Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File:                     BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier:          Ml0s0S3HaYz/K+dYIeQ2oRZQCqXVLVBOIATeHXmyGgc=
Subject key identifier:   3C:A8:2F:81:78:94:29:46:C3:86:40:98:88:CE:EC:E2:E0:5D:B1:61
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer:       /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial:       01A003CB69F1306CD9F0D17663328AF61D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number:          0BAC
Signing time:             Sat 15 Aug 2026 05:00:57 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:57 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:57 +0000
Files and hashes:         1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: wf0pLCAoTFa7gktGP4dpA2bo1A+e/d4oq0VKHxEqp84=)
                          2: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (hash: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:69:f1:30:6c:d9:f0:d1:76:63:32:8a:f6:1d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
        Validity
            Not Before: Aug 15 05:00:57 2026 GMT
            Not After : Aug 16 05:00:57 2026 GMT
        Subject: CN=3ca82f8178942946c386409888ceece2e05db161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:77:a2:d5:60:62:13:05:61:f7:c1:2e:bc:
                    22:57:6a:66:2d:e9:94:59:1a:d8:69:c9:33:44:7d:
                    f3:20:3d:50:56:dc:05:a0:f4:ee:cf:79:b5:9e:6e:
                    50:99:f5:a5:31:87:d7:f0:ad:0a:f1:16:31:2c:eb:
                    2a:9a:06:50:80:91:0e:54:04:6a:0f:66:7a:dd:ce:
                    95:77:65:a7:36:28:d1:8e:b6:35:45:be:41:11:7f:
                    ff:47:a4:8b:f4:14:ea:43:8a:96:a4:64:b7:10:d4:
                    79:9d:c6:45:72:33:1c:dc:5b:4e:26:ab:18:5f:ad:
                    2b:b0:a6:67:f0:17:18:8e:3f:e1:e1:7e:4b:83:60:
                    63:22:c9:4d:26:8a:f0:ee:2f:d4:06:c7:d2:7d:7c:
                    8b:e3:e9:31:06:73:71:5b:a6:43:80:75:be:a5:6a:
                    d5:ea:99:5a:06:58:3d:62:c3:7a:e2:44:ac:7f:7a:
                    e1:b1:f0:4c:2a:7d:6a:da:1e:11:bb:e5:f1:16:28:
                    32:b0:d0:47:f8:22:e5:45:10:b7:04:0e:d6:69:6a:
                    ad:91:20:97:37:a0:12:16:e8:f0:1c:71:50:c7:0f:
                    9a:e3:89:64:99:ba:69:67:6a:74:ad:33:fb:ea:90:
                    65:df:8d:ce:a2:33:56:cb:bf:e6:c6:2d:3e:58:20:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:2F:81:78:94:29:46:C3:86:40:98:88:CE:EC:E2:E0:5D:B1:61
            X509v3 Authority Key Identifier:
                keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:84:df:3c:82:57:b0:eb:68:0c:ce:1e:0e:16:1a:a5:c6:
         cf:00:b7:c2:e1:5c:86:08:c1:63:85:81:b7:a1:51:d9:16:79:
         09:10:2c:86:41:b2:87:b6:51:e6:cf:fd:e6:df:79:2f:cf:d3:
         26:5a:7a:b9:18:43:95:ef:cb:19:51:e3:01:80:36:41:e6:f6:
         31:a6:e7:14:27:0b:b8:77:37:fc:17:cf:ee:c7:c2:8d:14:60:
         75:2e:40:f0:21:e4:ee:8f:9c:00:50:09:3f:ab:9d:55:8c:bb:
         c6:e5:63:5a:19:2c:2b:62:81:72:af:87:d0:44:50:e8:8d:81:
         e5:89:da:f1:12:52:76:74:b7:34:e3:ec:de:11:f6:6c:e1:f3:
         9b:31:69:e1:e9:1a:1a:c4:1e:76:af:eb:a1:6c:cd:72:c4:a9:
         bd:a0:09:5d:3e:2f:bf:c4:5f:0e:27:47:13:1c:a1:ab:7b:df:
         e6:a9:b2:d2:7f:1e:b8:29:22:b4:93:8f:1f:4a:a4:5f:c5:33:
         76:86:f2:6b:a1:fe:93:61:4a:f0:3f:9b:28:5e:80:d3:d5:7c:
         10:4a:4f:c7:b1:ff:39:de:1e:cb:a6:93:fc:4f:44:ff:1a:5f:
         5c:01:f5:9e:76:24:76:c2:b6:21:89:b3:89:dd:4e:03:49:d5:
         61:e8:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:47 2026 by rpki-client