Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          HJmolZcj2wFLm9iqGCJjvOHfmIBRgPJgYQ0qYLOFdfY=
Subject key identifier:   6B:0C:87:03:E2:D5:B9:73:2F:16:80:5E:38:D4:D2:0E:3E:C0:B5:E0
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       019E2F6001109EDEA3B967F2AF522882D731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 06:01:21 +0000
Manifest this update:     Sat 16 May 2026 06:01:21 +0000
Manifest next update:     Sun 17 May 2026 06:01:21 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: IrIbeTrX0q4NLLQKIgJ7V8KsZu6+svg9dQ5vtznVnVg=)
                          2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:01:10:9e:de:a3:b9:67:f2:af:52:28:82:d7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: May 16 06:01:21 2026 GMT
            Not After : May 17 06:01:21 2026 GMT
        Subject: CN=6b0c8703e2d5b9732f16805e38d4d20e3ec0b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:b7:98:68:02:fd:b2:d5:b3:68:67:7e:da:
                    ee:e3:df:0c:08:a6:71:3a:cf:9c:1c:17:3e:46:62:
                    1c:21:0e:9a:d2:d5:f9:c2:0e:d1:ac:2f:f4:f0:43:
                    d8:ac:85:53:8d:4e:cd:13:be:ce:fe:59:5a:a9:76:
                    3c:75:7c:1a:fb:dc:25:90:7d:9e:8a:c9:91:01:b9:
                    0a:0e:d9:d9:a5:b7:52:d0:64:0a:d7:17:6f:af:38:
                    a5:2f:a2:fa:9e:6a:69:b0:7d:70:02:16:ba:46:a6:
                    86:00:2e:7a:ff:35:de:af:91:d4:18:21:9d:25:a8:
                    5a:fd:62:71:6c:68:2e:42:a6:49:48:c1:c1:f0:b4:
                    2f:5a:b4:b9:d9:83:ec:62:30:2d:fe:0b:15:c4:84:
                    2a:eb:b0:14:8b:4e:56:29:5e:29:39:b2:40:1d:cd:
                    0e:d8:a6:14:5a:f0:e1:08:b2:d1:27:b0:55:78:f8:
                    70:29:1b:3b:e4:31:5d:9b:49:96:2f:f3:33:2a:31:
                    21:57:bb:5e:98:4a:54:dc:8d:9c:3b:62:f4:3b:9d:
                    3b:a9:b9:47:25:c5:a0:5e:3e:4b:81:35:7e:40:71:
                    5c:6d:5c:ab:6a:c2:2c:28:c3:a6:55:45:6d:be:61:
                    8f:f0:ed:86:4c:27:17:f0:38:ec:f1:ac:bd:a1:b0:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:87:03:E2:D5:B9:73:2F:16:80:5E:38:D4:D2:0E:3E:C0:B5:E0
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:9d:ae:35:ff:c9:b3:57:e2:9f:22:2a:cc:e6:30:e5:6b:
         67:e8:49:43:de:01:64:a8:2b:86:12:e7:09:3c:fa:57:81:e5:
         15:ac:47:3d:a7:d2:9e:6a:0f:67:8d:1f:6c:a7:04:e5:1f:ed:
         83:da:2b:a4:96:c2:4c:e7:a2:f4:04:08:72:e1:21:69:64:d1:
         fd:36:30:65:95:8f:91:2d:8f:bc:1c:3e:16:8a:80:35:cf:b6:
         6b:9f:2e:e2:06:43:42:e4:f9:2a:6c:10:4f:2b:f3:07:d9:92:
         9e:3a:22:b1:2a:0c:a6:02:f4:7c:bc:14:08:15:be:41:a6:a4:
         a4:d6:d6:01:49:b0:33:a2:ef:48:5f:d4:8b:bd:91:91:89:c6:
         23:f8:c7:8b:05:23:03:72:33:17:88:69:88:5c:8d:d5:cc:78:
         b8:f2:c3:c8:8c:c1:e0:36:27:fd:f2:22:10:56:20:cc:ea:7c:
         60:ab:c1:74:e3:e2:40:22:f5:88:81:17:d3:e1:2d:c4:68:1e:
         9c:8c:da:58:aa:27:79:c6:83:e8:0d:75:4a:7f:b3:c1:9d:02:
         d0:eb:e3:a2:e6:4f:2d:04:71:aa:be:00:fa:11:07:9c:11:b6:
         60:4e:01:9d:e0:1f:e8:66:78:b9:96:f9:29:99:f1:5b:d9:3d:
         fa:4a:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:11 2026 by rpki-client