Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          bZNEg9Vb9K04dG4wWz2HHSZvzQxwVRAFMTzaushUoh8=
Subject key identifier:   A0:54:70:4C:E6:13:4B:93:B7:42:AC:0E:6B:D3:19:C6:6D:B3:C6:33
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       01A00137ECAC49F633931C42EED6B104D9FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          1703
Signing time:             Fri 14 Aug 2026 17:00:37 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:37 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:37 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: zn5NrucJtxgZZ8ObffgkDFhALuSbmN3I3OsfU2rubx0=)
                          2: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (hash: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:ec:ac:49:f6:33:93:1c:42:ee:d6:b1:04:d9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Aug 14 17:00:37 2026 GMT
            Not After : Aug 15 17:00:37 2026 GMT
        Subject: CN=a054704ce6134b93b742ac0e6bd319c66db3c633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:e2:8b:1a:67:45:dd:48:30:a9:97:84:81:
                    94:d4:0a:f2:cf:43:6d:d4:14:9e:7d:b5:b7:aa:d6:
                    4f:f3:af:a7:21:fd:f2:7e:0e:36:bf:aa:aa:c0:6f:
                    b6:43:9f:9e:9f:5b:02:98:31:e4:2a:09:47:5c:be:
                    d0:52:aa:3b:39:7b:27:e2:aa:62:0e:59:d3:33:c7:
                    94:4c:69:6a:02:af:6a:5c:f3:31:97:4a:27:4d:0c:
                    36:21:a0:99:28:b5:24:38:a5:f3:74:cf:69:2f:c5:
                    4a:83:e2:17:82:80:d0:e7:8a:be:ed:2f:4d:d3:1b:
                    62:09:53:dc:e9:90:a8:82:c1:af:d6:77:90:5d:e1:
                    b2:04:9c:a5:7e:87:69:74:b7:73:d1:fb:e1:24:de:
                    64:a5:aa:bd:46:a0:c3:ac:e8:51:8e:5f:0d:ee:d2:
                    13:35:d5:a2:c4:e9:aa:90:5f:da:0c:c8:f2:6f:52:
                    46:c3:27:67:a3:a6:f9:eb:d9:cd:df:53:0b:c9:05:
                    34:fb:5c:86:80:5d:cf:f5:04:ad:4b:66:4e:41:ea:
                    e2:c4:f1:aa:d6:5a:bd:8c:8d:b0:cf:f9:82:48:98:
                    f7:f0:25:a7:bb:c9:3f:2b:fc:72:6b:8d:ec:c5:af:
                    d6:96:07:25:0b:29:30:70:11:c6:cc:5a:75:4e:93:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:70:4C:E6:13:4B:93:B7:42:AC:0E:6B:D3:19:C6:6D:B3:C6:33
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:d1:df:8b:27:cb:e0:f6:7b:e2:66:9e:0f:6f:e9:a5:62:df:
         e4:e4:69:08:1e:72:3f:9a:b7:12:6a:ba:f3:26:98:3f:c1:24:
         fd:8d:20:c3:01:b5:19:b2:ec:83:89:2e:66:df:5f:76:25:4c:
         de:e5:86:f2:ae:6c:03:a3:b4:37:cb:1c:51:92:db:95:b9:89:
         83:9c:92:76:b1:2b:c4:3f:a3:48:a0:c7:55:6f:29:2f:0b:ec:
         93:d7:6f:8b:ab:d6:56:c6:37:60:76:0c:b9:96:ec:f3:9e:20:
         67:a2:34:05:7e:5c:40:2e:f7:40:1e:c8:fc:49:aa:a3:1e:b1:
         f7:a1:48:fe:3e:30:6c:1f:6d:2f:e1:96:6d:1a:57:6c:9c:f3:
         2b:01:9b:71:b3:7d:27:70:92:af:ae:50:3f:73:53:de:89:00:
         83:67:cb:1d:7a:ec:f4:38:b4:1e:8b:74:f4:d0:f2:75:51:fa:
         05:50:52:27:39:a0:2c:c9:08:21:a3:20:8a:17:ca:f4:13:5a:
         92:8c:36:65:3c:73:f2:6c:63:93:e5:c3:36:79:d9:cc:06:c3:
         65:47:dd:e3:11:69:9d:96:4b:8f:85:b0:d8:1e:70:95:00:0c:
         58:ec:2d:0d:6f:32:e0:6b:4e:61:ab:ed:a6:32:61:d3:41:00:
         33:c0:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:44 2026 by rpki-client