Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File:                     BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier:          uHuvRitqBe71EHmYW9A043Y7zbmrPVzOsu/O63ZljlI=
Subject key identifier:   D8:B0:1A:6F:0A:98:69:8D:6E:3F:D8:A1:A8:77:8C:D4:A3:D7:35:89
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer:       /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial:       01A001014D00FE5465472A21E12D5CF95EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number:          0D40
Signing time:             Fri 14 Aug 2026 16:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:57 +0000
Files and hashes:         1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: W2K7useacp2fIgpmgHqMylOyEZv+Gny5WAan2ZzKPJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:4d:00:fe:54:65:47:2a:21:e1:2d:5c:f9:5e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
        Validity
            Not Before: Aug 14 16:00:57 2026 GMT
            Not After : Aug 15 16:00:57 2026 GMT
        Subject: CN=d8b01a6f0a98698d6e3fd8a1a8778cd4a3d73589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:4d:6b:a6:e6:da:47:9b:43:61:04:90:21:
                    44:ff:17:c1:e9:f9:1c:08:61:09:90:4a:ee:48:b9:
                    18:a0:fa:17:20:22:ba:c7:5c:4e:1a:70:70:a5:30:
                    c1:78:d3:b7:46:c0:5b:1d:25:51:98:3e:59:9a:6b:
                    07:e5:5e:04:53:95:aa:79:81:e5:65:55:a6:74:55:
                    8c:7b:9f:fa:13:a7:62:1f:f2:18:54:fd:c3:24:d6:
                    9f:6c:91:b7:b7:64:01:a6:da:52:d0:0c:d9:00:56:
                    b2:90:eb:ad:09:b8:5f:57:0a:11:f7:94:c6:55:7e:
                    89:fb:a3:4c:13:a8:44:4b:52:81:f0:fb:9c:49:98:
                    68:09:ea:b2:73:77:bf:1c:17:09:80:98:df:90:1b:
                    cf:64:65:cd:eb:62:ae:4e:68:18:bc:b4:3b:59:48:
                    ea:5d:84:e9:d5:b6:9c:02:03:88:13:d5:80:12:e6:
                    17:fd:c8:6b:9b:fe:18:94:95:4f:6c:4b:ad:ee:65:
                    e5:54:f2:f5:09:be:94:fc:0f:a0:15:bf:bb:ad:5c:
                    db:65:dc:dc:7e:a3:de:ca:45:f3:89:21:13:aa:e2:
                    f0:dd:6d:72:33:f1:66:71:b0:2e:d0:a9:0b:bb:55:
                    3d:da:43:96:50:dd:41:ea:e0:65:0e:32:6e:2f:1c:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:1A:6F:0A:98:69:8D:6E:3F:D8:A1:A8:77:8C:D4:A3:D7:35:89
            X509v3 Authority Key Identifier:
                keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:74:51:e4:c2:52:ce:65:e2:8a:2f:91:d6:16:4c:29:a3:
         24:37:75:c2:10:6b:93:32:18:d4:9e:d4:cd:da:a6:82:43:ab:
         42:84:5b:f2:2f:d1:91:27:df:b7:06:e4:96:92:81:2e:b6:60:
         55:db:86:51:3b:dc:c6:f9:60:1e:49:9e:65:b9:de:a6:36:cb:
         3f:91:95:81:2e:2f:e6:aa:b8:f2:e1:e9:ab:c1:2f:59:8a:30:
         dd:d1:3b:c6:20:4e:07:5a:b7:35:b6:87:9b:bc:52:e9:13:c7:
         f2:14:4b:46:1a:0b:3e:59:15:c8:98:ba:c7:63:a9:89:b2:b4:
         60:ba:8b:52:62:03:50:b2:a4:bc:12:94:79:aa:c6:02:45:02:
         c0:ba:e0:2d:e0:c0:10:1b:f1:61:59:05:78:8b:c2:a9:b6:19:
         cf:2a:9d:c0:94:6f:19:a2:c7:23:30:da:49:7c:5c:0b:13:51:
         bd:55:d8:bf:12:db:63:dd:9a:ce:33:41:73:3a:7d:b3:10:ae:
         cb:67:33:14:3d:b1:66:aa:fa:b0:90:f4:d7:1f:a0:25:e2:a8:
         35:b1:cb:43:36:cd:fc:ea:5c:da:50:b9:92:8d:9a:5f:d0:92:
         80:10:93:07:5a:4a:55:09:26:1d:12:5e:21:4d:54:68:c6:1c:
         0e:3a:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:09 2026 by rpki-client