Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          vFXW6O7UJHqJ3xUISojUkzOTmpYVfR0yusS5g8pzD1k=
Subject key identifier:   E5:2F:F9:59:74:38:CA:A1:CD:04:D3:79:F4:0D:32:C6:08:E6:67:23
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       019E88A2FEFEDD7AD1D5DAD090FF465A391E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          193F
Signing time:             Tue 02 Jun 2026 14:00:43 +0000
Manifest this update:     Tue 02 Jun 2026 14:00:43 +0000
Manifest next update:     Wed 03 Jun 2026 14:00:43 +0000
Files and hashes:         1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: MCu7B6ReZbGlfjHg1zRc33lCz9S1uqznCKw7XLM3SH8=)
                          2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
                          3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:a2:fe:fe:dd:7a:d1:d5:da:d0:90:ff:46:5a:39:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: Jun  2 14:00:43 2026 GMT
            Not After : Jun  3 14:00:43 2026 GMT
        Subject: CN=e52ff9597438caa1cd04d379f40d32c608e66723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:c6:19:09:f5:5e:17:f9:61:42:40:11:d2:
                    03:10:d3:e3:40:e6:09:9b:d3:c7:e8:1f:f9:62:ad:
                    e0:74:d1:b8:c6:db:06:f4:19:bc:f4:e2:6c:e1:96:
                    5e:b0:0e:01:13:ab:31:65:97:67:93:97:4b:98:81:
                    02:5a:39:19:cc:fe:96:63:fc:af:e1:fc:68:69:3b:
                    81:25:37:62:d7:c5:d6:ea:12:e4:fd:de:c4:10:87:
                    7a:14:ed:e4:4a:90:68:51:d7:15:83:b0:3c:b9:88:
                    8a:ef:0e:60:e8:c7:e0:c6:71:b2:d8:29:2a:08:a8:
                    0b:7b:be:48:c3:a1:58:f4:2e:40:13:8b:44:a4:b1:
                    9a:54:4b:1a:9f:1a:dd:e2:23:13:f5:ea:b7:97:cf:
                    ac:d8:c8:9b:8a:7e:a0:9b:7d:f8:7f:33:21:dd:4a:
                    31:b9:0d:3b:dd:53:85:26:e0:1d:fe:ae:2c:08:fd:
                    5d:3f:8e:12:de:1d:2b:bb:c6:ef:46:53:1b:e8:17:
                    ee:bd:7a:3d:86:e2:53:fd:4e:5d:5f:07:01:76:8b:
                    5f:b1:96:af:2b:46:12:59:8f:30:07:bf:07:7a:0e:
                    52:82:0a:66:ea:3a:19:7f:99:d6:a9:df:85:85:66:
                    14:ed:0a:92:d2:ed:29:17:00:25:96:59:94:f2:c2:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:F9:59:74:38:CA:A1:CD:04:D3:79:F4:0D:32:C6:08:E6:67:23
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:7a:74:fb:c6:44:16:fd:34:90:ac:6d:25:69:3e:0f:db:
         7f:a5:63:57:40:ea:f7:be:cf:35:30:1d:e4:5f:fb:84:bd:be:
         f3:c0:36:86:d7:6d:f0:0d:76:7b:28:d1:36:01:ee:4c:25:ac:
         cb:26:17:aa:b4:32:cb:1f:6f:9d:d8:60:7e:71:b6:b1:63:57:
         24:b1:b2:5a:12:8d:be:19:8d:b8:ba:3b:4e:28:d5:dd:3c:8b:
         66:7a:74:f0:c3:1b:e7:60:a7:54:be:53:6a:58:51:e7:15:15:
         b1:9a:cb:dc:2b:e2:f7:ea:d0:06:1e:0f:19:eb:e2:46:f7:b4:
         37:b6:0c:3b:28:34:1e:d7:9f:d2:b4:ba:06:51:cc:45:c8:4f:
         fa:7e:e9:bb:78:3a:4a:e7:b9:4a:1a:98:08:fa:a8:d2:be:59:
         6f:a7:41:e8:18:1a:fe:94:51:7d:15:ea:cb:00:51:67:71:8a:
         fc:dc:ec:96:bb:8a:7f:95:12:21:aa:dd:6f:f3:fb:2f:f2:da:
         05:d7:3b:c8:35:0d:35:00:d0:0d:9a:a2:aa:48:c9:2e:85:91:
         a0:95:75:67:62:b5:26:fd:17:ad:22:b2:a6:5a:f5:47:1f:7f:
         53:e5:b6:4d:14:52:03:6e:91:1d:cd:6d:7c:62:87:71:d1:6c:
         01:72:ed:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Iov7+3XrR1drQkP9GWjkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjYwNjAyMTQwMDQzWhcNMjYwNjAzMTQwMDQzWjAzMTEwLwYDVQQD
EyhlNTJmZjk1OTc0MzhjYWExY2QwNGQzNzlmNDBkMzJjNjA4ZTY2NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXPGGQn1Xhf5YUJAEdIDENPjQOYJ
m9PH6B/5Yq3gdNG4xtsG9Bm89OJs4ZZesA4BE6sxZZdnk5dLmIECWjkZzP6WY/yv
4fxoaTuBJTdi18XW6hLk/d7EEId6FO3kSpBoUdcVg7A8uYiK7w5g6MfgxnGy2Ckq
CKgLe75Iw6FY9C5AE4tEpLGaVEsanxrd4iMT9eq3l8+s2Mibin6gm334fzMh3Uox
uQ073VOFJuAd/q4sCP1dP44S3h0ru8bvRlMb6BfuvXo9huJT/U5dXwcBdotfsZav
K0YSWY8wB78Heg5Sggpm6joZf5nWqd+FhWYU7QqS0u0pFwAlllmU8sLzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUv+Vl0OMqhzQTTefQNMsYI5mcjMB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr16dPvG
RBb9NJCsbSVpPg/bf6VjV0Dq977PNTAd5F/7hL2+88A2htdt8A12eyjRNgHuTCWs
yyYXqrQyyx9vndhgfnG2sWNXJLGyWhKNvhmNuLo7TijV3TyLZnp08MMb52CnVL5T
alhR5xUVsZrL3Cvi9+rQBh4PGeviRve0N7YMOyg0Htef0rS6BlHMRchP+n7pu3g6
Sue5ShqYCPqo0r5Zb6dB6Bga/pRRfRXqywBRZ3GK/NzslruKf5USIardb/P7L/La
Bdc7yDUNNQDQDZqiqkjJLoWRoJV1Z2K1Jv0XrSKyplr1Rx9/U+W2TRRSA26RHc1t
fGKHcdFsAXLtzA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:13:20 2026 by rpki-client