Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File:                     bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier:          lv2OAhRtLtKoEfTJgEbobh2SyGSp4OK/vrBEdvS5vnE=
Subject key identifier:   03:59:BC:04:18:57:7D:BB:1E:89:83:41:44:12:4C:0A:44:F3:6C:87
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer:       /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial:       019E1ED9C858906F3CF2958702B389EEDD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number:          189A
Signing time:             Wed 13 May 2026 01:00:49 +0000
Manifest this update:     Wed 13 May 2026 01:00:49 +0000
Manifest next update:     Thu 14 May 2026 01:00:49 +0000
Files and hashes:         1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
                          2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: L4ECxm14Ccz9kdBLQKFCz6q8uL1z2vsE9QVFF+6AF8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:c8:58:90:6f:3c:f2:95:87:02:b3:89:ee:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
        Validity
            Not Before: May 13 01:00:49 2026 GMT
            Not After : May 14 01:00:49 2026 GMT
        Subject: CN=0359bc0418577dbb1e89834144124c0a44f36c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:83:26:bf:22:fa:70:f5:fb:fe:9a:a6:8e:
                    a4:b2:38:eb:3b:fe:52:13:fa:51:17:b2:ff:75:fe:
                    a7:34:34:cd:06:3c:64:3e:64:99:7a:b9:d3:a6:a8:
                    35:06:8e:13:fe:c1:8b:f8:9b:28:78:59:b1:60:7b:
                    35:be:c1:93:d9:da:2c:ba:95:7a:44:09:2c:f7:b0:
                    ee:9e:93:34:a6:7d:b4:b1:42:40:74:e9:13:65:a7:
                    47:cf:d8:47:51:bc:97:b2:f7:ae:a1:ff:e5:a6:ad:
                    bb:ac:cf:b1:9b:4b:bf:71:65:93:93:46:bd:70:e4:
                    10:bb:76:59:02:8e:d4:f3:c6:c4:1f:ee:12:bc:7b:
                    9c:58:41:e1:09:b9:d1:a9:00:92:27:78:02:5a:e9:
                    e7:90:bc:fa:7f:c7:e6:3b:98:a1:20:67:8e:e0:fb:
                    de:68:48:4c:07:9f:7b:59:39:f2:b1:c5:a1:a9:b1:
                    65:10:08:c5:8a:29:17:a5:41:0b:77:d1:d5:f2:b2:
                    a0:3a:37:1c:95:02:ca:ff:31:3c:de:3b:b4:77:90:
                    e8:0b:6b:88:fc:6a:ed:c4:e6:b7:e1:f3:51:a2:dd:
                    db:df:f8:2e:00:e8:ca:7d:a0:3c:16:47:1e:8e:87:
                    0d:71:d1:fd:59:fa:08:0d:f8:94:2c:ca:29:16:8f:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:59:BC:04:18:57:7D:BB:1E:89:83:41:44:12:4C:0A:44:F3:6C:87
            X509v3 Authority Key Identifier:
                keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:fd:fe:b9:9f:8b:bb:cf:82:0e:c6:71:4b:85:d0:33:ec:
         48:b7:4d:db:5b:25:e3:cb:f2:e7:8d:58:99:d9:1d:07:15:51:
         65:0e:3f:51:b0:ce:73:bd:7f:30:53:e3:9c:ad:c1:e4:9f:e5:
         d1:1e:65:d0:91:ed:7f:7c:f3:9b:e5:1a:74:e6:5f:cb:02:0f:
         e9:78:29:5f:83:51:52:16:cb:f2:25:b3:28:82:06:07:eb:e7:
         20:ad:ce:5a:fd:07:ea:24:2c:d5:25:54:08:a4:38:cd:00:92:
         d6:60:88:80:38:f4:00:82:84:56:fb:6c:ac:f1:93:d2:19:a9:
         4a:bb:c8:b5:a5:a7:00:6e:fd:ce:04:86:65:e4:0e:da:4c:57:
         d6:78:d4:e0:8e:07:f7:01:7c:0d:87:99:7c:cd:27:57:96:d5:
         df:a0:c6:80:6b:79:77:3c:b3:9b:f0:43:d8:00:68:8e:42:40:
         0e:0e:dc:87:8a:33:a6:53:f1:91:1c:15:5f:2b:7a:cd:92:c6:
         7c:16:eb:42:e4:4f:c0:28:49:4c:72:b0:cc:03:e9:c3:7c:75:
         57:b7:7a:0c:c4:ac:7e:a5:2c:fd:64:e5:cb:2c:c6:92:d8:e2:
         79:30:e0:f8:22:44:97:48:5d:c9:ab:a0:55:32:20:48:4f:61:
         65:fe:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:24 2026 by rpki-client