Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          lrhnM8U/NgPmn4/DuI76qkZNSYlD9Dn+qFBobTgl9dg=
Subject key identifier:   31:38:5D:72:62:F1:41:5A:5A:F9:50:BF:40:4E:53:DD:3E:F3:66:A9
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       019FA4F344C5618BB2904F65A009262B3EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1568
Signing time:             Mon 27 Jul 2026 19:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 19:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 19:00:34 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: /Te4TcwS5E/035hsf1GSUxEfs0ZZAL9h8zwiCIsGrKY=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:f3:44:c5:61:8b:b2:90:4f:65:a0:09:26:2b:3e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Jul 27 19:00:34 2026 GMT
            Not After : Jul 28 19:00:34 2026 GMT
        Subject: CN=31385d7262f1415a5af950bf404e53dd3ef366a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:3b:b1:43:ce:2c:4c:b4:34:47:5e:f5:3b:
                    c7:2c:24:96:be:97:ec:23:f9:df:d9:47:a6:6c:13:
                    77:fc:a6:5d:4d:0b:49:8d:af:18:21:b7:e6:8a:07:
                    3c:7c:f6:63:0f:d4:50:66:e1:1a:5c:db:14:ce:5d:
                    e4:0b:63:5d:b0:43:b0:2f:2c:bb:02:26:80:ae:66:
                    1e:7d:79:b8:3a:62:ab:ba:56:fd:41:47:54:bc:21:
                    02:67:7c:23:28:4d:0e:38:12:ee:4c:fd:2b:28:a6:
                    a7:fb:74:92:ac:24:73:c0:7e:be:29:9e:58:18:19:
                    3d:61:43:c7:e6:dc:43:d0:d4:2c:c1:12:20:ef:2e:
                    76:d5:2b:7a:6d:40:fa:e6:9e:1b:9f:9d:44:74:2e:
                    66:e1:fc:b3:2e:59:2e:ce:74:81:87:a9:1f:d9:57:
                    57:fb:36:a2:42:4f:4b:3d:82:12:6b:57:35:04:b1:
                    85:47:c1:58:cc:7b:0f:26:12:f8:3b:6d:66:a0:52:
                    50:f6:b6:c8:70:9c:ce:b1:03:26:d9:6a:34:51:9b:
                    22:62:56:56:9c:26:b4:8f:d1:1b:84:a7:2d:56:59:
                    9a:55:b9:31:b5:fd:9e:f7:fe:a3:b3:f0:95:b7:bf:
                    c0:bd:6c:73:d7:fa:55:77:c2:f9:ff:12:46:65:b2:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:5D:72:62:F1:41:5A:5A:F9:50:BF:40:4E:53:DD:3E:F3:66:A9
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0a:32:ce:01:55:b6:b4:c9:2c:0a:61:b4:6c:e0:86:c4:d7:
         93:f7:09:0b:36:9e:ec:e9:d5:d0:71:5f:f9:32:05:bc:16:39:
         17:3b:b7:32:e9:9c:d1:c1:08:3f:db:26:dc:53:80:28:c7:c2:
         a0:d1:f5:1a:3c:42:56:6a:91:fb:30:9b:3b:1d:8a:cb:64:97:
         ed:e7:7f:ae:20:99:3f:7a:b8:8d:78:bc:6e:96:5b:3a:af:84:
         d1:59:ff:9d:10:c7:7a:53:db:6a:1d:bb:8e:f1:43:fa:b5:14:
         4b:bb:5e:a1:dd:24:cb:9c:81:b2:d1:8e:bc:40:7d:4b:b6:39:
         28:83:dd:57:c4:6f:98:74:e8:26:ec:bd:33:d3:cf:a4:52:69:
         a6:7b:5b:d3:03:f1:51:11:9e:84:a4:09:70:83:7c:41:8a:ef:
         c2:ae:4f:e4:57:23:89:ef:24:12:44:85:ad:83:3f:62:3a:e6:
         c9:89:8d:00:fb:45:45:d2:40:62:1d:05:07:28:33:ac:5e:6c:
         07:94:00:5a:53:80:02:46:6d:24:86:bb:18:71:c4:9d:9c:bc:
         70:9d:28:4b:b6:47:f9:a8:ab:fe:6a:a9:22:d2:d4:63:d3:b3:
         71:4f:05:f9:6e:f2:99:ab:7c:36:be:74:41:75:bf:1b:cf:22:
         7a:fb:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:59 2026 by rpki-client