Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          ZajNxhMD73Jl/znkpBc2bmrcne6sDW/mVSpoARsivJw=
Subject key identifier:   2D:87:01:70:CB:5B:9D:25:24:0B:0F:BB:09:72:62:4D:F5:0F:30:89
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       01A001A5DFAEE93F8C13E5CEED58AA17A119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 19:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:42 +0000
Files and hashes:         1: 03RMwUui42i5Kl2iOyIjy6uUllk.asa (hash: d0WtNqsS+gSSoX4EFhK8B1GHLgiLRboivnde42wiSxg=)
                          2: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
                          3: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: faiUzxuUqQBWGLkp2Xtm/3UELy8mPEarlMxCXusBqmo=)
                          4: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
                          5: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:df:ae:e9:3f:8c:13:e5:ce:ed:58:aa:17:a1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Aug 14 19:00:42 2026 GMT
            Not After : Aug 15 19:00:42 2026 GMT
        Subject: CN=2d870170cb5b9d25240b0fbb0972624df50f3089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:d4:15:ea:b5:2f:9f:2f:78:e5:bb:0f:43:
                    01:1b:bc:9d:3e:da:cd:bf:01:4f:1a:22:9e:10:77:
                    4e:8e:d4:ce:35:af:30:f7:d5:bb:83:6a:fc:ca:00:
                    5b:8d:ae:72:31:b6:07:12:3f:85:85:1d:3e:d9:63:
                    fa:07:0b:5e:2a:0d:73:8a:0d:68:1c:9a:1c:e1:30:
                    b3:b5:9a:01:5e:a2:e0:f5:c2:f6:3e:c6:9a:94:8d:
                    11:04:15:9a:04:d4:b2:02:58:52:29:f3:53:50:fe:
                    b7:3f:8b:2f:40:35:47:ed:c1:37:21:9c:ed:d6:b4:
                    0e:a4:ae:e6:86:8c:4f:7c:93:89:07:1d:e2:1d:f4:
                    a1:b0:50:b6:0a:7c:ee:33:f2:9f:2b:b8:ac:b4:85:
                    28:06:b1:d3:36:1b:52:75:f8:ac:b8:ad:f1:38:68:
                    d6:2e:e6:b3:d1:27:45:bc:e9:0e:f0:1f:41:2a:64:
                    db:01:8f:82:fa:f0:4d:b6:74:d2:2b:bb:aa:51:10:
                    f4:0d:e0:19:1c:9b:a6:7b:06:9f:d4:c6:26:56:3c:
                    e2:13:f9:64:2c:63:15:f8:86:dc:41:5d:93:78:a8:
                    63:b8:f6:72:e7:2b:ad:6c:58:1e:3c:f0:75:5f:d3:
                    ec:87:51:b8:1d:14:41:64:f1:97:d4:4e:55:26:64:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:01:70:CB:5B:9D:25:24:0B:0F:BB:09:72:62:4D:F5:0F:30:89
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:04:ab:bd:f3:bb:ca:e0:ff:f1:20:d2:fe:45:fc:21:39:
         cd:2c:83:06:f1:78:5f:53:bc:a0:b3:52:cb:22:0f:ed:2f:a3:
         40:22:3e:d7:ae:d7:77:b2:f3:3e:34:a9:2e:71:20:eb:2e:9f:
         34:26:9c:0b:71:62:51:69:94:3c:c5:6f:b1:a2:46:b3:65:be:
         84:62:49:d6:a4:9b:3d:dc:a5:ba:b3:f8:95:73:31:29:db:08:
         1d:42:fd:1d:35:5a:37:74:f9:32:5a:e3:b6:c9:3c:d1:6e:4d:
         62:c3:e9:7d:9e:98:96:40:56:35:ea:c6:41:51:1f:39:9c:37:
         f7:c2:87:04:e9:4a:9b:5d:54:3b:d2:2e:54:a2:28:d8:95:f3:
         ec:ab:b4:ec:cf:66:33:44:47:3d:d4:12:a7:83:51:26:1f:05:
         90:b7:8e:aa:a1:65:a1:39:bb:4c:9f:c0:35:08:6b:e4:e5:e8:
         72:73:1e:eb:21:da:34:0d:e5:2b:4d:17:08:d6:60:99:50:77:
         02:3b:5f:45:68:34:51:50:0d:f9:d7:73:64:d2:51:45:29:8f:
         c5:41:30:c6:bf:6d:c6:d4:f4:d0:04:60:ed:77:87:a1:f4:54:
         eb:8b:ae:62:e7:17:f3:9c:38:b6:94:29:62:e5:0a:f9:13:8f:
         47:d9:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:28:41 2026 by rpki-client