Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          ffrUxj5aTdqU416NXw1V1vSxfPRRNjtvI/T7WM0BGTg=
Subject key identifier:   68:D3:1C:59:D4:69:FA:4E:3E:03:26:97:01:7C:DF:83:23:23:68:39
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       019DD5775C468A0EDDF829AF6A6A1EC11F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1478
Signing time:             Tue 28 Apr 2026 19:01:02 +0000
Manifest this update:     Tue 28 Apr 2026 19:01:02 +0000
Manifest next update:     Wed 29 Apr 2026 19:01:02 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: XRHqm59PQYGTkCcY+5MrCkMivEHoWuqC1X6MrILNLaE=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d5:77:5c:46:8a:0e:dd:f8:29:af:6a:6a:1e:c1:1f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Apr 28 19:01:02 2026 GMT
            Not After : Apr 29 19:01:02 2026 GMT
        Subject: CN=68d31c59d469fa4e3e032697017cdf8323236839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:93:6c:4a:5d:29:d6:4b:d4:c6:79:f4:80:
                    52:82:4b:c6:64:ac:cf:0d:cb:9a:37:7a:2a:69:76:
                    cd:bf:e2:df:f4:8e:85:d3:7a:4c:60:4c:d1:50:06:
                    8d:c0:b8:55:e1:01:1b:b9:85:55:ff:7d:66:46:30:
                    d0:b9:31:b8:99:30:b9:25:18:ce:c7:5c:ac:65:3c:
                    70:73:e9:8b:ef:8b:f6:a3:e6:16:d3:2d:1c:e5:be:
                    97:76:59:65:5d:f0:9c:5c:32:e6:96:1c:4b:6e:5c:
                    53:57:32:f5:ef:eb:8b:8d:08:35:56:ca:ad:15:0b:
                    d3:32:ea:e9:2d:03:a5:db:b9:9a:7e:c7:8f:7d:33:
                    25:c1:29:1b:ac:7e:1e:8d:21:9d:57:42:ab:90:2f:
                    fa:fe:c5:25:13:29:c2:07:aa:6e:4a:77:dd:6d:eb:
                    01:98:b3:6f:9c:31:95:14:6a:68:1f:cd:81:9a:5e:
                    88:86:92:e9:e3:9b:bc:a7:b0:c5:67:70:5a:66:00:
                    fd:a6:46:43:8a:1b:7c:89:80:7a:aa:0d:66:73:84:
                    9f:12:98:52:16:b6:8a:28:f7:c2:39:d8:7c:7a:79:
                    72:f7:97:06:1d:3a:28:a6:7c:65:d4:03:7d:09:b6:
                    cd:75:73:25:ac:b4:80:ac:be:aa:50:ad:6b:59:f2:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:1C:59:D4:69:FA:4E:3E:03:26:97:01:7C:DF:83:23:23:68:39
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:25:46:72:8e:78:fc:69:8a:d8:f9:0e:ac:83:0a:98:4f:
         da:9f:1e:48:11:8c:3f:ef:81:8f:14:2b:5c:73:12:af:3e:a5:
         94:bb:96:ad:3c:4d:a9:25:d4:82:50:67:ed:0d:78:af:63:d0:
         66:9a:1f:ff:e6:be:63:cd:16:b0:87:0d:5b:ac:1a:53:c1:2d:
         7b:04:54:36:7b:b9:29:3d:35:58:4c:81:f0:2b:0b:1b:d5:a4:
         cc:55:40:25:24:b3:27:c9:7e:1d:63:6d:a4:9b:af:61:e4:2d:
         82:6b:89:ab:60:8b:81:82:87:0f:3a:20:82:bd:86:77:2e:24:
         ff:0f:6c:b2:b0:ae:ed:38:89:d4:b5:8f:80:29:14:a8:fa:75:
         dd:87:78:53:5d:a5:28:9c:a6:74:96:68:ec:0a:c4:a9:b7:fd:
         7b:4f:ab:6a:cf:91:67:f4:09:25:70:96:f0:f7:13:d5:78:52:
         42:49:a9:f7:76:61:bc:37:56:6a:cd:27:60:2b:5b:55:16:d9:
         56:b0:9c:28:49:29:21:0a:b5:c3:c8:40:0c:a0:1c:05:95:db:
         cf:24:d1:4f:bd:ea:71:cf:5f:a7:32:c3:52:89:0a:99:cd:40:
         0b:92:2b:64:60:bd:56:d4:28:8d:03:56:5a:1d:66:b8:3e:a6:
         38:eb:80:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Vd1xGig7d+CmvamoewR8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy
YTJjZmEwHhcNMjYwNDI4MTkwMTAyWhcNMjYwNDI5MTkwMTAyWjAzMTEwLwYDVQQD
Eyg2OGQzMWM1OWQ0NjlmYTRlM2UwMzI2OTcwMTdjZGY4MzIzMjM2ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBiTbEpdKdZL1MZ59IBSgkvGZKzP
DcuaN3oqaXbNv+Lf9I6F03pMYEzRUAaNwLhV4QEbuYVV/31mRjDQuTG4mTC5JRjO
x1ysZTxwc+mL74v2o+YW0y0c5b6XdlllXfCcXDLmlhxLblxTVzL17+uLjQg1Vsqt
FQvTMurpLQOl27mafsePfTMlwSkbrH4ejSGdV0KrkC/6/sUlEynCB6puSnfdbesB
mLNvnDGVFGpoH82Bml6IhpLp45u8p7DFZ3BaZgD9pkZDiht8iYB6qg1mc4SfEphS
FraKKPfCOdh8enly95cGHToopnxl1AN9CbbNdXMlrLSArL6qUK1rWfKfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjTHFnUafpOPgMmlwF834MjI2g5MB8GA1UdIwQY
MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt
NWFlNWJjYTZmNDhjLzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj
LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr60lRnKO
ePxpitj5DqyDCphP2p8eSBGMP++BjxQrXHMSrz6llLuWrTxNqSXUglBn7Q14r2PQ
Zpof/+a+Y80WsIcNW6waU8EtewRUNnu5KT01WEyB8CsLG9WkzFVAJSSzJ8l+HWNt
pJuvYeQtgmuJq2CLgYKHDzoggr2Gdy4k/w9ssrCu7TiJ1LWPgCkUqPp13Yd4U12l
KJymdJZo7ArEqbf9e0+ras+RZ/QJJXCW8PcT1XhSQkmp93ZhvDdWas0nYCtbVRbZ
VrCcKEkpIQq1w8hADKAcBZXbzyTRT73qcc9fpzLDUokKmc1AC5IrZGC9VtQojQNW
Wh1muD6mOOuApQ==
-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:48 2026 by rpki-client