Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          o9uTCQBFUIKE6BULAf8eP2R63Qc0kqej8KE3DIMZB6Y=
Subject key identifier:   4C:25:4A:20:9E:70:10:5A:48:F0:08:6C:AF:EE:5F:D2:1C:B2:D1:46
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       019E3073276E5A7720768267D91135EB3D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 11:01:53 +0000
Manifest this update:     Sat 16 May 2026 11:01:53 +0000
Manifest next update:     Sun 17 May 2026 11:01:53 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: jAGfuiKyGympYpPU7wPcsiKSLVsIg1b4EwNxp5rJsLA=)
                          2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:27:6e:5a:77:20:76:82:67:d9:11:35:eb:3d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: May 16 11:01:53 2026 GMT
            Not After : May 17 11:01:53 2026 GMT
        Subject: CN=4c254a209e70105a48f0086cafee5fd21cb2d146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:ef:b6:7d:2f:e1:33:8b:46:65:61:82:8a:
                    7f:40:b6:d6:cc:80:1f:ab:70:23:7a:b3:44:9d:5e:
                    73:27:b8:ed:e6:c0:64:f1:a6:1d:fc:69:fa:06:04:
                    1a:29:ba:0a:ee:ff:44:5b:d1:4d:98:4c:8e:e8:26:
                    c3:b5:b0:31:cf:ff:1d:06:04:c9:d0:0b:2a:03:5b:
                    91:fa:91:49:ba:56:a1:d6:b9:cd:fd:51:3b:fd:e6:
                    d5:6d:d9:f5:62:c4:75:cc:f9:2f:d1:55:04:2d:2e:
                    72:19:6e:86:4e:d2:9e:39:8a:d8:bb:cf:b0:28:bf:
                    42:f5:74:d7:5c:b8:27:9d:37:fe:0d:bb:dc:bf:c4:
                    48:57:4a:cb:78:d2:01:cd:ee:5f:47:9e:c8:d2:be:
                    df:e6:d8:4e:c4:6d:38:95:dc:be:d0:83:d5:3b:86:
                    32:81:2c:1d:65:a8:6d:7f:98:09:93:14:ba:62:ac:
                    09:cf:32:f6:a6:b1:e1:71:45:cf:f8:09:04:7c:f3:
                    d8:2e:16:53:74:d3:f5:28:5e:c2:2a:d4:24:ef:f7:
                    10:3c:34:04:f3:8b:9b:2a:c8:f2:d7:27:43:8f:51:
                    9e:60:a8:96:fb:c2:b2:90:7f:dc:cc:51:b2:78:1f:
                    91:e2:68:7a:8b:c5:5a:91:4a:d8:51:23:54:72:4a:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:4A:20:9E:70:10:5A:48:F0:08:6C:AF:EE:5F:D2:1C:B2:D1:46
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:48:51:2e:63:9c:cf:11:22:ac:81:24:9c:31:f0:7e:6a:
         1d:17:fa:70:a1:3f:ae:d2:3a:05:5d:55:a2:7e:55:fe:1c:21:
         46:ab:0f:c8:c8:bb:51:b6:19:6a:a2:7e:43:32:7d:e1:d2:71:
         e5:48:d2:db:af:05:bb:5c:26:1f:5a:4b:70:87:1f:8f:8f:a3:
         f3:2c:61:ba:aa:3a:94:5d:7b:25:a1:9a:f1:b1:27:91:04:fe:
         5e:3b:b9:65:37:f8:a9:5a:af:25:df:39:e8:b0:bf:d2:25:ea:
         0c:92:f0:26:5e:04:3e:36:75:88:a9:e5:f4:f4:3b:0e:6e:aa:
         6d:5a:03:58:5a:c3:e3:08:ff:4c:61:9d:2e:bd:89:37:70:b2:
         31:7b:74:c2:2e:b4:2e:c4:d6:19:57:ab:83:55:3a:02:2b:fc:
         fb:0a:70:76:e3:3b:8f:8e:b8:9c:f6:aa:bd:1d:39:d5:0b:67:
         cc:08:43:5a:e2:e6:c4:bf:e0:91:90:6e:33:56:62:2a:be:93:
         c4:af:d1:50:e8:11:39:a5:47:d6:c4:9f:a5:1f:88:1b:2b:96:
         1c:9a:a2:e0:f9:5d:49:b0:5e:ce:42:6d:c1:70:38:09:81:54:
         66:a6:a5:cc:9c:23:12:a1:e4:8d:1d:dd:8d:58:86:4a:40:8b:
         64:9e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:08 2026 by rpki-client