Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          nB3W2hjOOi3iwQI4KoXL14y0TwGB3m/oBwZmvlhp4nc=
Subject key identifier:   09:65:8F:AC:F6:00:E1:A1:79:8C:56:D3:63:13:8C:07:8C:48:77:49
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       01A00213F329E3546E5EC4D68D7B47720D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          16E0
Signing time:             Fri 14 Aug 2026 21:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:56 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: mYoUwV6DRA7t/onmpzd4lk0Act0YBIPzDqkoTBaOBoA=)
                          2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:f3:29:e3:54:6e:5e:c4:d6:8d:7b:47:72:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Aug 14 21:00:56 2026 GMT
            Not After : Aug 15 21:00:56 2026 GMT
        Subject: CN=09658facf600e1a1798c56d363138c078c487749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:18:8c:9d:ce:90:e4:8e:18:ef:95:6b:69:
                    3e:b5:e3:a8:0a:2d:57:fb:62:df:78:a5:10:b0:d0:
                    a1:9f:fc:d0:4a:17:0a:f6:fe:1c:54:9b:16:91:dd:
                    5f:e4:2d:ef:e9:3b:57:54:9f:1b:7c:37:17:7d:08:
                    21:50:b5:c7:80:21:22:74:23:dd:d8:bb:e6:c8:8c:
                    da:55:a7:f5:28:b1:68:4a:4e:6e:47:ae:aa:d2:5a:
                    92:c9:3b:20:3d:5c:7c:d7:61:2e:17:c0:be:42:35:
                    0d:e6:4c:47:2a:bc:96:32:74:f2:ad:65:45:05:a7:
                    ad:3a:c5:1d:11:2f:cc:7c:b4:6c:0e:e0:a3:40:12:
                    8a:82:d2:7b:7f:99:d4:23:f6:30:7f:c5:d9:1c:d8:
                    87:c9:7a:9a:b4:dc:63:bc:12:00:e2:b1:66:ba:b0:
                    55:c8:8c:cd:18:ac:02:07:06:1c:41:41:a3:49:02:
                    d4:b1:a8:17:28:9e:b6:87:49:54:52:22:7d:74:7e:
                    ed:14:c8:49:a8:82:4b:4f:ad:9f:f4:94:08:9b:10:
                    d6:b3:25:14:a3:d8:00:96:ea:65:a2:a5:24:01:1b:
                    8e:c8:09:6c:6d:6b:4a:52:a1:61:41:dd:f7:57:84:
                    3d:65:c9:f4:0f:b4:61:d7:db:16:c4:24:de:7a:f4:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:8F:AC:F6:00:E1:A1:79:8C:56:D3:63:13:8C:07:8C:48:77:49
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:26:c7:7c:16:3e:bb:e0:3e:c9:f1:30:71:f4:0b:ba:f9:
         70:c5:dd:46:74:3a:71:21:0e:bc:90:ab:ea:e8:2e:14:01:e3:
         e1:bd:e2:85:07:50:27:55:8c:a1:9d:bc:a1:7d:77:32:30:71:
         8e:26:9b:37:9b:b9:cb:01:7d:80:c4:01:18:df:0a:9c:96:74:
         a5:0f:ff:4a:04:f7:10:21:d6:b0:48:d2:c3:49:df:71:94:af:
         67:ff:50:e5:98:9c:3c:73:2c:48:a5:b6:c1:67:5d:08:10:1d:
         6e:49:c4:6b:55:49:41:13:a3:28:37:1f:c1:76:2b:27:c3:e1:
         96:59:35:1e:25:0f:81:fb:e5:1e:3a:c3:89:0d:d7:05:58:75:
         68:2e:11:a6:a3:92:36:81:7c:d6:de:13:ca:8f:2b:82:77:9c:
         d9:78:56:fa:4f:e3:59:38:6c:34:81:e3:68:43:66:cb:bf:e3:
         96:4b:5a:35:cc:db:f6:c5:23:21:c9:38:78:52:24:77:b2:b4:
         7c:3f:45:77:02:35:5c:76:a2:b4:6c:6f:ae:ce:e5:d1:13:9d:
         5c:39:d3:0f:ab:58:30:93:e9:7f:ce:9e:54:3b:3d:82:e0:f4:
         2f:a0:25:9b:54:30:92:34:77:be:f1:3b:5c:28:4e:94:4d:87:
         7f:44:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:04 2026 by rpki-client