Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          Vv4OMAZvaFyEX0xrg1DNqgELkqBgio8X2OkjuAW904A=
Subject key identifier:   BC:8C:81:13:60:D3:5C:38:80:D0:FA:7C:E8:2B:2C:30:53:C0:B5:D9
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       019E30A904A6069A1440E67A218602058A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:00:43 +0000
Manifest this update:     Sat 16 May 2026 12:00:43 +0000
Manifest next update:     Sun 17 May 2026 12:00:43 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: boHI2ULJX3PGLiuOWJiy1bRI2lA+VJDXAL+VGBZA2Ro=)
                          2: JKANABqd6E0fTlpYiraRYYJi5Is.roa (hash: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:04:a6:06:9a:14:40:e6:7a:21:86:02:05:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: May 16 12:00:43 2026 GMT
            Not After : May 17 12:00:43 2026 GMT
        Subject: CN=bc8c811360d35c3880d0fa7ce82b2c3053c0b5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:cc:4a:11:90:ba:bd:83:28:5a:4c:4d:82:
                    c3:38:0a:ec:d4:d0:40:1d:c4:c4:6c:ce:fc:2d:f9:
                    e8:f4:41:32:b6:fd:7a:d6:4e:27:b1:95:0c:32:d0:
                    59:b6:56:0c:90:5e:fa:3b:1f:c0:40:61:f7:40:c6:
                    55:03:96:a4:d2:7e:5b:95:bc:bf:fa:e8:d0:bd:f6:
                    20:eb:8e:2c:7f:c5:a9:d7:de:be:df:ce:7e:84:6a:
                    34:57:f3:99:4e:25:ce:df:60:ff:82:69:27:fd:b4:
                    d3:95:dd:9e:ca:77:46:4a:fc:0b:ce:c6:15:40:b1:
                    b3:da:69:65:f0:aa:ae:fd:00:5b:1e:50:0b:bb:aa:
                    0d:03:3b:06:a1:b2:28:84:ec:2a:a0:7e:30:a2:2f:
                    3a:25:ec:71:06:25:6c:e6:fd:53:6f:dd:af:27:3d:
                    b8:c1:73:63:38:4a:8d:33:af:4f:6f:52:9f:e6:f3:
                    47:2d:fb:b7:87:dc:23:14:14:b2:c6:24:12:45:a7:
                    ad:e5:e9:04:d4:97:49:5a:41:18:1a:5e:45:69:64:
                    ef:48:72:e2:55:76:1d:3c:73:58:d3:c4:87:93:28:
                    47:49:bd:38:6a:e0:29:d1:1c:f6:06:a1:07:05:c2:
                    a3:35:9c:37:2c:f2:b7:70:0a:c5:96:00:0d:1c:1d:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:81:13:60:D3:5C:38:80:D0:FA:7C:E8:2B:2C:30:53:C0:B5:D9
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:35:09:db:9f:3a:72:1e:52:ba:3f:f9:7d:75:ac:e6:70:
         69:63:38:22:85:20:f4:d2:16:dd:9e:98:61:24:b5:bb:ba:a6:
         20:4b:5b:0a:dc:f6:13:7d:89:30:71:81:b9:9d:a4:23:69:98:
         ea:42:fc:ab:5c:e9:45:cb:c8:29:19:60:e9:37:82:49:4c:e5:
         f5:82:7f:17:14:98:6e:6f:43:59:76:2d:f6:92:ff:c2:45:c1:
         36:97:c6:2b:b2:ce:9a:8f:9a:a7:6b:cf:1b:59:00:5e:a8:0c:
         ec:af:9c:ad:9c:93:93:8c:f9:8d:dd:8f:6a:e8:fd:4d:7f:7e:
         f0:b3:68:e4:1f:26:5f:60:ff:58:14:cd:29:70:c1:9a:67:8a:
         16:6f:9a:1d:47:7a:b4:99:ba:75:75:77:1d:a1:18:b5:8c:70:
         bb:52:4b:a6:34:56:9f:0d:c0:ce:25:69:c1:ea:de:35:c9:d9:
         dd:94:5a:d4:3d:69:2f:ed:30:c7:ea:0b:86:b6:67:b3:a5:b4:
         ab:65:2f:76:0c:f5:44:81:3b:f7:f8:ca:f0:08:b6:23:6d:9f:
         ba:63:6d:57:36:28:48:fd:7c:2d:d8:6d:5b:af:4b:44:19:d3:
         f4:0b:fb:a2:b5:5f:1a:d6:75:9b:8f:75:e3:15:44:62:ff:eb:
         ce:e3:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:42 2026 by rpki-client