Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          D8leWxTIUA7SKkfkw5qYA/bFG8nI46q9f11jGhoiG1A=
Subject key identifier:   14:8E:74:FE:03:22:38:90:A9:F3:25:3C:1C:39:F3:BF:7D:70:07:A7
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       019DD019DD1EC058172F6E0AFEA1D40D3617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          1318
Signing time:             Mon 27 Apr 2026 18:00:49 +0000
Manifest this update:     Mon 27 Apr 2026 18:00:49 +0000
Manifest next update:     Tue 28 Apr 2026 18:00:49 +0000
Files and hashes:         1: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: 8qFULIQ15JbnGVei8zpEmp3meWIS6EuMEyjsZE2mC+4=)
                          2: DAk9scQvo5DMV_VlSztOmztoUsk.roa (hash: LbZH4yFltHGub7MlaORytCaFKFzBncecl1qi4I5mXh8=)
                          3: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (hash: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY=)
                          4: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (hash: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk=)
                          5: wMacMmZmC6K_Z3E-FK6eIoDMt20.roa (hash: hMurJd6LHvL4x1id8j/j+B6VkNrcZEazX5VFQz1CkR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:19:dd:1e:c0:58:17:2f:6e:0a:fe:a1:d4:0d:36:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Apr 27 18:00:49 2026 GMT
            Not After : Apr 28 18:00:49 2026 GMT
        Subject: CN=148e74fe03223890a9f3253c1c39f3bf7d7007a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:96:0e:85:e5:9d:36:cc:dd:f3:d3:29:c2:
                    a7:07:62:5e:50:ef:58:8b:5f:51:34:99:04:df:b8:
                    1e:50:e1:45:77:1b:6f:42:38:db:3f:99:f1:91:be:
                    20:1c:9e:80:0f:4a:a2:98:6c:7a:52:5b:d7:a5:d8:
                    14:b7:33:04:58:db:ec:15:5f:0f:84:97:b6:13:34:
                    79:9d:e8:89:a8:be:ee:a4:4d:69:1a:53:ee:dd:fe:
                    85:23:48:e1:43:62:49:8e:b3:2a:a4:a7:43:84:39:
                    22:ab:7d:6f:0e:d9:5e:a1:7c:41:f2:ed:a2:7f:37:
                    52:8a:5a:b0:25:b5:fe:96:18:c8:23:88:e1:8b:e7:
                    53:d1:52:18:9f:91:b5:46:90:98:35:9e:ec:47:05:
                    8f:c3:ed:bb:13:e5:38:5b:28:85:a8:f8:97:00:72:
                    17:cc:65:6b:29:c1:1a:05:a9:3a:db:31:06:e6:cb:
                    c9:e7:71:27:88:a3:a3:46:f3:f7:1b:e4:46:a1:58:
                    f4:fe:af:38:8a:2d:66:c0:87:cd:76:ef:d6:72:27:
                    7e:bc:8e:48:e3:e2:40:3d:0e:79:f0:4c:3d:1a:ed:
                    0b:f7:a2:1b:21:68:2a:37:54:d2:9d:24:38:7c:db:
                    92:d8:16:68:e9:9b:73:74:be:40:34:bb:49:b1:66:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8E:74:FE:03:22:38:90:A9:F3:25:3C:1C:39:F3:BF:7D:70:07:A7
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:01:b3:a0:3f:f7:a0:90:08:73:8e:90:52:59:bd:99:eb:
         74:ee:14:bf:c5:65:df:76:0b:87:87:17:c6:6b:a7:1d:1f:a8:
         97:76:b4:f9:a9:0a:16:bc:24:30:a4:48:e5:61:9c:dd:39:76:
         b5:aa:5b:e7:30:2c:8a:fa:e1:5e:54:08:b3:1c:23:9c:56:89:
         13:58:6e:68:25:bb:be:ee:ef:ac:91:e2:99:1f:42:f3:3e:16:
         2e:7d:1b:d3:4d:1d:e5:22:ad:59:8b:49:f2:c8:c9:63:65:95:
         ae:aa:67:04:f9:d1:d9:37:ee:51:31:56:20:70:39:89:d2:1b:
         ad:32:79:f4:f9:10:c4:0e:4a:63:15:bd:ea:c5:18:96:3b:60:
         5f:20:43:8a:94:12:97:01:08:84:19:16:cd:a0:60:6a:2a:83:
         ed:07:85:69:85:84:89:c1:7f:b6:ba:2c:76:dc:85:90:52:34:
         9f:7c:d8:2b:a4:78:0d:ea:1b:6d:da:7c:54:42:4f:88:f1:72:
         1e:de:27:61:5d:25:ab:56:ef:99:a6:5e:7a:09:81:40:a3:2e:
         d4:b5:3c:d4:f4:ef:5b:d3:14:c1:95:18:84:5b:c2:21:04:b2:
         50:76:4f:ed:db:a2:78:8d:a8:95:b4:ed:ea:53:ec:52:1f:b5:
         48:15:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:20 2026 by rpki-client