Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier:          JIrN3wTra3u2ygeFPgqa/5c1aomPT2eR31wSLzsqj+8=
Subject key identifier:   E9:C5:D0:93:60:B8:59:24:A7:68:2C:33:5E:63:5D:4B:38:C8:17:2F
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer:       /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial:       019E2A393B4A5B3357AA1B936372DBD9DA91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number:          0492
Signing time:             Fri 15 May 2026 06:00:54 +0000
Manifest this update:     Fri 15 May 2026 06:00:54 +0000
Manifest next update:     Sat 16 May 2026 06:00:54 +0000
Files and hashes:         1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 8unBlwRwnxCK2jHmuA9J9xnDZgN8exSL8t0APw+Gpes=)
                          2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:3b:4a:5b:33:57:aa:1b:93:63:72:db:d9:da:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Validity
            Not Before: May 15 06:00:54 2026 GMT
            Not After : May 16 06:00:54 2026 GMT
        Subject: CN=e9c5d09360b85924a7682c335e635d4b38c8172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:c5:ac:ba:36:62:a6:3d:65:72:7f:d7:fb:
                    64:be:51:54:d9:6e:62:80:74:fa:8a:18:c6:0b:bf:
                    4a:c8:46:69:f3:88:84:d3:a7:be:18:a0:82:ef:de:
                    6c:6d:85:84:d4:81:1f:1b:79:53:eb:62:43:18:46:
                    93:b5:99:7b:23:f1:d6:ad:d8:69:cc:83:d0:5b:1e:
                    aa:e4:82:5c:2e:ed:fa:17:da:82:7f:49:4f:f2:47:
                    c3:69:b8:60:9f:17:01:5b:5e:ae:c2:3d:67:9d:25:
                    72:c2:b2:32:75:1b:a5:5c:b6:10:a2:7f:28:b1:0c:
                    34:70:72:0d:48:38:a1:92:0e:ff:d2:34:3c:6f:d0:
                    83:07:53:f9:ff:fb:51:19:22:8b:10:24:eb:4a:f1:
                    d9:13:02:83:c5:e1:42:dd:08:cb:d6:e2:8d:c1:be:
                    9a:ed:4c:bb:c0:89:05:6f:ff:f1:bf:b3:6b:49:d7:
                    4a:ee:71:66:76:da:eb:03:f0:a6:4d:5e:8f:e6:ad:
                    1e:02:7b:46:61:93:2a:c8:f1:24:85:4b:b2:88:ca:
                    65:a3:eb:d6:53:98:24:8f:08:bb:50:f6:b6:be:e7:
                    6f:e7:61:fe:71:0c:50:1b:cc:9f:16:34:58:d7:38:
                    37:b2:72:63:24:fe:e8:0e:ea:3f:18:db:25:12:fa:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C5:D0:93:60:B8:59:24:A7:68:2C:33:5E:63:5D:4B:38:C8:17:2F
            X509v3 Authority Key Identifier:
                keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ba:00:d3:51:ac:50:17:6d:58:43:30:b1:78:22:75:56:62:
         dd:ac:74:1e:49:ea:90:b7:42:df:f6:9e:bb:eb:82:3a:3e:63:
         e5:bc:bc:a9:a5:80:e2:86:cf:d1:86:60:2d:ea:e8:34:32:38:
         17:8c:52:fa:17:fd:65:8d:e6:52:13:97:ea:52:d9:56:40:69:
         79:b2:8a:b2:35:a6:d4:3f:7c:45:0b:5a:ac:cd:94:8c:ec:9c:
         13:53:10:05:6e:e3:16:e0:93:3e:38:72:fe:2a:26:03:f0:79:
         ec:e5:ae:47:ca:60:58:fd:2e:7a:80:c7:ee:12:ce:73:09:6b:
         56:bd:f2:b2:44:97:a9:9b:7f:b4:64:9b:58:9f:a9:90:73:a1:
         e6:f6:0d:64:4e:3a:f7:78:8c:0a:82:8c:4b:4b:78:2c:56:12:
         84:eb:25:36:e8:5e:fc:3b:40:5c:ab:3e:5b:71:96:c7:0a:0b:
         18:6f:ba:74:18:95:05:66:a2:ee:89:f3:ab:7b:dd:37:64:8f:
         91:ce:b0:88:9f:db:82:13:c1:b7:9c:8c:3b:3d:34:a0:32:6c:
         46:0a:82:be:cc:1f:b4:7b:04:aa:2e:1a:62:e6:51:7a:ca:e0:
         56:32:48:5d:39:56:24:20:d2:5a:3d:15:d1:47:0a:11:8e:25:
         9f:1b:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:19:11 2026 by rpki-client