Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          YGfufFef7nDzWyY0e+F6BugQfiqTP5QzlYjSV2dH8iI=
Subject key identifier:   87:46:8B:51:AF:D3:F6:96:A8:3A:AE:DC:B3:89:F7:C4:07:A7:C9:4C
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       019E3004D23E46C199C435F93813FDA37C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          0C32
Signing time:             Sat 16 May 2026 09:01:22 +0000
Manifest this update:     Sat 16 May 2026 09:01:22 +0000
Manifest next update:     Sun 17 May 2026 09:01:22 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: eWaFnpbHqOcQMkFhSSkKmql20JNkpDxnrnu/U9QtHEI=)
                          2: pY7lepz5HDLGPMLul3xF8ZoLGb4.roa (hash: xUY7XApdCCskYdTx86cHtQLmN8N5m7zUQqjbzI7nUzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:d2:3e:46:c1:99:c4:35:f9:38:13:fd:a3:7c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: May 16 09:01:22 2026 GMT
            Not After : May 17 09:01:22 2026 GMT
        Subject: CN=87468b51afd3f696a83aaedcb389f7c407a7c94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:8a:59:cb:58:bf:48:ba:e7:82:00:0d:6a:
                    9b:f5:26:7e:b1:15:bb:a4:e8:95:1a:9c:cc:c2:18:
                    e5:f3:31:fb:c6:2d:df:06:61:5e:58:ea:9b:5c:2b:
                    0e:3f:4e:f0:1e:44:8a:52:d3:e2:ec:97:51:ca:3f:
                    0e:d6:93:a4:3c:07:16:ac:c1:cd:c5:de:d4:5b:56:
                    7b:f6:ab:97:db:2a:2f:67:1d:66:bc:b7:be:11:67:
                    d7:4b:df:31:95:54:b1:1d:21:08:a2:ab:cf:96:db:
                    f3:dd:b0:04:78:92:5f:32:3a:e3:d5:fc:00:73:d8:
                    cf:cd:87:56:66:f8:03:7b:25:2f:74:33:a3:67:e4:
                    36:44:33:57:9e:81:48:af:c0:a1:b6:9d:1b:26:ed:
                    49:75:41:08:62:61:6b:99:bf:19:ad:5c:b8:5f:6e:
                    bf:2d:df:20:b2:05:27:8b:7a:3c:cb:d1:49:58:f2:
                    51:cd:94:a2:6f:1a:7a:d4:e9:d0:88:83:be:8f:f4:
                    e8:f0:73:35:e1:0a:c8:ab:05:e5:91:33:8e:09:59:
                    7a:11:e8:be:2d:83:f8:f9:2f:1c:eb:a5:c0:ca:b3:
                    aa:ec:5d:50:11:27:b9:26:31:0d:83:f2:4d:fa:70:
                    92:b2:ba:56:3a:4e:89:bc:5f:1c:ba:58:59:2f:d5:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:8B:51:AF:D3:F6:96:A8:3A:AE:DC:B3:89:F7:C4:07:A7:C9:4C
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:03:f0:41:3f:75:1f:dc:dc:32:7c:f1:46:ce:33:41:96:84:
         42:0b:2b:7c:4e:6e:e7:7d:7f:b6:2c:88:26:87:37:d0:e9:79:
         97:66:df:a6:c1:d4:8e:ce:56:2e:6c:d0:5a:d6:41:88:0f:db:
         b6:a6:05:9c:b3:76:88:32:7d:e1:3f:96:75:81:b0:db:82:b1:
         50:ee:f4:56:c0:a8:a2:78:8e:ab:4d:76:a9:c1:3e:95:a8:53:
         7f:90:c4:1a:7f:b7:35:a7:ad:41:b6:42:46:1e:9f:f5:f8:83:
         4c:fb:93:a1:3b:ff:78:7f:e3:e2:da:e4:39:36:4e:68:82:aa:
         91:63:bb:80:68:8e:31:88:a7:10:08:a3:00:d0:00:f5:ad:3b:
         cc:34:41:70:dd:3a:55:15:35:e8:7f:62:ae:f6:44:cb:cb:e1:
         0d:0f:f2:94:2b:1e:b7:fa:4c:7d:18:1d:9d:fb:9e:ab:b1:a9:
         10:d3:96:2a:04:e9:25:bb:fd:7c:ec:46:cd:39:7a:96:d4:c5:
         81:51:21:7c:62:54:e9:a2:6d:23:1f:54:bf:92:aa:e0:aa:c4:
         54:81:c8:c2:4d:eb:d9:07:d9:34:26:bd:44:d3:53:a7:d8:66:
         41:89:89:9b:70:da:f7:6d:12:cb:46:04:68:66:bf:ec:e0:12:
         9e:4f:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:08 2026 by rpki-client