Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File:                     BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier:          AIbIW9e++wB+y1cRGeHFlUC44mB3TAnhnEfKT0uvfjc=
Subject key identifier:   D7:0F:93:AF:58:B3:46:7A:88:8A:B6:20:39:92:BA:3E:16:08:E3:4D
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer:       /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial:       019E307217BA15D0EAB51B8110D5DDA3330C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number:          182D
Signing time:             Sat 16 May 2026 11:00:43 +0000
Manifest this update:     Sat 16 May 2026 11:00:43 +0000
Manifest next update:     Sun 17 May 2026 11:00:43 +0000
Files and hashes:         1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
                          2: BfWa7cKCluKRck95N954jichZAg.crl (hash: DWG1NukWSJ0tXfBp9B26TrJnbDNDgtkFeew6IpZsMuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:17:ba:15:d0:ea:b5:1b:81:10:d5:dd:a3:33:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f59aedc28296e291724f7937de788e27216408
        Validity
            Not Before: May 16 11:00:43 2026 GMT
            Not After : May 17 11:00:43 2026 GMT
        Subject: CN=d70f93af58b3467a888ab6203992ba3e1608e34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:25:9f:5c:41:e5:fd:1a:a0:60:44:2b:c8:
                    d4:3d:d2:ca:d6:0d:fb:2e:16:e7:07:dd:03:f1:ca:
                    3b:52:8a:6f:34:a3:94:81:48:ca:ae:ac:78:44:e1:
                    1d:7b:0f:0a:26:4d:96:3d:18:1a:c6:0c:31:4a:2f:
                    60:15:4c:38:99:88:50:20:61:4a:b4:1d:bd:f0:90:
                    23:1c:0d:36:c5:07:22:81:c5:35:23:06:61:73:ee:
                    74:e3:85:b2:74:aa:86:d5:ff:02:dd:ce:32:d9:fd:
                    8b:6f:fb:bb:68:51:82:de:0f:f1:3f:b7:4a:81:62:
                    fd:3a:f0:65:dd:c1:b8:56:90:6d:22:7c:9b:fb:d6:
                    fa:7e:73:d0:34:2f:9a:80:9d:77:fc:6d:ff:a1:d1:
                    e3:0e:52:04:e4:a6:2c:c0:17:61:8d:36:29:3a:ce:
                    2d:49:7d:02:3b:31:08:c8:18:d7:53:36:48:90:dc:
                    69:3f:0c:de:c4:19:6a:8f:46:13:17:d5:af:61:b2:
                    c6:bb:14:94:42:24:f7:52:d3:be:4d:60:7c:55:05:
                    b0:86:8c:be:f3:73:48:f3:9c:4e:83:be:13:16:1e:
                    2a:c5:00:32:db:35:42:68:8a:f5:89:44:93:2b:4a:
                    ae:24:c7:2c:b4:b9:8c:55:dc:6f:7a:7c:21:b2:4a:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0F:93:AF:58:B3:46:7A:88:8A:B6:20:39:92:BA:3E:16:08:E3:4D
            X509v3 Authority Key Identifier:
                keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:90:e7:63:50:bc:ea:0c:54:07:24:04:8d:b5:99:e0:68:
         cd:99:03:20:a2:f8:f6:91:bb:52:2c:1f:ad:39:d3:4d:48:39:
         af:96:f8:ad:d6:19:e6:84:4d:fa:7d:46:c5:ab:db:b0:e9:33:
         a2:3d:4b:62:3d:35:47:17:cc:d3:87:39:ee:18:7f:bd:6a:8d:
         f2:b5:7c:3d:47:d6:40:c3:b6:e7:03:1f:09:55:d7:fc:ac:78:
         6b:8e:00:b4:49:a7:74:2f:55:1f:dc:32:7d:e0:93:d9:2a:ec:
         88:2a:90:22:eb:58:7c:3a:8f:9b:f4:15:41:63:af:58:20:0d:
         43:5b:67:9b:41:20:a1:8b:d9:4e:f6:5d:3e:a5:c0:94:03:d8:
         b5:3f:c9:52:9f:84:ef:22:51:a0:d6:62:90:71:e3:b4:33:65:
         97:83:8d:3a:da:dd:ef:fc:6b:a4:17:bb:cf:51:1f:26:e2:67:
         94:bb:7c:f5:69:b1:14:38:ef:e7:cf:f9:f4:5d:52:9d:17:85:
         09:af:4b:4d:14:8f:66:61:97:dc:80:84:c2:8b:b4:3d:5a:0b:
         b3:f2:17:c6:a1:ad:4a:b6:fa:12:77:c2:cd:bc:b6:29:5c:29:
         61:9f:d5:cc:b4:6f:a0:15:48:78:4c:80:c2:05:0d:45:5f:5f:
         b2:a1:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:48 2026 by rpki-client