Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          How2tb+OcbmR1/iifLjpDXVJ1Nre1vZofLgnTOGkZkg=
Subject key identifier:   55:E3:81:5D:62:23:1F:21:BE:61:74:0F:3C:A6:7E:5A:8E:30:01:03
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       019E30A9B45B4A4FA25119B11DFA368DCCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          15EF
Signing time:             Sat 16 May 2026 12:01:28 +0000
Manifest this update:     Sat 16 May 2026 12:01:28 +0000
Manifest next update:     Sun 17 May 2026 12:01:28 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: lj50AM5ZAroUDfRpfoD+N15Ag7uAr6MdwI6mazHaQbE=)
                          2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:b4:5b:4a:4f:a2:51:19:b1:1d:fa:36:8d:cc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: May 16 12:01:28 2026 GMT
            Not After : May 17 12:01:28 2026 GMT
        Subject: CN=55e3815d62231f21be61740f3ca67e5a8e300103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:31:27:aa:02:44:8e:4d:5d:40:42:3c:57:
                    69:9c:e7:27:c9:9e:57:2a:8f:c2:e0:01:15:09:10:
                    3c:3f:38:42:fb:db:67:60:26:91:ca:16:d9:c1:23:
                    54:b0:cf:db:1a:25:c5:a1:e0:d9:6a:34:b0:6f:23:
                    de:46:f8:0c:58:e3:9f:ff:0c:4c:91:ac:94:da:75:
                    8d:eb:9c:07:c1:9c:d9:e7:79:87:1a:03:28:7b:67:
                    82:f5:e0:3d:8c:ff:51:1e:ed:2c:3f:dc:10:b4:ab:
                    e1:38:5a:9d:5b:a2:b8:aa:fc:12:e6:e3:3d:13:24:
                    19:38:a4:41:2a:93:b9:e9:9c:58:c2:6c:51:60:5a:
                    5c:c2:d2:da:82:e8:23:cf:d0:5b:9b:55:19:98:0c:
                    af:d8:6b:7e:55:b2:f8:46:87:b0:6a:bd:d8:04:64:
                    14:fa:81:0f:1d:02:11:1d:7e:c3:ec:19:fc:37:be:
                    fe:5b:f4:56:21:45:2f:06:6d:a7:47:4d:26:2e:13:
                    a7:f1:55:9d:74:55:52:a2:05:5a:b8:16:86:06:40:
                    8a:a6:b1:a4:5a:ea:c8:89:79:cd:b4:cd:ae:ce:47:
                    8c:57:e2:e8:e6:34:24:19:82:15:81:4b:d4:e9:ec:
                    ea:1b:2b:39:9d:46:20:3a:73:2d:96:b3:60:11:fe:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E3:81:5D:62:23:1F:21:BE:61:74:0F:3C:A6:7E:5A:8E:30:01:03
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9a:c9:a1:82:7a:70:61:c6:f8:99:37:97:fd:ef:cf:a5:c8:
         fa:92:94:a2:bc:f7:9f:1d:39:7a:a3:d8:a6:d3:6d:7d:7e:0c:
         00:b8:c8:d6:32:27:b6:f6:1a:70:a2:31:d6:6a:07:ca:cb:4a:
         75:b9:16:74:d6:49:6d:d8:c4:77:43:79:94:85:4c:3b:cb:53:
         1a:18:f5:d0:e6:ed:6d:11:2b:aa:e6:e8:df:af:63:f8:bf:14:
         de:f3:3f:e6:e6:a4:8b:f4:6c:28:48:76:6c:89:f8:e1:6c:86:
         39:b4:c4:d1:ab:a4:8d:95:c3:b2:bb:da:e0:40:1c:e3:b4:82:
         64:88:8a:5c:90:ec:5e:9b:8f:c0:20:4d:d0:ec:7d:b5:47:cd:
         24:36:98:cd:79:f6:96:dd:2b:9a:d3:64:a4:74:ee:ae:40:f5:
         4b:b1:84:57:d4:46:41:5f:13:3c:8e:89:20:81:61:28:5c:62:
         25:53:6c:a0:45:1d:ca:a8:60:ae:0f:a6:2c:b8:b6:ba:d2:0c:
         ff:c2:b9:ad:0d:10:a4:3d:16:f4:7b:06:ef:00:92:99:5c:07:
         33:f0:9a:7b:6a:c8:ad:28:09:d6:e6:72:19:06:96:31:db:a7:
         ec:cb:ac:9e:7f:ed:12:11:e2:a3:19:f5:95:25:28:21:e5:21:
         d8:e7:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:56 2026 by rpki-client