Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          8SHLsyxDlPfbJhi9wMfWGb4hp54TFs2oYUaDzj0rSfs=
Subject key identifier:   4E:02:83:2B:12:75:B2:39:9E:96:75:FE:92:17:55:D6:03:10:97:3C
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019DF9F22B2566AE40265CBC0907280E63FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          18F7
Signing time:             Tue 05 May 2026 21:01:30 +0000
Manifest this update:     Tue 05 May 2026 21:01:30 +0000
Manifest next update:     Wed 06 May 2026 21:01:30 +0000
Files and hashes:         1: 3JZHqPsWutux5J8tHXPSTpnIdjE.asa (hash: VJyftmErWIHuJi9O9+UcgaAO+btvOOaS+hqj+dP6C7o=)
                          2: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: w1lLkQ/9OT/bkczPwcUTzfpS7TtXYr5WrXm9VQ4YlaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:f2:2b:25:66:ae:40:26:5c:bc:09:07:28:0e:63:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: May  5 21:01:30 2026 GMT
            Not After : May  6 21:01:30 2026 GMT
        Subject: CN=4e02832b1275b2399e9675fe921755d60310973c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:df:ff:e8:b8:de:17:7b:41:77:2a:24:a6:
                    a7:90:19:c5:6b:a7:40:4b:bf:40:1e:44:28:6d:65:
                    e1:6d:b8:c3:a2:00:79:98:87:93:80:f5:32:f3:cc:
                    ff:53:94:77:00:84:9f:e2:0a:43:60:d3:c6:ba:e1:
                    ad:2f:91:02:d5:7d:79:74:db:7e:02:98:71:1a:c4:
                    78:02:a0:94:4c:51:b0:af:f1:9e:bc:f6:24:7b:ee:
                    8f:55:23:fd:2c:9a:00:80:fe:09:71:95:df:c7:c2:
                    fe:0a:87:ac:08:f3:7f:fc:21:85:cc:dc:2b:ba:c0:
                    22:ed:90:93:d1:a3:3e:d0:2f:66:f4:d6:5c:ce:50:
                    d1:61:6b:37:81:a8:64:7d:11:e9:f6:45:a4:e8:8b:
                    bf:d2:30:3a:3b:1a:80:1f:ed:da:5f:8d:ad:ca:9d:
                    cd:37:bd:91:fb:a0:51:e3:ac:70:81:b9:cf:b3:d8:
                    88:59:f3:da:58:41:91:86:1b:00:b3:45:9f:e0:24:
                    14:cc:04:bc:ab:62:57:0b:72:f1:8f:58:7e:64:49:
                    89:e8:40:4e:64:88:12:bd:27:fc:b4:ee:70:53:09:
                    99:f9:a2:80:5e:41:b0:16:75:b2:0b:08:5f:dd:92:
                    f9:45:2b:86:86:87:67:0e:fa:32:59:31:f9:5e:32:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:02:83:2B:12:75:B2:39:9E:96:75:FE:92:17:55:D6:03:10:97:3C
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9b:36:aa:0a:26:d2:82:9b:ed:20:39:b0:c3:c2:75:73:1f:
         6a:8a:bc:e6:d0:61:38:24:c1:95:72:d9:c2:88:68:0a:96:67:
         a5:21:f8:44:9a:bd:1b:df:c7:75:eb:8b:3a:41:78:86:c0:21:
         d3:00:38:9d:e4:2a:6b:ca:df:1b:5b:f7:df:5f:3c:b3:09:75:
         5e:35:e8:da:59:61:ae:50:6a:06:ad:26:c1:d1:42:13:a3:51:
         f0:d7:61:ea:45:9e:91:e3:21:00:79:9f:1b:06:b2:eb:30:43:
         a9:22:8b:3b:71:aa:0e:c0:69:fd:19:f4:94:a2:c1:3e:8d:ec:
         ee:a5:f6:66:6d:21:82:69:fd:6a:a1:f3:19:db:4b:73:5a:71:
         60:2f:38:34:35:d8:d8:ce:64:8c:64:d8:6a:65:61:96:11:7a:
         4d:18:24:80:9e:83:89:3e:f5:24:cc:fb:af:45:31:78:ad:95:
         8a:ae:7a:5d:6e:cf:c3:0c:f4:56:7d:f3:e0:23:85:0f:15:5d:
         01:a5:69:e3:54:fd:c2:ac:64:4d:77:78:5c:b0:1e:19:f8:50:
         a0:40:63:a0:ac:30:33:53:f5:7e:2b:2c:cb:d1:df:ad:c3:ed:
         dd:2e:08:cd:9e:40:97:f8:fb:d8:52:c0:79:87:73:23:7e:0b:
         26:dc:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:19:40 2026 by rpki-client