Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          6bpvD9JAe4ibjeTN6daIFKgcWlqfuqRUmFmt/qS/9KM=
Subject key identifier:   CE:6F:A7:A6:C8:4B:3E:64:FE:DA:88:8B:BB:84:CB:E6:EA:A7:77:32
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       019E2F969299B37CC6C737ACAE7FFD09CBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          190B
Signing time:             Sat 16 May 2026 07:00:57 +0000
Manifest this update:     Sat 16 May 2026 07:00:57 +0000
Manifest next update:     Sun 17 May 2026 07:00:57 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: a7sxtM7n5oDoVVRZP7Ju68R8sCxofBcfdFTtDnvlwc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:92:99:b3:7c:c6:c7:37:ac:ae:7f:fd:09:cb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: May 16 07:00:57 2026 GMT
            Not After : May 17 07:00:57 2026 GMT
        Subject: CN=ce6fa7a6c84b3e64feda888bbb84cbe6eaa77732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:92:d4:88:59:2a:ed:8c:20:12:9d:4a:1a:
                    28:4a:00:6a:8f:8d:c8:c7:59:28:0c:6e:36:0c:a8:
                    62:d3:74:eb:97:cb:ec:f3:51:93:eb:84:e8:8d:9c:
                    f7:13:9c:a0:ab:f4:bf:9f:e4:cf:04:86:4f:fa:7e:
                    fe:d8:f9:0d:cb:c7:54:7a:8c:29:13:74:de:50:99:
                    3a:5f:0b:bf:23:93:5c:44:fd:22:67:41:bb:0e:7b:
                    56:d8:fa:c0:71:e7:51:a9:d4:c3:3b:61:08:7c:cd:
                    5f:45:79:05:72:30:4e:cf:17:1a:68:02:25:04:73:
                    e8:c1:32:52:54:bc:48:f8:c6:ee:d6:56:54:a8:fe:
                    04:d5:1b:77:14:d1:01:f4:4d:fd:c9:27:0c:cb:9f:
                    cb:b8:e6:1f:8d:0e:c3:3e:7d:d4:38:c0:75:fb:43:
                    b1:24:d6:62:96:07:f3:52:03:b1:2b:a3:52:1f:88:
                    f7:ca:d3:66:0f:74:6d:21:9e:e9:ca:7d:70:7f:bf:
                    6d:23:21:02:1a:ae:59:e2:96:38:35:ea:8d:88:ad:
                    cc:2f:f6:49:85:93:6d:e8:fa:b7:0e:51:ad:59:10:
                    37:e4:d4:b9:22:e0:a6:1a:5f:e0:43:43:b2:ba:17:
                    d5:6f:e6:e1:24:3f:d1:7b:20:4a:40:ae:0b:59:e8:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:A7:A6:C8:4B:3E:64:FE:DA:88:8B:BB:84:CB:E6:EA:A7:77:32
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:eb:eb:92:8c:44:ba:f8:40:bc:89:25:6c:e7:1d:45:7d:
         31:43:bd:c9:43:d8:f8:93:38:63:de:c6:9c:98:7a:61:f1:63:
         a3:f1:d7:3f:65:98:1f:d5:94:94:9d:b5:a4:41:fc:dc:af:a9:
         85:0f:7e:57:2a:bd:c1:89:50:91:2b:a6:9f:29:61:c1:25:95:
         90:ec:50:a5:49:a0:c5:c6:e0:28:69:cc:d4:60:4e:54:3d:d5:
         7e:e6:ae:8e:a2:21:b1:13:81:70:e9:b0:ca:d3:b8:a1:c6:45:
         6b:6b:dc:ac:8f:61:bb:32:92:b6:5f:7d:3b:20:95:cc:56:02:
         5b:4d:f2:ed:9f:76:30:32:7c:38:74:35:83:db:8d:cc:9d:06:
         0e:83:4c:2d:d5:80:3b:a9:7a:8f:ed:78:15:5c:0f:f3:f7:c9:
         eb:e6:0e:3c:50:cb:ea:eb:0b:95:52:bc:a0:f9:18:2d:24:5a:
         80:9d:9a:dc:d5:ca:75:97:e2:02:91:f8:e8:c0:26:cc:4a:a5:
         94:b3:ed:57:b2:78:eb:15:f7:99:3e:51:f8:93:4e:cc:56:ca:
         e5:8f:2b:14:b0:3a:8a:b5:e7:25:40:79:1c:e3:3e:03:0b:af:
         6c:7b:ce:56:53:ee:ca:19:81:77:56:1b:0c:a5:1a:0a:5b:58:
         35:88:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:23 2026 by rpki-client