C0:32:27:0A:25:FA:77:55:AF
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer:       /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial:       019E1D22AD31BC3B2AF56B549916D1FD846E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number:          0C64
Signing time:             Tue 12 May 2026 17:01:12 +0000
Manifest this update:     Tue 12 May 2026 17:01:12 +0000
Manifest next update:     Wed 13 May 2026 17:01:12 +0000
Files and hashes:         1: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
                          2: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
                          3: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
                          4: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: 6L/kzKlsWrciFftROnAWNXfDiObMpLYsUk8bD/foZpY=)
                          5: mUzfsxNnbwnbzrFO6bbwJeRdqc8.roa (hash: WPhw5sZ8yc7m47awa7yiemQPPC2O/BN9I1sjAnPg0uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ad:31:bc:3b:2a:f5:6b:54:99:16:d1:fd:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
        Validity
            Not Before: May 12 17:01:12 2026 GMT
            Not After : May 13 17:01:12 2026 GMT
        Subject: CN=85e13d91ba76915d932770c032270a25fa7755af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:11:ca:d4:38:fb:c4:4c:56:1b:a1:5f:64:
                    04:a6:3a:14:02:2e:67:4d:1e:93:c4:d9:37:00:96:
                    40:86:07:0e:fa:f8:3b:5a:cf:b7:ec:f1:b6:f4:f3:
                    58:77:4c:3f:d7:b0:ad:80:1e:bc:2f:d0:d8:13:cb:
                    22:f7:03:86:bd:e2:6a:96:33:c6:51:ce:e1:df:9e:
                    92:0e:29:80:04:61:16:81:f6:ec:33:88:b1:ca:71:
                    bb:57:67:75:56:27:e7:74:28:35:2b:30:53:67:2a:
                    08:88:40:b9:3e:1a:40:8e:bd:76:6d:65:27:18:a0:
                    1f:57:07:04:89:25:3a:8b:e6:78:97:75:ff:0e:a0:
                    c1:f5:6b:da:8b:e5:2e:f5:7b:1a:35:32:46:1e:82:
                    14:da:fe:ab:68:60:cd:1a:d7:ef:02:89:15:7b:4c:
                    af:4f:e8:8c:5f:e1:24:00:59:51:ad:1b:78:3d:5f:
                    bf:16:04:2a:b1:0f:c2:94:42:e9:28:32:46:d3:f4:
                    9d:cc:1a:bc:1f:5e:4c:fe:ed:39:28:28:31:2f:96:
                    3f:81:8e:00:d0:bb:dd:3f:96:4f:2e:02:59:43:d6:
                    dc:54:6d:7c:c9:f5:f2:db:f0:55:a4:84:1c:ff:b2:
                    10:d8:b9:40:48:48:1d:6d:2d:02:a6:df:dc:2b:bb:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:3D:91:BA:76:91:5D:93:27:70:C0:32:27:0A:25:FA:77:55:AF
            X509v3 Authority Key Identifier:
                keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:cf:74:15:3a:be:de:9d:88:56:57:15:42:2b:0e:1a:44:
         be:6e:82:6e:39:bd:7e:f0:81:ae:a9:0f:4f:c7:b6:ec:5a:12:
         d5:dd:a9:71:ce:8c:d0:b6:12:be:aa:9b:87:b3:2e:c5:b9:d5:
         74:10:3d:01:fa:e6:ad:d2:a1:69:06:b2:2e:78:d6:70:07:8f:
         56:cd:86:36:44:ac:3c:f5:23:e1:46:c4:cb:b3:db:cf:36:03:
         23:8f:7b:13:c6:92:19:6e:da:9b:cb:90:81:6d:10:c7:9f:69:
         c9:0a:8e:60:3c:36:d6:cf:a8:1d:24:ab:65:d7:f5:63:48:d5:
         13:b5:7c:80:93:c0:67:65:e2:06:98:2d:88:d6:a8:2d:06:dc:
         b5:47:66:43:9b:05:e7:67:3e:a0:a9:b5:f9:d6:67:bd:8d:b4:
         80:7d:5e:a1:a5:74:74:77:08:77:c4:8f:8f:33:b7:8c:be:ae:
         ff:22:5b:9b:f5:02:73:1b:30:c1:f5:73:8a:5d:e2:12:89:8c:
         f6:56:3f:c8:be:d1:e0:58:5f:d0:71:17:7c:4b:4b:81:69:13:
         9b:ac:1f:48:27:e9:57:f5:3c:ad:fa:04:79:25:6f:f1:91:7b:
         01:08:bd:cd:de:47:88:bf:d6:fa:cc:45:37:90:3a:ec:08:52:
         ab:68:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:44 2026 by rpki-client