Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File:                     bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier:          Arka9amxHq+D3rcXGW9m6jbExXypXW6XDTRLfxQPnhg=
Subject key identifier:   FD:E1:14:60:54:23:50:DB:A0:20:44:69:80:A8:B1:D6:05:16:26:AE
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer:       /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial:       019E29CC234541E5C050179478B890C21A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number:          138E
Signing time:             Fri 15 May 2026 04:01:44 +0000
Manifest this update:     Fri 15 May 2026 04:01:44 +0000
Manifest next update:     Sat 16 May 2026 04:01:44 +0000
Files and hashes:         1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: 3mY+zuePG+CfRa/w/8jznYyrLRxEebZTSv/OHfU1+Tw=)
                          2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:23:45:41:e5:c0:50:17:94:78:b8:90:c2:1a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Validity
            Not Before: May 15 04:01:44 2026 GMT
            Not After : May 16 04:01:44 2026 GMT
        Subject: CN=fde11460542350dba020446980a8b1d6051626ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:0c:ea:c3:7e:bb:3e:45:89:6c:0d:83:60:
                    8a:51:c9:52:59:70:02:26:ec:a1:c0:32:84:70:6a:
                    6c:a5:b1:b8:4a:aa:4d:f8:cf:e2:bb:d4:da:36:03:
                    c4:df:c8:40:32:ed:ab:4a:ee:cc:49:ac:d1:cf:9e:
                    8f:5a:a7:3a:08:d8:f6:50:20:00:cd:d5:dd:ff:50:
                    df:3d:f0:2d:a5:e4:01:04:f7:ea:7f:95:3d:ca:53:
                    37:f7:3e:29:fd:87:ab:da:bb:e4:d0:36:c1:13:a1:
                    0f:89:f1:73:5d:21:03:15:8d:19:90:53:46:7e:e3:
                    c5:55:26:d7:0a:64:cc:f2:52:a7:38:3e:b6:40:5a:
                    5c:3c:e5:96:23:7a:9f:f9:de:03:20:5e:0b:d1:e2:
                    f8:93:89:7f:ff:2a:0f:27:ee:67:98:55:5e:09:1a:
                    56:18:8f:a9:41:5f:ce:24:7d:d3:5f:08:5c:23:c9:
                    73:42:2e:36:d7:29:f3:a5:07:52:6a:6d:6f:67:df:
                    79:e1:a9:62:42:e5:89:4b:f7:4e:0d:72:f0:54:52:
                    f8:40:6f:f8:7f:8e:db:de:36:10:87:4d:63:f5:37:
                    1d:c6:1e:f7:ec:34:0e:d7:f1:8b:9a:47:92:4f:dd:
                    12:0d:d7:b9:8d:45:fa:e2:3b:e0:59:be:0e:52:6d:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:14:60:54:23:50:DB:A0:20:44:69:80:A8:B1:D6:05:16:26:AE
            X509v3 Authority Key Identifier:
                keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:b6:38:5d:1d:6d:e5:bf:cc:05:90:c2:a0:7d:69:ce:8e:
         bc:55:84:19:8b:09:cd:c7:5f:09:d6:0e:0b:6e:43:b8:55:93:
         41:6c:d6:df:fb:db:71:58:52:a8:e1:e4:e8:09:94:9f:7f:a0:
         96:24:00:93:1f:93:d8:e7:82:1d:ae:66:e0:b4:21:c8:cc:34:
         e7:ac:09:ad:ab:e9:03:1d:df:fa:69:ce:d3:69:ba:24:cc:2e:
         f9:ab:e6:8d:c1:a7:32:33:9e:f5:36:e9:da:88:ec:a4:4b:10:
         fd:1f:a6:d6:e0:c8:c5:c5:90:02:75:94:99:a3:b1:ee:0f:77:
         c0:ad:47:fb:2f:44:c8:f4:79:fc:37:45:64:60:3e:e2:13:12:
         1b:22:17:96:d5:ac:38:f9:07:b5:a0:e6:0b:b7:dd:6a:0a:9f:
         c1:ac:22:18:b1:ba:e6:47:b1:6b:97:6f:fe:4d:5b:4a:53:8a:
         af:d4:7d:18:85:43:a9:83:d5:59:f1:4d:bf:85:a8:b7:e6:0e:
         d8:56:fa:a4:c5:d5:cf:d4:df:0c:89:e3:56:77:9e:cf:38:df:
         72:c8:99:76:cf:6f:ed:ca:e5:58:88:65:16:61:b4:ac:93:50:
         5c:e6:c6:e9:d2:8d:0f:6b:c5:47:60:cd:d4:96:fd:92:e8:8a:
         90:db:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:42 2026 by rpki-client