Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File:                     BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier:          kK+NX8ibE+EMNPEDmYBqbin/ija4iDpgf/3PSbGBh3E=
Subject key identifier:   A6:61:1F:13:01:6E:76:1C:5E:97:79:3D:21:7C:DD:03:AA:E5:09:06
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer:       /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial:       019E2F966F61AC7E8F2DD18AC9E99B309BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number:          0FA7
Signing time:             Sat 16 May 2026 07:00:48 +0000
Manifest this update:     Sat 16 May 2026 07:00:48 +0000
Manifest next update:     Sun 17 May 2026 07:00:48 +0000
Files and hashes:         1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: C1ioA83BsLBCQH9PejpQS1glJzNOAk93JLk99ME6xRY=)
                          2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:6f:61:ac:7e:8f:2d:d1:8a:c9:e9:9b:30:9b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
        Validity
            Not Before: May 16 07:00:48 2026 GMT
            Not After : May 17 07:00:48 2026 GMT
        Subject: CN=a6611f13016e761c5e97793d217cdd03aae50906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:89:50:5f:c7:ed:35:5f:4d:d4:b6:e9:88:
                    d5:e9:45:fd:69:ca:2b:62:6d:a8:5e:8f:0e:dc:c4:
                    56:58:39:8a:ad:60:65:e4:f7:b9:36:28:c7:97:84:
                    55:6f:a0:6e:9b:7c:68:26:3a:f1:c9:00:60:7d:68:
                    90:d8:5a:61:86:58:08:76:32:6a:31:d7:98:35:62:
                    cb:c5:2d:fe:bc:93:c0:02:99:2e:4f:b1:a1:cd:ea:
                    01:f5:6b:11:d9:05:8f:db:e7:13:f1:b8:a4:5e:b1:
                    dd:f2:bf:4c:29:bc:fd:b5:72:cf:78:19:5f:c1:7f:
                    73:72:85:78:c4:1d:7b:b9:50:a7:23:58:9a:6f:a5:
                    21:cd:c5:e5:5d:35:16:27:1f:75:9a:e0:52:56:37:
                    15:bc:7a:22:8a:ad:96:51:c5:88:da:08:b2:af:8b:
                    be:32:0f:de:a8:3a:ae:78:f2:d5:0b:74:30:d7:53:
                    ec:3e:66:a0:0e:c1:d9:99:a0:d2:2e:95:88:74:49:
                    6d:87:89:01:16:ce:79:5c:b5:dd:a0:4b:11:9f:28:
                    cd:fc:14:90:34:e5:46:ab:6b:fa:01:e0:28:d6:9a:
                    84:bd:6f:c5:03:ed:69:c7:7b:13:a3:4c:5b:e8:f3:
                    c6:3d:bb:cd:e3:43:a8:e7:7a:26:cd:72:0d:cd:85:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:1F:13:01:6E:76:1C:5E:97:79:3D:21:7C:DD:03:AA:E5:09:06
            X509v3 Authority Key Identifier:
                keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f5:f8:11:62:d8:e3:d2:4e:dd:72:a1:21:b2:ab:64:49:ca:
         5d:16:24:a1:0b:a5:d8:88:7c:e2:39:8d:80:6d:fb:0d:28:e8:
         17:da:e5:eb:e5:0e:e3:fb:60:29:58:3f:a6:e5:c7:61:81:5e:
         19:ed:83:f5:fa:18:0b:58:ae:c9:0e:06:78:a3:8f:14:4f:03:
         42:59:37:7a:b4:06:3e:ed:51:4d:46:c2:5a:b1:13:9b:0a:f8:
         72:6f:33:e3:b3:20:46:65:24:d7:5d:55:a4:b8:d8:f9:09:b0:
         33:b8:ce:01:ab:e7:2f:18:91:c8:69:0d:23:5b:60:09:ab:04:
         46:0f:3e:c9:08:93:38:ff:69:e5:fd:cf:37:01:e0:c5:61:04:
         87:8d:de:a6:b3:28:a0:ae:26:40:d2:20:df:7a:7e:79:ae:38:
         7c:29:3b:be:b9:72:76:7d:b3:06:25:78:ed:8a:7e:6b:de:18:
         21:92:d5:cf:fa:aa:f7:8e:e5:d1:f9:21:d9:87:98:9d:ef:a3:
         3c:9e:cb:44:3d:20:e6:b8:c6:28:1c:da:91:e5:a5:b2:bc:7f:
         e8:8c:e0:82:1d:40:a1:5c:6e:13:03:4c:27:44:22:51:61:7b:
         15:66:7d:9c:74:a4:c0:ad:d1:51:b4:02:1d:0d:d7:61:7c:54:
         ec:f0:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:13 2026 by rpki-client