Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File:                     bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier:          tbIbISqm2cN20mYnMzUJcyTM1UZGqBQ+tnjgUJWefyc=
Subject key identifier:   29:FE:FE:9D:CF:03:98:7A:D7:FD:3F:FA:1A:39:85:6F:D0:F3:AB:2E
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer:       /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial:       019E1EA3539AB05F250C7ACCB975040ADBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number:          172C
Signing time:             Wed 13 May 2026 00:01:20 +0000
Manifest this update:     Wed 13 May 2026 00:01:20 +0000
Manifest next update:     Thu 14 May 2026 00:01:20 +0000
Files and hashes:         1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: gYGAOLPiv3/Ca98gMaPXYjRXTKclPxwHaAT0BvDiWNM=)
                          2: dEBO9P2rTzMGj8WCAwefx9LMEiY.roa (hash: KzSq8awg8N2A2yqoLCZBBx9w+DQcNParU+eeSoLEIgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:53:9a:b0:5f:25:0c:7a:cc:b9:75:04:0a:db:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
        Validity
            Not Before: May 13 00:01:20 2026 GMT
            Not After : May 14 00:01:20 2026 GMT
        Subject: CN=29fefe9dcf03987ad7fd3ffa1a39856fd0f3ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:a1:74:33:04:13:f6:d9:6c:00:9e:88:a6:
                    f5:a0:5b:19:e8:6b:26:8a:5d:60:39:43:04:e1:e7:
                    38:d3:14:f9:1e:f4:59:5c:e3:4f:97:07:e9:0a:01:
                    32:84:35:05:63:e1:66:bc:ef:5b:fb:1b:f2:f5:3c:
                    15:c0:62:5f:f3:13:12:01:87:97:8b:3d:af:9d:9a:
                    54:a6:12:1b:52:7b:9e:ff:62:52:db:fc:e3:dd:27:
                    e8:4d:05:83:3f:e5:90:85:41:b0:a3:55:24:51:b9:
                    fa:58:ba:98:1d:35:1d:1a:09:f3:7f:66:68:f3:a8:
                    86:89:a4:6e:71:74:4f:44:df:2c:96:b2:ba:97:78:
                    55:46:46:a3:cb:f1:dc:3d:77:38:37:98:dd:16:00:
                    5b:81:55:7a:2d:54:02:c0:11:14:e1:11:00:f0:c5:
                    bd:9a:bf:79:01:50:17:b8:ba:04:37:21:79:29:67:
                    bf:32:af:15:38:7a:43:48:e3:9e:19:4d:c9:f7:b8:
                    64:15:56:62:be:a3:d5:10:a0:64:7a:85:62:0d:25:
                    87:ef:29:39:b9:71:96:73:4e:b6:52:93:9a:eb:20:
                    d3:57:ec:42:78:98:06:76:ea:62:19:6b:48:8f:3e:
                    c0:b9:3d:b1:0a:85:2b:2d:0a:e9:be:ef:0a:1d:b3:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:FE:9D:CF:03:98:7A:D7:FD:3F:FA:1A:39:85:6F:D0:F3:AB:2E
            X509v3 Authority Key Identifier:
                keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:1c:2d:ae:7f:3e:d2:bd:43:78:7c:4c:26:2b:8d:c4:cf:
         8a:02:73:61:ba:dc:13:b6:74:c4:83:cb:d7:98:14:78:9f:f9:
         9e:8c:b7:56:41:68:a8:c4:df:01:8e:98:92:e0:1b:ee:1a:1d:
         f6:2d:23:8e:54:aa:c3:3e:b4:2e:9a:86:81:1f:ed:9c:77:ca:
         10:f7:cc:73:f3:c3:8d:de:15:28:54:65:e4:a2:39:0b:9a:ed:
         3f:65:62:6d:19:7c:02:b2:dc:fa:53:20:1d:b3:5f:b5:af:6a:
         04:0b:5c:67:c5:c5:91:34:d9:63:c6:f4:b9:09:97:6b:27:0f:
         fd:1d:34:83:64:7d:f7:46:e5:de:c1:70:8a:a3:3d:ad:a8:30:
         a9:41:65:22:40:ca:03:ec:ab:a3:6a:fe:01:8f:bb:39:7b:e4:
         7d:59:01:ba:15:8e:bd:e7:52:67:58:cf:3b:e9:24:cc:b0:9e:
         64:6e:82:f3:4f:3d:5c:1c:a1:15:fb:19:7c:b2:dd:47:d5:05:
         b8:b0:76:fa:ef:2c:69:ab:33:60:13:80:4f:64:be:79:27:c0:
         4c:b4:53:fa:9d:6e:b7:de:64:67:bc:41:e3:3c:81:64:03:a0:
         85:6e:a4:f5:81:26:2b:20:9c:2d:16:11:c5:e5:14:c9:d4:b9:
         c5:c5:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:02 2026 by rpki-client