Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          2251jTLkItTe6vnB2ZiBHWkuRkLSekrJ6f1CZBqaPdU=
Subject key identifier:   86:91:0C:15:29:7E:D2:E6:82:8E:0B:AB:25:F4:45:65:C7:01:C9:A6
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       019E2F9702F67CF13091CEBEB74DC35AD687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0BCE
Signing time:             Sat 16 May 2026 07:01:26 +0000
Manifest this update:     Sat 16 May 2026 07:01:26 +0000
Manifest next update:     Sun 17 May 2026 07:01:26 +0000
Files and hashes:         1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: lK5N/BPc/Bkef37XkcR1mcWX+qaBJtatXnpVk+KC01g=)
                          2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:02:f6:7c:f1:30:91:ce:be:b7:4d:c3:5a:d6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: May 16 07:01:26 2026 GMT
            Not After : May 17 07:01:26 2026 GMT
        Subject: CN=86910c15297ed2e6828e0bab25f44565c701c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:a6:e6:a7:18:06:ac:70:14:59:aa:03:ca:
                    00:56:e9:ff:d9:30:56:5f:0e:1f:21:d9:d1:ed:11:
                    5b:73:d1:c2:a5:2c:c6:3b:20:87:01:2b:3a:fb:0e:
                    c9:f1:5d:8e:a4:63:05:51:ce:4f:f3:d7:1c:bb:7b:
                    7f:43:6a:7b:d9:f5:1d:1b:8f:64:45:b2:41:19:3a:
                    e6:44:75:f4:95:ce:57:97:f4:28:78:56:43:3f:ab:
                    b6:4b:af:1f:34:4a:48:b8:46:ef:94:95:a4:93:2b:
                    39:99:a4:42:5b:b8:88:e9:1b:ca:9d:d9:ad:42:19:
                    28:1e:91:57:75:43:53:81:d3:2d:fe:2e:ef:2d:52:
                    9e:a3:dd:ad:93:d2:a5:84:56:4c:74:62:64:aa:95:
                    d6:66:ab:80:d0:81:8c:c9:c2:41:09:58:4b:f0:37:
                    5a:ad:7b:e4:ab:fb:56:be:65:17:1f:9c:61:c9:97:
                    d0:dd:77:83:b1:4d:9b:11:88:86:c6:ff:a2:69:93:
                    8d:f3:89:bf:30:34:b7:8a:62:52:d7:20:e0:76:bb:
                    43:13:c4:1c:9f:0e:58:32:94:f8:d7:cc:bc:f7:51:
                    12:60:46:ad:1e:7a:b7:47:cc:06:f9:81:17:1b:83:
                    6e:a7:56:0f:18:af:62:a7:07:be:01:e9:46:e4:ca:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:0C:15:29:7E:D2:E6:82:8E:0B:AB:25:F4:45:65:C7:01:C9:A6
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:b4:e3:42:af:1b:b1:a6:66:ae:6c:98:08:e8:c6:00:20:
         0e:7c:d4:72:57:bb:75:b1:56:59:25:6c:3d:ff:31:bd:f8:6b:
         06:a9:97:6d:d3:72:f3:2d:25:29:9d:4d:9b:40:9f:82:ea:1c:
         32:cd:51:79:4e:54:b7:a9:26:f6:73:2a:b9:2b:d1:21:17:1b:
         72:6e:ad:62:a9:5e:13:86:9b:51:6b:12:81:3b:7a:4a:01:c3:
         c7:b1:ca:b4:bf:fd:12:ff:60:44:e3:3d:39:5a:2e:4f:d4:e1:
         35:b4:a8:50:44:d2:c0:52:13:3a:05:57:c9:fe:15:f8:1d:7f:
         8e:31:50:ed:d7:95:81:90:a7:cd:b4:9d:65:84:e0:73:33:90:
         30:3f:12:eb:5e:e1:dd:0f:57:c9:ba:b0:18:77:01:6c:be:8b:
         ca:6c:9b:1c:fb:aa:7f:36:b4:f2:a1:48:2d:4f:5a:46:34:48:
         7e:fb:06:a3:41:5d:ce:b4:0b:7e:a6:0f:e1:05:36:0b:79:28:
         14:77:16:28:31:6a:2c:f8:1a:ca:e8:63:a9:af:5b:cb:2e:84:
         10:3e:e6:49:71:bc:74:cc:f1:8c:70:d5:3e:cf:94:a9:3d:29:
         eb:56:2e:1e:c7:03:58:2c:d5:35:07:a3:08:df:9d:a2:e0:3f:
         33:1c:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:48 2026 by rpki-client