Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          kaAzjDRUUdn5R9g2UVD8VtDBzyJK2B8NR0bb4tAYGss=
Subject key identifier:   EC:27:78:3A:88:A9:B4:3E:92:7E:C7:6D:1A:9E:A7:94:86:2B:B9:9D
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019F1943280849283CCFED1BB61D4BF24EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          08BC
Signing time:             Tue 30 Jun 2026 16:00:59 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:59 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:59 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: yQ+h2MQqta+jmBDH1OmIotroPm78esHp9n8s+WOBVuw=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:28:08:49:28:3c:cf:ed:1b:b6:1d:4b:f2:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Jun 30 16:00:59 2026 GMT
            Not After : Jul  1 16:00:59 2026 GMT
        Subject: CN=ec27783a88a9b43e927ec76d1a9ea794862bb99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:36:fb:49:9d:e6:87:fb:cf:7c:ce:9c:82:
                    2e:dd:f4:47:9d:6c:f8:dd:16:20:a2:b2:04:24:2f:
                    e9:fa:cd:2e:51:53:7f:a6:a3:d0:74:cf:4a:4c:87:
                    88:f6:aa:3f:14:08:2f:57:6a:79:ef:37:b0:73:11:
                    fa:7b:6f:ff:2e:df:ad:72:b3:65:d5:2e:4d:ca:62:
                    8a:13:73:b6:e4:fa:d5:c0:2d:4b:fa:ef:89:bc:84:
                    59:99:9d:28:44:0b:ac:6d:68:3b:34:fe:cc:d2:89:
                    15:2b:73:73:ca:e0:2e:2e:d7:22:18:ee:f5:65:80:
                    0b:ce:1d:ac:e0:03:82:b0:3a:ba:30:25:07:66:6e:
                    c5:58:97:af:41:4c:93:39:b5:45:5b:16:5b:df:0b:
                    2c:f4:24:79:37:61:2e:6a:76:32:5f:ed:b2:fc:84:
                    54:fa:8d:9b:bd:1f:03:9f:39:e7:dd:c6:bf:fd:62:
                    93:d9:48:2d:23:b1:3d:9d:df:e0:66:e4:e4:76:b9:
                    da:2e:1f:62:0d:14:13:40:c1:71:c5:21:55:f3:4a:
                    de:3a:97:7a:94:53:6b:1f:7b:8d:d9:ff:2a:ed:c1:
                    d5:3d:c5:e6:c4:17:be:76:de:57:da:c3:d5:4e:74:
                    bd:51:0c:65:62:5d:6d:9d:e9:93:e0:53:59:35:76:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:27:78:3A:88:A9:B4:3E:92:7E:C7:6D:1A:9E:A7:94:86:2B:B9:9D
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:24:a0:8c:d9:30:52:ef:b7:af:92:01:86:50:46:9d:35:
         3a:7c:37:a4:e0:ea:0b:9c:c5:e4:e9:c9:6b:03:5d:d2:ce:e0:
         fe:53:02:cc:74:de:c3:11:02:ca:63:11:6e:95:52:6f:d6:20:
         24:b1:b5:67:43:ab:ce:e5:42:f9:90:68:09:ad:e3:4b:4e:64:
         e3:be:ff:7c:6c:fb:2f:70:39:77:16:32:8c:cf:a8:4a:50:b6:
         b5:81:91:a4:63:5a:b8:65:ac:aa:32:49:95:7f:31:16:2c:95:
         b3:6b:7f:89:7b:a6:4a:3b:17:79:f4:22:dd:3d:c7:22:7a:71:
         87:74:4c:35:0a:e9:8a:6b:cf:e1:74:f5:de:e7:ce:8b:a7:ec:
         56:e6:57:bc:de:1b:2d:eb:3b:35:79:a3:f7:64:2e:5a:cc:fd:
         ae:14:45:29:57:10:1f:14:8b:d7:98:5a:51:3f:9f:ed:d7:c7:
         de:ad:1a:0b:17:b9:db:25:73:a9:04:e3:51:9a:9a:6d:fc:f3:
         0f:87:f5:c1:53:f9:7d:99:95:7d:22:18:e7:7f:d1:e5:5c:7c:
         40:2a:95:f6:88:16:20:98:d7:5e:b4:1a:7a:93:8d:c7:44:9c:
         f5:fc:77:c3:ad:f0:b1:62:94:ac:e9:2c:7b:ea:f8:6a:ec:fb:
         92:e8:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:10 2026 by rpki-client