Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          z33oZFBbbg2Q2R+Ui6tpGHjVHQFmJPhbkx2iU0bKLhE=
Subject key identifier:   BF:15:67:5E:43:C6:DA:EC:16:AB:5F:2C:B2:69:08:72:B4:C5:6D:36
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       01A187BFAF1C714B91B661B01AE7BEF0D22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1662
Signing time:             Thu 29 Oct 2026 13:00:48 +0000
Manifest this update:     Thu 29 Oct 2026 13:00:48 +0000
Manifest next update:     Fri 30 Oct 2026 13:00:48 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: /XOOW6z8C3FHb+fh1XUvnBy5NPKYGwnixv2DoeAH5JU=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:bf:af:1c:71:4b:91:b6:61:b0:1a:e7:be:f0:d2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Oct 29 13:00:48 2026 GMT
            Not After : Oct 30 13:00:48 2026 GMT
        Subject: CN=bf15675e43c6daec16ab5f2cb2690872b4c56d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:a7:a2:ab:20:91:9d:c3:ff:3e:5f:37:0e:
                    e9:c0:4d:07:e4:1d:fe:9a:37:8b:a4:d7:cc:e2:23:
                    3b:b1:a1:5e:39:dd:f3:98:3e:1a:64:f2:7d:01:06:
                    60:6a:7b:88:b6:a7:18:c8:a2:d1:fc:1c:08:59:4b:
                    ac:7a:da:2d:b2:eb:0c:98:30:12:31:90:56:0e:e8:
                    ee:fb:76:34:3a:60:08:59:3d:03:30:7d:18:e4:12:
                    e0:38:ac:e6:bc:16:e5:eb:a9:f4:22:74:da:c7:42:
                    63:15:be:44:2f:a8:db:f9:72:76:2c:70:c1:03:bf:
                    fa:82:2f:64:cd:95:ae:b0:45:a0:63:d3:01:f6:79:
                    55:6a:09:e7:cf:e7:03:9c:e2:b7:32:21:f8:4f:7c:
                    18:d5:c4:69:aa:e5:fc:bc:59:f9:dd:9d:f5:42:56:
                    fb:e6:a9:6e:43:39:47:39:c0:29:0b:ef:01:12:95:
                    3a:6d:74:5e:84:30:43:06:db:8c:30:4a:4b:70:1f:
                    5d:f7:f5:85:e9:0e:fe:ab:d6:8f:da:77:2d:36:9f:
                    0d:5b:e1:1f:9a:e8:2f:67:7b:6b:e7:b0:4a:40:9c:
                    cf:6e:bd:0f:a9:7e:36:b1:fd:62:70:10:0f:25:f1:
                    2b:3e:67:b8:1c:e1:81:88:b0:09:a3:65:dd:97:79:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:67:5E:43:C6:DA:EC:16:AB:5F:2C:B2:69:08:72:B4:C5:6D:36
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:c5:21:91:29:d0:42:34:ea:4f:ee:cf:bc:72:01:ff:36:
         18:1b:61:10:24:f2:14:82:18:9a:f6:b2:a8:06:b5:72:68:6b:
         59:10:79:1d:00:22:61:75:c2:a5:92:4a:10:6c:b3:66:7f:e1:
         5d:9c:82:00:1f:da:9d:fb:8c:62:88:c9:65:bc:4f:8c:cc:cf:
         6c:1f:43:06:0c:6f:b3:db:09:fa:40:5a:c9:85:79:fa:c2:6f:
         1e:24:8f:0c:56:44:9e:64:8e:95:a1:23:15:a6:0e:47:68:8d:
         f9:55:5d:24:8c:41:b5:42:e8:99:3f:a2:71:e5:3e:b7:34:81:
         6a:cc:d9:81:c5:a0:ad:f5:9d:25:11:b9:81:4e:13:27:15:de:
         e9:47:68:d9:08:4a:2a:cc:dd:33:60:2f:07:40:88:aa:dd:2e:
         7a:bc:0d:ed:ea:94:23:dc:86:22:43:8e:a1:57:12:83:91:4e:
         9d:e0:77:47:84:20:5c:70:49:70:1d:57:02:e4:41:e4:53:12:
         10:c6:88:67:2c:19:97:ae:d9:4b:47:e6:ac:55:a6:55:79:27:
         ae:f9:ed:54:cb:15:b5:4d:fc:45:88:c7:0b:f2:dc:0c:1c:a4:
         0c:e8:a8:d7:0e:99:9e:de:79:be:17:7c:44:5d:ce:0b:a7:a2:
         e6:43:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:10 2026 by rpki-client