Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File:                     BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier:          GtCvn/74j21L1rvsD7F97589JBDlyB/ucuNtJAWAknA=
Subject key identifier:   9A:D0:BD:0F:B7:6A:37:13:F7:51:94:54:8B:FB:E0:87:CC:A7:33:4F
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer:       /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial:       019E30A8FBA3B393CAAAE6E4D8CF0225EAC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 12:00:41 +0000
Manifest this update:     Sat 16 May 2026 12:00:41 +0000
Manifest next update:     Sun 17 May 2026 12:00:41 +0000
Files and hashes:         1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: H0hCz4HGHJTH5YrGIaU/vac5eUZPHwKZWuXOAhXiLKk=)
                          2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:fb:a3:b3:93:ca:aa:e6:e4:d8:cf:02:25:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
        Validity
            Not Before: May 16 12:00:41 2026 GMT
            Not After : May 17 12:00:41 2026 GMT
        Subject: CN=9ad0bd0fb76a3713f75194548bfbe087cca7334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:51:07:b8:6f:d5:50:bf:11:43:21:51:c9:
                    2d:03:e3:88:13:a6:45:ea:d7:e4:77:dc:e6:95:b1:
                    75:21:d6:9c:da:8a:c6:d8:38:f3:92:0a:b0:b5:d2:
                    64:81:97:c6:ec:15:1d:f3:ad:23:27:f5:aa:3a:0e:
                    5d:e5:35:30:a6:db:ec:dd:7e:16:99:a8:ab:48:e2:
                    8b:c8:80:0b:f6:18:9c:04:66:51:c8:91:ab:66:31:
                    a3:9a:a8:7b:46:30:a6:0f:5c:9d:2d:21:f1:f1:fb:
                    2d:1e:7f:4e:b9:09:3f:00:fd:5d:e1:94:e8:a0:e4:
                    b2:e7:01:7e:84:60:9b:6c:42:c6:6f:4c:83:a9:ae:
                    52:b4:29:fe:61:bc:75:6f:a6:da:be:9c:cd:7e:cd:
                    c0:f4:36:57:38:cf:21:89:d5:3f:0b:9d:88:d2:7a:
                    e5:1b:dd:ae:57:6a:cb:09:ea:7d:20:67:77:24:cb:
                    18:2c:26:68:eb:a3:50:2a:43:d2:ef:a0:10:59:a1:
                    da:d3:1d:03:6f:9c:eb:7c:10:b0:ef:59:0c:66:cc:
                    af:92:d0:d7:5e:eb:8d:67:d8:81:5d:dc:f2:7a:00:
                    bd:6b:7a:d1:84:40:0c:7e:7b:dc:a3:f3:c3:9e:0b:
                    34:0f:58:bd:68:27:6e:76:27:57:aa:25:06:1e:53:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D0:BD:0F:B7:6A:37:13:F7:51:94:54:8B:FB:E0:87:CC:A7:33:4F
            X509v3 Authority Key Identifier:
                keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:99:10:b3:fe:2c:b1:c7:e4:33:d3:21:20:ad:21:ee:2d:c0:
         4b:9d:c4:e0:4f:3f:5f:96:4f:a4:6c:43:ea:1b:ca:f3:f3:06:
         f0:ee:02:bc:09:c0:61:c0:b6:73:bf:f7:fe:2f:3e:d1:4f:fb:
         66:43:49:55:2c:a8:1e:62:eb:1d:dc:47:b4:70:74:75:6d:77:
         60:31:e7:22:39:a7:86:2b:74:40:70:b4:f7:05:cb:d5:77:9f:
         ac:7d:1c:5c:8a:9b:0e:87:f4:ba:2e:08:26:e5:45:9a:82:ca:
         0a:29:14:a4:df:f9:45:38:78:01:7a:5f:ef:9c:8e:ad:6b:c8:
         8f:35:0c:50:df:e3:fe:bc:08:cf:19:51:41:a2:84:1a:8d:9a:
         5f:f7:c3:e1:be:3d:57:7b:0d:c2:5e:5e:b6:7a:4c:91:4c:00:
         4c:02:1b:94:b7:6b:8d:b4:6f:9d:46:5b:98:34:a3:7e:b8:2e:
         0b:1a:48:b6:f6:5e:8e:a5:aa:4b:1e:64:84:17:75:78:5b:44:
         b6:80:3c:e6:31:a5:6d:a6:54:ba:d9:94:6a:83:90:75:44:8d:
         b2:85:70:e0:f6:57:bf:d8:81:bc:44:43:92:9a:29:8e:59:85:
         a8:55:ac:2c:5d:21:0a:e8:f3:da:14:1f:dd:58:95:1c:5b:02:
         96:e5:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:17 2026 by rpki-client