Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          i4q7ajEvWhSWxJrBLwUe+LWA6spw18RVoAeosb19oBI=
Subject key identifier:   C6:46:A3:9C:98:FF:C7:2A:D1:87:C0:58:6F:7F:ED:5A:07:F5:63:BD
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       019E28824A4586385DE151D6EF7ADE2A7AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          190E
Signing time:             Thu 14 May 2026 22:01:27 +0000
Manifest this update:     Thu 14 May 2026 22:01:27 +0000
Manifest next update:     Fri 15 May 2026 22:01:27 +0000
Files and hashes:         1: 03RMwUui42i5Kl2iOyIjy6uUllk.asa (hash: d0WtNqsS+gSSoX4EFhK8B1GHLgiLRboivnde42wiSxg=)
                          2: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
                          3: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: HyW/vP6heqLyVoXgw2+0oS7Mr+plGCSBiTrr1fWFEnk=)
                          4: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
                          5: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:4a:45:86:38:5d:e1:51:d6:ef:7a:de:2a:7a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: May 14 22:01:27 2026 GMT
            Not After : May 15 22:01:27 2026 GMT
        Subject: CN=c646a39c98ffc72ad187c0586f7fed5a07f563bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:1a:58:3f:4a:2b:37:39:10:47:0c:03:7f:
                    6b:92:f4:37:72:eb:1a:7d:19:db:5c:11:37:5e:3c:
                    96:ce:a1:f7:a9:ce:e5:58:06:57:f7:53:5a:87:c6:
                    76:8f:02:d6:46:84:d8:fc:74:5c:e1:28:2c:90:01:
                    b3:ed:04:1a:b7:ac:97:84:47:23:27:09:3c:94:4b:
                    27:0a:45:7b:51:a2:42:fa:46:1e:76:4b:3c:31:b1:
                    8a:5d:44:61:ba:e0:5d:a1:81:8e:7f:b9:03:a5:ef:
                    06:d3:a1:e5:76:fd:11:69:71:b3:a6:95:7d:04:c6:
                    38:48:44:fe:b2:f9:7d:03:14:07:a8:9f:02:80:86:
                    39:a0:42:65:3b:00:8e:7d:0a:ef:6b:23:c0:68:3a:
                    45:12:28:24:be:43:a0:fa:31:99:92:55:99:5a:dd:
                    32:7e:86:a4:e1:d3:73:e3:19:9b:4b:2b:24:84:ca:
                    27:8e:95:17:09:f0:3a:8c:67:36:fc:66:a8:95:66:
                    fe:14:9d:46:49:ec:9a:61:0f:f9:58:9d:c5:a3:a5:
                    a2:f0:6e:da:18:6d:83:00:3a:47:6b:af:3b:f9:64:
                    50:87:5d:81:29:83:d0:3e:8f:94:5e:e5:cf:95:8e:
                    9d:81:6c:b9:eb:53:c0:24:ce:e3:17:89:7f:5b:cd:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:A3:9C:98:FF:C7:2A:D1:87:C0:58:6F:7F:ED:5A:07:F5:63:BD
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:3f:33:bd:52:d3:a8:97:45:50:2b:f8:86:81:ee:f1:16:
         f4:57:ad:01:ef:ee:35:4d:f3:ef:fb:25:99:23:77:6a:db:a6:
         8f:91:71:e2:a6:ad:31:50:8b:d3:c4:e0:54:66:4a:ab:cb:54:
         6f:51:b9:82:36:e6:14:38:68:8e:35:da:16:82:80:9a:8f:9e:
         2c:9f:a0:2a:0e:fd:e8:eb:43:64:24:93:b4:38:1b:95:50:22:
         9e:76:46:01:2c:be:4d:4c:5a:27:89:b2:01:d0:d6:30:fb:99:
         78:2c:02:37:fb:17:bf:e8:70:6a:93:14:fa:df:5e:70:46:bc:
         63:d6:6a:ad:de:50:b7:87:a4:07:21:61:36:c3:3e:99:e3:70:
         2b:a8:6a:2d:47:0f:72:58:d9:74:54:1e:82:b2:2d:ac:b2:75:
         94:bb:af:d2:08:ef:3f:97:d9:c3:a8:20:55:66:dd:17:69:ea:
         82:ab:51:19:d0:b3:68:ed:cb:ac:74:2f:6a:ac:87:c3:35:9f:
         73:0c:2b:aa:9a:e8:a3:61:36:36:12:57:d8:f9:64:25:80:d0:
         8b:5f:4d:97:5f:57:a2:f0:60:16:c0:e1:42:2f:4f:2a:da:73:
         fa:c6:af:84:e7:24:df:7f:fa:91:69:70:6e:97:b5:cb:df:11:
         4a:41:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:53 2026 by rpki-client