Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          UiGcVLUNTBdR92QVKyj2tk+t0Se1QQ1kM+D6m+IKKfo=
Subject key identifier:   6A:4D:5E:4D:1F:82:73:03:5A:18:2E:99:C4:B1:71:7D:56:43:ED:9B
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       01A00093401917E8E3017209A84B783E3858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 14:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:45 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: Vh/7ZLoNy1AkROwGL4+ow3qXozHjGJ0AhE++akp3QLw=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:40:19:17:e8:e3:01:72:09:a8:4b:78:3e:38:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Aug 14 14:00:45 2026 GMT
            Not After : Aug 15 14:00:45 2026 GMT
        Subject: CN=6a4d5e4d1f8273035a182e99c4b1717d5643ed9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:70:e7:e9:2e:92:dd:c7:79:55:df:b9:26:
                    8c:51:e0:88:e7:42:20:ee:c9:c3:86:14:d7:6b:56:
                    41:55:ed:3a:f3:02:34:f1:fa:02:1c:ec:1a:93:2b:
                    1f:f2:55:93:02:40:55:26:6c:94:1c:85:2b:65:e8:
                    28:27:c3:73:23:11:7e:3a:bc:3a:23:10:f1:05:4a:
                    01:5e:ec:fe:70:79:11:d2:d5:5e:a8:63:17:cd:c5:
                    53:dc:d2:9f:ba:6c:cb:91:eb:1e:24:c1:bc:61:b1:
                    d3:17:95:23:a6:f0:1c:5a:4b:a3:01:2a:ed:35:13:
                    88:3e:c2:3f:c0:92:9a:45:07:7f:55:9f:6e:eb:f8:
                    e3:38:4b:9f:be:7f:64:5a:72:bd:f3:b5:89:dc:2c:
                    aa:f7:49:99:80:aa:85:2d:e9:68:71:89:0c:a0:8b:
                    99:62:ec:ac:43:b4:9e:61:3d:3a:f4:39:1c:e5:78:
                    ad:ee:e9:3f:4c:50:b5:a4:e5:9a:97:51:63:e6:d7:
                    5c:f7:2a:99:43:37:79:08:27:3f:02:ee:7b:e0:81:
                    e5:9a:df:90:a3:36:e6:44:e9:4b:b2:3e:10:5f:cc:
                    39:03:e4:87:69:01:a4:f3:b7:66:92:5b:60:76:a1:
                    6f:4f:3f:8d:4f:13:fd:9f:a3:ce:3f:80:8b:c7:37:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4D:5E:4D:1F:82:73:03:5A:18:2E:99:C4:B1:71:7D:56:43:ED:9B
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:cc:17:0c:4e:1f:84:ac:f2:17:12:e2:31:46:55:0a:ae:
         f2:ee:31:90:22:ab:c0:fb:d6:c7:5f:aa:d0:87:4c:c6:87:ca:
         12:44:a8:5e:b9:cc:77:06:43:7e:0b:3b:6b:ea:06:22:4e:fc:
         de:78:70:ca:09:05:5e:8c:df:08:75:c3:5f:e4:fe:9f:ae:ea:
         57:ad:bf:62:30:3d:c9:26:79:c9:fa:00:f5:4a:1d:f3:ce:c3:
         25:5e:27:9c:e2:fe:2a:5d:9f:76:ab:2b:ba:6f:fc:f5:41:ab:
         1d:ea:10:4e:16:39:1e:b0:85:a9:72:ef:16:01:fb:e1:a1:24:
         1d:70:71:f5:1f:e1:b0:ab:b1:5b:a5:cd:79:f0:65:9c:7e:da:
         73:6f:1a:db:6a:d0:2d:a0:ad:3d:d6:d7:dd:37:1b:cb:06:45:
         d6:fc:49:25:0a:34:1f:12:3f:c5:c7:43:38:ed:43:34:d4:94:
         1e:cd:e5:e7:c3:21:2e:6b:68:bb:44:cb:f5:eb:8a:83:a5:3d:
         21:11:9e:f3:fc:1a:68:d2:ab:be:f5:ca:54:4f:88:f3:3b:1f:
         0e:97:64:0c:e7:af:ea:03:13:22:ec:59:66:3e:78:5f:33:63:
         4b:9d:57:14:33:be:66:38:e0:de:9c:7e:71:10:de:2d:fc:f1:
         56:40:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:37 2026 by rpki-client