Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          3rFlQMOKVWG0l0a3oXyONcpSBkVJgYEXdN9YRaooO20=
Subject key identifier:   71:72:FD:B4:6B:CE:B9:AE:F7:D2:04:E2:DF:9F:70:D2:DB:51:E9:36
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       019E303B989BCD3C2BF74B1C1BEB94284DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          182E
Signing time:             Sat 16 May 2026 10:01:12 +0000
Manifest this update:     Sat 16 May 2026 10:01:12 +0000
Manifest next update:     Sun 17 May 2026 10:01:12 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: 0DMgYaJwHSRDLcz5zmRw9uVm4zPIO7Jry68JcCoSHIw=)
                          2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:98:9b:cd:3c:2b:f7:4b:1c:1b:eb:94:28:4d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: May 16 10:01:12 2026 GMT
            Not After : May 17 10:01:12 2026 GMT
        Subject: CN=7172fdb46bceb9aef7d204e2df9f70d2db51e936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:22:c4:44:62:88:26:99:49:ce:38:ca:a9:
                    37:30:e2:bb:2f:11:72:6b:9e:4e:95:e3:33:84:79:
                    b0:4d:ca:20:a6:4d:b8:5c:e6:30:cd:a7:29:04:de:
                    50:ec:7d:81:eb:35:1e:a6:ea:48:7c:32:20:3d:7d:
                    73:8f:30:47:26:77:56:dd:cd:38:d4:be:b7:6b:e4:
                    af:f8:40:03:6a:c0:a0:8d:a7:64:33:65:95:ac:d3:
                    cd:99:e7:f9:3b:49:99:fe:55:7c:98:9c:da:8a:67:
                    47:1f:76:74:93:79:ef:01:b3:67:f5:41:4d:5f:05:
                    a8:d9:f2:17:b3:8b:fe:77:73:5e:b1:cd:8a:c9:bd:
                    79:19:98:fc:ab:fd:8a:16:66:1a:2a:4d:86:73:3f:
                    ec:7a:aa:f2:7d:87:7d:23:65:f7:68:7d:e0:0e:ad:
                    2a:02:40:8f:d0:d7:14:a8:7b:c1:74:b0:50:03:2f:
                    f9:72:3a:d7:f3:db:19:82:ce:5b:e3:c9:fd:7e:3b:
                    bc:22:43:dc:75:17:e5:c9:f1:0d:fe:d1:9c:53:37:
                    69:76:2e:c3:8e:ec:1b:ae:21:44:3f:78:dd:c3:10:
                    e3:e4:d4:b9:67:c0:64:fd:61:4b:a6:94:12:4c:76:
                    d1:f4:94:26:06:be:29:db:68:0a:79:ba:61:8f:0b:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:FD:B4:6B:CE:B9:AE:F7:D2:04:E2:DF:9F:70:D2:DB:51:E9:36
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:1e:77:85:22:5b:7e:3d:c0:ca:bf:05:de:8b:1e:03:9f:
         25:56:3d:2c:95:1e:2f:f6:4e:7e:8b:45:e9:02:25:79:41:c8:
         f0:4c:a9:51:29:38:72:de:b5:c8:32:93:24:03:a1:78:e3:33:
         85:cb:df:1e:a0:36:c9:23:09:db:c4:49:81:78:6b:92:48:09:
         ad:ef:32:a8:2e:a2:78:92:b9:dd:2c:b6:e4:aa:76:cc:69:d7:
         c1:85:27:6e:8d:b4:89:18:e3:e2:1d:e9:7d:59:27:55:56:80:
         7c:ad:7e:31:4c:e0:c3:7f:db:8f:10:03:66:16:60:01:99:49:
         5b:c2:70:dd:7a:53:3b:e5:ad:ce:9d:32:af:b6:e0:8f:c7:a7:
         d5:14:50:81:1e:d4:19:1e:dc:6b:3f:9d:04:c5:56:4d:dc:9d:
         b8:d6:cc:c2:23:5a:b4:a2:69:36:c0:c8:a3:29:cb:82:da:06:
         0d:a4:76:35:31:9f:d9:9c:51:20:14:4e:b6:11:a7:fc:7e:a1:
         11:55:3c:60:08:38:73:2f:58:cc:30:72:66:d5:93:0b:f8:79:
         72:15:42:29:87:aa:be:49:a3:ab:4b:1f:c6:8e:c3:1b:e7:0e:
         2c:44:03:b8:5c:64:7f:cc:4d:c7:1e:56:52:df:3c:4f:68:88:
         a2:9a:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:13 2026 by rpki-client