Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          rHN1Gbb8FetRW84NwvgPYjKNH3FUolq1mwanXPVCMdY=
Subject key identifier:   98:B3:31:3B:11:03:D1:D7:3A:4B:99:C0:0A:34:A8:22:0B:92:CC:45
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       019E2A70042066E57E47AC2A6488D56E1CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          10B3
Signing time:             Fri 15 May 2026 07:00:44 +0000
Manifest this update:     Fri 15 May 2026 07:00:44 +0000
Manifest next update:     Sat 16 May 2026 07:00:44 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: AJHdJQZRKKpAu+D9Mdje1fMu2MKG044mA7JIeqvDQIw=)
                          2: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (hash: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk=)
                          3: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (hash: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:04:20:66:e5:7e:47:ac:2a:64:88:d5:6e:1c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: May 15 07:00:44 2026 GMT
            Not After : May 16 07:00:44 2026 GMT
        Subject: CN=98b3313b1103d1d73a4b99c00a34a8220b92cc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:d2:9b:66:3f:d8:34:12:03:7e:a7:2a:0d:
                    54:a9:5b:6c:25:a4:89:45:be:40:6d:90:4d:37:db:
                    22:0e:70:4c:cb:be:5c:e6:48:e8:b4:30:a2:5b:60:
                    44:94:4f:ff:22:2f:ca:bb:2d:54:a8:d9:fc:1c:7e:
                    dd:5b:42:b2:17:d4:60:97:fa:e1:d0:be:07:fa:49:
                    fe:9c:cd:90:f0:da:47:a8:99:3e:be:68:cf:5c:f0:
                    00:a7:af:db:c4:37:b1:90:f4:f0:41:6b:a1:ae:c7:
                    3f:41:17:e4:78:51:d9:50:94:0f:5e:02:aa:89:a7:
                    ac:be:28:db:a1:8a:44:de:bc:ef:e7:77:df:11:f0:
                    5d:c6:d7:d8:38:b7:b9:07:b0:c4:2d:f2:92:58:07:
                    e5:4f:41:49:41:95:af:9e:6b:0f:97:15:b1:31:8d:
                    f2:f5:1b:2b:22:93:d3:62:f5:65:fd:0e:fc:ec:33:
                    22:fb:29:67:0b:d2:e0:b9:57:af:12:d1:0e:d4:fb:
                    fb:12:82:dd:c6:78:30:8f:cd:f3:09:ff:24:66:4e:
                    27:82:a1:a7:5a:0e:1b:bf:aa:41:b6:dc:01:0c:68:
                    b3:e8:2e:4b:98:eb:be:7b:47:37:0d:cb:ec:b4:87:
                    00:c1:8a:2d:6e:7b:95:58:e0:ab:16:8c:14:0c:23:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:31:3B:11:03:D1:D7:3A:4B:99:C0:0A:34:A8:22:0B:92:CC:45
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:f2:d7:f4:ab:d8:2e:75:33:85:29:50:db:60:55:7d:e0:
         21:0c:2c:30:50:fb:d6:32:39:b4:95:b0:d9:52:cb:9f:f6:b6:
         32:9c:6a:fd:82:24:f8:d9:9f:21:3d:6f:43:8e:9e:a1:60:f6:
         18:4a:bc:62:8e:b0:40:36:dc:03:79:7d:ea:6c:cc:a4:27:a5:
         05:fc:94:c5:24:e8:a6:16:3a:63:10:f1:2f:18:7e:04:63:19:
         c0:bd:a6:04:24:07:5f:c7:9a:f9:90:fc:b4:44:69:9e:90:ef:
         0f:83:c3:31:50:12:23:cb:c9:9b:f7:3d:80:0d:97:0f:90:44:
         c8:5c:a2:93:39:e3:12:cd:30:e0:a6:ab:57:78:3d:9c:a0:90:
         9e:ab:59:95:88:dd:d0:75:c0:eb:79:3c:f9:45:77:e5:06:1d:
         01:34:2d:0a:ff:c8:1d:aa:09:44:cf:73:21:ef:25:b6:ad:3f:
         3d:b9:00:29:77:b6:4f:65:0c:f4:cd:45:e2:e8:e6:f8:e8:91:
         50:78:cb:6e:74:7f:6a:ed:fd:cd:88:a1:1d:48:38:04:75:d7:
         0e:1e:51:12:31:00:78:4f:60:82:37:9e:02:07:59:e4:1c:ff:
         cc:d6:b3:dd:e4:46:e6:b0:97:f9:04:35:1f:f3:75:de:65:94:
         bc:84:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:17 2026 by rpki-client