Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File:                     BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier:          o+C37w0urrZLWTWkt3As9xv3Aml52/My80P4e/XGlD0=
Subject key identifier:   CA:E4:76:2B:B1:72:0A:39:0C:E1:75:8E:F0:D8:FF:D5:17:8D:2C:C4
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer:       /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial:       01A00093B0860C73341672402B8B04302026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number:          08FF
Signing time:             Fri 14 Aug 2026 14:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:14 +0000
Files and hashes:         1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: tsCBlJykY95zwdRR6s513Hh4v4Y7o5SMHq7dDTH/VZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:b0:86:0c:73:34:16:72:40:2b:8b:04:30:20:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
        Validity
            Not Before: Aug 14 14:01:14 2026 GMT
            Not After : Aug 15 14:01:14 2026 GMT
        Subject: CN=cae4762bb1720a390ce1758ef0d8ffd5178d2cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:67:3f:58:d3:7b:cb:77:e1:a1:1d:3c:7d:
                    54:f2:a3:a3:4e:d2:63:15:c7:2b:9a:7f:74:1c:c8:
                    75:28:b7:ba:a7:e6:f9:20:f7:d6:78:5d:0d:a4:e4:
                    70:0a:0e:9c:34:d3:29:b9:99:ad:96:a8:99:e3:e7:
                    0d:3b:41:45:8f:32:3f:c3:2b:4d:1a:5e:41:4c:fe:
                    fe:73:42:9f:07:2c:c4:6c:ca:c8:d9:2e:87:69:6c:
                    2e:29:e9:4f:77:f7:63:d0:ed:3b:52:6a:fb:48:d8:
                    c5:e4:75:58:c2:81:e9:9a:f8:e3:86:f4:e9:11:2f:
                    fb:f7:4d:4f:7f:5c:ae:0b:cb:c3:af:27:b9:4a:d9:
                    e5:2c:ff:1a:b2:ed:dd:b6:be:18:e0:33:28:d2:31:
                    08:81:e2:c6:a6:9f:c8:d6:ef:8d:dd:3a:32:f1:90:
                    10:c9:8a:5f:2a:8f:5e:3c:a5:49:0f:ff:21:24:5a:
                    05:be:ff:81:66:41:21:07:76:49:ca:26:13:b3:44:
                    77:e2:c7:0b:cd:f2:3a:0e:71:81:df:ce:d6:7e:ee:
                    75:50:3e:1d:2d:3d:d9:fe:13:9e:c0:03:d8:ea:f3:
                    f9:0d:93:8c:80:f0:1c:02:c1:d1:af:ac:63:81:b5:
                    df:1e:43:e3:24:44:8c:ee:36:e4:f8:c0:dc:22:6e:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E4:76:2B:B1:72:0A:39:0C:E1:75:8E:F0:D8:FF:D5:17:8D:2C:C4
            X509v3 Authority Key Identifier:
                keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fc:eb:5e:e9:ad:33:cd:99:42:77:c1:04:37:61:6e:42:a0:
         18:c9:10:31:ce:82:03:1c:cb:57:22:df:5e:02:42:32:1e:a8:
         a8:59:50:91:41:4c:60:14:90:7b:b0:20:ce:91:a2:23:3e:7f:
         29:c9:7b:c1:43:d7:e9:f9:0c:dc:f0:cb:1b:14:22:02:07:af:
         e8:6c:9f:de:34:85:64:24:b9:c4:71:fb:3d:cf:82:d3:f1:f4:
         5e:f3:e5:5b:7c:b0:3b:af:28:76:85:90:16:ac:f3:37:db:de:
         8b:01:05:b9:9c:4a:ce:96:f1:f0:af:fa:22:df:62:2b:5e:9a:
         47:15:56:cc:31:83:eb:7d:a9:7b:f5:7d:2e:bb:2d:2f:0c:c2:
         35:b1:d7:00:74:19:32:09:48:c6:30:17:09:29:53:8b:63:68:
         35:bf:62:81:d0:f9:3b:e8:6e:03:c1:19:ef:5e:7f:be:ba:ad:
         f3:f2:26:58:3c:8a:c6:24:da:15:67:2d:1f:19:bf:ef:84:a6:
         0d:a5:1c:d4:8f:35:bf:dd:5b:28:92:55:26:7e:64:e7:e9:3d:
         c5:30:60:c7:97:e5:fc:5a:5f:81:ff:13:e7:fc:4e:b8:bb:56:
         02:2f:cc:f1:30:87:5e:ed:94:e8:c8:e4:62:ce:d8:d0:f0:70:
         3f:78:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----