Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File:                     BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier:          dNXEJ16lRoL3bUx4WccDJL4V+0L6r6G8Oc0VHGuGfqw=
Subject key identifier:   4B:49:31:2E:E7:67:60:D5:DC:28:B8:34:19:FE:4B:EC:C2:63:7D:0B
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer:       /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial:       019E314E680AC4594871BABE042399802D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number:          1749
Signing time:             Sat 16 May 2026 15:01:22 +0000
Manifest this update:     Sat 16 May 2026 15:01:22 +0000
Manifest next update:     Sun 17 May 2026 15:01:22 +0000
Files and hashes:         1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: ZZa6O7mWYpZL7CMWsMWxf+6nbAzSRd9DG9OcYLcWt60=)
                          2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:68:0a:c4:59:48:71:ba:be:04:23:99:80:2d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
        Validity
            Not Before: May 16 15:01:22 2026 GMT
            Not After : May 17 15:01:22 2026 GMT
        Subject: CN=4b49312ee76760d5dc28b83419fe4becc2637d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:11:9a:02:6c:9c:7a:ce:c9:1b:19:2f:7b:
                    9c:20:9a:0a:6a:4b:2c:ca:18:ac:82:2f:38:7a:fb:
                    7d:69:25:36:bd:06:29:94:c6:94:4f:fd:10:11:9d:
                    75:49:df:42:49:4b:a7:36:9d:9a:5b:ad:ff:9e:b6:
                    57:56:eb:4c:dc:ee:cf:0f:41:43:62:17:4f:79:e5:
                    03:45:87:d8:d7:8c:eb:da:12:0c:16:ce:67:ab:ce:
                    c9:64:c9:93:1d:4b:4b:7c:78:51:29:cb:86:c3:ea:
                    2b:9f:3a:87:90:ce:5f:b2:8e:cb:1c:88:b3:29:7b:
                    66:2e:e6:4b:60:d7:74:57:c1:96:fe:c9:ee:dc:4b:
                    e9:0f:a6:5b:6a:92:63:60:e9:e1:f6:f4:ad:ac:fa:
                    a5:39:52:06:75:b5:05:bd:5e:e3:77:10:8d:e0:1d:
                    33:00:8d:48:43:86:2c:2f:c4:53:82:64:e2:90:ee:
                    32:89:e9:c4:75:41:3e:6f:16:3e:3f:af:48:5f:d8:
                    52:ce:8d:02:df:b5:14:b5:a1:75:3b:57:5c:c8:19:
                    4b:b3:c8:07:90:77:4d:cf:cb:88:4c:3c:0a:39:76:
                    fc:6d:f7:c3:55:72:3e:e0:12:09:43:e1:ca:08:09:
                    ed:a8:dd:33:f1:8d:e8:22:90:a8:33:1b:5e:f0:43:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:31:2E:E7:67:60:D5:DC:28:B8:34:19:FE:4B:EC:C2:63:7D:0B
            X509v3 Authority Key Identifier:
                keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:71:ec:0c:6f:59:45:12:c2:81:87:70:6f:d7:84:d6:87:
         12:4b:91:2e:e9:59:b5:df:2c:08:17:95:90:c3:18:78:4d:1b:
         4d:c5:b0:6f:21:c5:50:d3:99:53:b9:92:d2:b3:2e:51:df:8a:
         9b:a2:94:ec:a7:fb:96:e7:d9:2e:87:1b:1b:7f:e5:f1:4f:e2:
         81:d0:08:3f:3c:db:d6:10:35:d3:c1:c7:63:b2:d6:36:08:4b:
         f1:ed:1d:f4:c6:22:3b:45:3e:f0:6a:a9:c3:b5:85:bd:1a:d4:
         07:3a:4b:1c:23:1a:73:90:cf:50:42:ff:e5:f1:5f:be:68:bc:
         36:be:a9:4c:07:98:14:f5:63:68:10:f9:d3:97:e4:00:51:b8:
         39:5f:f4:c7:6b:8e:a6:44:0a:b2:41:98:d3:e1:6d:8a:a4:e6:
         bf:48:37:9d:57:df:23:83:79:45:e4:5c:50:50:3d:b8:62:eb:
         8f:37:ba:d6:fc:f1:e2:8b:8a:b5:a5:3e:c7:b0:04:d2:95:17:
         a6:36:9c:aa:ac:b5:61:8b:50:b8:2f:6a:2c:54:bc:db:23:7a:
         f9:58:14:2a:77:05:fc:43:44:2d:ec:c4:48:9e:4b:df:dd:9b:
         ed:fa:5f:13:69:b8:24:ff:c6:d8:86:de:cd:c8:e9:61:1a:aa:
         08:28:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:32 2026 by rpki-client