Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          4DnhD9hMOTzToUXUVmMdpTO359f5wj5KCYAqe+zFQF4=
Subject key identifier:   44:08:0A:A3:5D:03:15:FB:98:9F:AF:9F:F3:2B:26:1C:B0:FE:71:8F
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       019E303BCAFC8A1B16E8B17B0946671CE5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0ED2
Signing time:             Sat 16 May 2026 10:01:25 +0000
Manifest this update:     Sat 16 May 2026 10:01:25 +0000
Manifest next update:     Sun 17 May 2026 10:01:25 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: bWQ92/CsXUgGl4ou3tWs01038qmM+gf25eXSwztT8nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:ca:fc:8a:1b:16:e8:b1:7b:09:46:67:1c:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: May 16 10:01:25 2026 GMT
            Not After : May 17 10:01:25 2026 GMT
        Subject: CN=44080aa35d0315fb989faf9ff32b261cb0fe718f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:09:44:dc:79:7c:36:b4:ed:b0:01:a7:95:
                    48:45:ba:f3:cc:4a:70:22:4d:10:58:bb:47:25:5f:
                    8f:95:67:ff:07:f5:69:d3:94:5b:38:58:52:9d:43:
                    bc:b2:03:25:1a:2e:7d:a1:67:6e:5a:6b:c0:a0:b1:
                    c7:9b:0e:69:b0:46:d5:d1:95:99:5f:c2:b9:5a:af:
                    7d:f0:09:7a:d1:4b:54:d9:4e:c7:0f:53:6b:4a:00:
                    45:e9:c4:da:3e:51:ee:5b:df:3e:1c:4d:69:a8:23:
                    6a:97:cb:31:d1:3d:11:3f:17:64:9a:37:5a:6c:e7:
                    e8:10:f2:7f:b1:09:ae:b5:6b:93:7b:4e:f7:b8:b8:
                    ef:46:a0:7f:ac:fa:b1:f2:ce:19:60:a6:4c:97:80:
                    c7:58:0c:c2:e9:60:84:6d:80:51:87:52:bb:cc:b9:
                    01:85:01:a1:4f:f1:09:ec:a1:41:9d:d1:3d:88:95:
                    d7:a9:56:33:fc:17:2a:dc:76:40:8c:f0:d9:a8:6e:
                    9d:a4:72:4c:d5:98:83:20:d5:df:7e:f0:b6:b9:4a:
                    13:20:ec:c4:fb:98:41:3b:9f:02:08:f4:43:e8:3e:
                    35:23:46:83:a9:13:18:94:d2:17:28:c1:de:4f:0f:
                    3a:34:0d:86:d1:a8:81:42:8c:0b:99:b2:4d:cc:08:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:0A:A3:5D:03:15:FB:98:9F:AF:9F:F3:2B:26:1C:B0:FE:71:8F
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:e5:22:ed:bb:d9:95:82:83:79:61:46:04:cd:d5:9d:98:
         10:63:5c:5b:a5:f4:e2:4e:f5:79:64:50:ca:ba:ff:92:59:1e:
         7e:74:6a:cd:e0:2c:f9:75:ce:fd:4b:b1:a6:3e:bb:4c:9a:01:
         70:aa:d7:9e:ec:8d:cb:4b:b6:00:c5:91:21:ab:f0:ef:55:27:
         97:0f:92:7d:04:55:5f:52:79:cc:5f:39:3a:d3:be:6c:b7:14:
         bb:68:b5:4a:ea:47:df:83:5b:89:b6:bc:87:6e:7e:e3:4b:6b:
         f9:3c:8a:c6:05:19:4c:f5:c5:fa:97:f2:f0:ab:62:73:00:ea:
         39:23:8e:18:a7:3b:b5:e2:16:e9:f0:2a:a0:e3:1c:28:3e:a9:
         00:a6:38:5d:e6:fe:91:ba:86:d5:52:fb:88:85:cd:99:09:01:
         df:ed:38:04:ff:87:4c:50:17:d4:d6:5e:40:22:7d:31:e5:4c:
         b1:fe:6d:be:df:99:0f:1a:fc:04:12:f1:86:25:7b:47:af:ba:
         91:41:6e:ca:f1:9c:23:d7:5a:3e:6d:27:15:ac:14:7a:e0:be:
         8d:b0:ec:d6:77:aa:bb:d2:68:7a:bb:3a:cf:7c:21:31:9d:2a:
         6f:1f:a2:5f:6a:cf:59:25:59:53:cf:66:1a:03:68:0a:4c:b1:
         2b:6c:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:59 2026 by rpki-client