Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File:                     BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier:          QTUm1kDO9dDe12rZLSolFjC3kYakNuHFFIFrXBsBUyk=
Subject key identifier:   05:68:D9:1F:0D:DD:3E:4F:4D:CB:A6:62:B6:12:CF:A9:A2:3F:4B:1A
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       01A13F39E775F885358D790B6DE47306F3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number:          0936
Signing time:             Thu 15 Oct 2026 11:02:01 +0000
Manifest this update:     Thu 15 Oct 2026 11:02:01 +0000
Manifest next update:     Fri 16 Oct 2026 11:02:01 +0000
Files and hashes:         1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: Zl1RSJgCkS/2pmpbUvfIZFm5J1RtqGr9sp0FjYnplN4=)
                          2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:e7:75:f8:85:35:8d:79:0b:6d:e4:73:06:f3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Oct 15 11:02:01 2026 GMT
            Not After : Oct 16 11:02:01 2026 GMT
        Subject: CN=0568d91f0ddd3e4f4dcba662b612cfa9a23f4b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:e7:72:a7:99:22:7a:9a:de:a4:7d:85:3b:
                    a1:17:dc:24:40:49:b8:fd:fd:18:0f:38:84:22:22:
                    90:b7:d9:e8:84:78:13:9b:cc:b4:d4:ea:27:df:db:
                    58:02:b6:7e:43:4f:24:50:df:33:31:b1:d6:e2:c8:
                    f5:93:4c:23:b2:09:f0:3f:b8:e6:c9:2a:6b:88:13:
                    a1:4e:76:2d:8f:60:29:d8:06:5e:85:71:ac:dd:6d:
                    03:19:7a:9a:3e:60:2a:4d:d8:e7:95:20:08:4b:5c:
                    54:40:52:cc:68:20:9b:10:dd:21:3e:c2:d6:06:21:
                    73:af:26:c2:24:11:4f:c3:67:24:35:26:ee:de:6a:
                    d3:1c:d5:3b:4e:67:27:73:e5:7c:fc:42:2c:db:88:
                    a1:38:9b:a3:1a:37:50:a1:34:7e:e0:0a:13:25:b8:
                    2c:19:66:bc:a0:23:c2:28:25:26:23:2b:c5:3c:0a:
                    9b:a3:b6:56:8c:1c:72:f1:60:37:26:aa:1d:fb:c5:
                    d1:f4:80:eb:31:04:02:87:c4:7b:ae:3e:3d:1e:c2:
                    86:06:b5:44:cb:65:51:ac:57:fe:ea:cb:bf:d4:c8:
                    24:3f:49:38:bb:42:c2:c7:23:7a:a0:6e:e0:0b:da:
                    f7:49:94:68:00:a0:29:8f:38:88:0c:7a:2c:50:7c:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:D9:1F:0D:DD:3E:4F:4D:CB:A6:62:B6:12:CF:A9:A2:3F:4B:1A
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:18:9f:22:b6:0b:dc:7e:88:5c:31:1d:19:ea:1e:45:66:5e:
         f9:34:45:6b:99:e0:14:eb:40:75:ca:01:fb:b7:d2:35:80:57:
         72:82:5f:62:ad:c7:0f:7c:53:1c:94:d7:99:71:77:80:73:77:
         b6:ac:01:a3:57:5c:11:fb:6f:76:e4:e2:29:c7:4a:15:11:86:
         84:8b:14:d5:09:4a:28:a7:db:12:d3:be:03:17:a0:c2:ad:27:
         ce:58:9e:e5:0d:3e:9b:6b:ad:35:62:63:1e:46:16:cd:93:92:
         9e:33:d3:99:03:0d:de:49:38:49:56:5d:72:01:ab:77:13:4a:
         74:38:4a:0e:77:99:7e:1f:37:24:d3:e7:46:3f:dd:3f:e1:d7:
         ac:3d:83:e1:86:23:8e:51:f7:71:20:ef:ef:8a:32:9c:73:1e:
         e0:cd:31:14:34:57:2a:9c:59:4d:f4:06:47:fb:2e:0a:06:0f:
         89:e3:df:90:58:d1:2b:c1:ea:53:ff:72:ca:e4:07:f2:23:fb:
         06:34:4c:cd:41:74:09:c7:2f:61:3d:45:b1:33:fc:aa:6c:0a:
         14:01:63:09:0c:d7:d6:25:1b:29:91:fb:31:21:38:fa:5f:31:
         25:24:a1:d0:b9:91:b3:db:a7:b3:1b:1c:a8:2b:49:61:f2:36:
         92:69:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:30:38 2026 by rpki-client