Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File:                     BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier:          cSVJfQc9jE9DiXLEiyQck8FCJw4QYEc5i9xV0NVw240=
Subject key identifier:   0A:A4:46:58:EE:D8:46:35:12:A4:C8:85:A3:D1:F3:A6:DC:E8:5C:B4
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer:       /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial:       019E2F96C89D30F141AB0DC2ABF55361CA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number:          0C41
Signing time:             Sat 16 May 2026 07:01:11 +0000
Manifest this update:     Sat 16 May 2026 07:01:11 +0000
Manifest next update:     Sun 17 May 2026 07:01:11 +0000
Files and hashes:         1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: CD1e2yuBLNcVB+uXVWHUkgLZKLLR+JCX62P1RYgrba8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:c8:9d:30:f1:41:ab:0d:c2:ab:f5:53:61:ca:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
        Validity
            Not Before: May 16 07:01:11 2026 GMT
            Not After : May 17 07:01:11 2026 GMT
        Subject: CN=0aa44658eed8463512a4c885a3d1f3a6dce85cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:57:c0:32:32:e4:af:c6:7b:65:f8:d2:e2:
                    f1:06:b7:d2:9b:02:af:f7:08:00:ef:38:d8:44:ca:
                    aa:c8:f1:56:67:49:c3:7a:71:c4:ab:5e:64:98:e8:
                    a2:5d:34:19:1f:87:71:a8:6c:f8:f8:5d:c9:1f:ef:
                    14:c0:49:66:ab:fc:9a:a0:89:d0:0b:00:17:26:0b:
                    78:09:e0:bf:84:ef:be:60:27:3f:30:7a:73:c2:ad:
                    e9:89:b9:cf:57:2e:32:5e:ef:b1:c7:cb:cb:db:22:
                    60:7a:40:51:dd:47:e3:b0:4e:1a:93:e8:2d:12:01:
                    ff:d2:8d:a4:3a:e3:c8:32:aa:09:99:c5:11:e8:fd:
                    05:44:29:9a:34:0d:05:d0:1e:f7:8c:4a:6e:97:be:
                    af:99:a9:94:39:fc:08:f6:94:ec:0b:48:10:d0:17:
                    f1:e8:67:58:53:4b:85:64:70:8c:e5:71:10:3e:d5:
                    d4:88:e2:4e:ed:5a:4c:e2:09:3e:5c:68:60:80:0f:
                    ef:93:0d:60:a4:81:b1:1e:62:07:0a:2b:a7:6b:ac:
                    f8:a7:c1:86:dd:ed:ad:90:32:2b:a5:6d:05:d5:1b:
                    20:c1:f3:ce:fb:98:2f:34:43:73:2d:94:40:db:83:
                    d9:cc:a7:8b:2b:75:52:18:17:5e:be:06:77:18:c6:
                    b4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:46:58:EE:D8:46:35:12:A4:C8:85:A3:D1:F3:A6:DC:E8:5C:B4
            X509v3 Authority Key Identifier:
                keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:62:75:24:48:80:fc:56:59:b1:1c:57:a4:98:c3:81:3d:
         ff:52:95:7b:d8:a9:e8:68:c1:e3:00:1e:c8:cd:6a:94:04:b8:
         f2:de:e8:f8:f6:1a:7b:a9:90:af:75:7c:17:3f:ac:0f:c0:cb:
         3c:03:6f:08:cf:c3:93:df:d3:28:37:cd:8f:d1:96:77:e6:22:
         79:55:8a:36:b6:32:04:02:21:99:ee:08:72:32:fd:9b:c4:f2:
         00:3f:b8:f2:23:b7:d1:23:07:db:06:01:dd:49:db:18:95:06:
         1c:f0:9f:24:07:98:2f:1b:c1:51:80:c5:5b:e0:a1:05:20:6b:
         49:e3:aa:10:70:c2:5f:e5:9e:a7:01:de:31:78:bf:57:64:0e:
         18:0a:8b:b4:10:11:c1:f7:49:c4:22:ef:28:c1:38:83:18:9e:
         a2:73:ff:b5:64:d8:66:fe:ae:0a:c7:31:08:62:ec:d4:80:b7:
         67:a0:90:0f:38:f2:10:29:3f:12:8f:8f:9d:4e:66:e5:ad:9b:
         ac:a5:d6:5e:fd:62:48:54:b2:0e:d1:a0:a3:8a:cf:62:2d:61:
         c6:6b:a9:d6:ce:05:9e:84:37:dc:b6:53:37:0a:06:17:e3:b1:
         99:93:72:b7:b6:b0:15:f9:e1:d2:cd:ec:9f:3b:a0:b8:06:15:
         28:82:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:17 2026 by rpki-client