Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          4s9AlJyCQeiNpKwGx0DXrnnDzs0cplnToQCk5VJu5JM=
Subject key identifier:   39:68:A2:D9:FC:D0:57:A3:22:FD:09:9E:0E:1E:E6:A8:54:C0:0C:51
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       01A13D4A93128A45034C4CE9CF10EBC529E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 02:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:59 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: r7+UkK7ixuUHoWpFaQEyfPcEoswDSUPQP1nmhd1zPaY=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:93:12:8a:45:03:4c:4c:e9:cf:10:eb:c5:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Oct 15 02:00:59 2026 GMT
            Not After : Oct 16 02:00:59 2026 GMT
        Subject: CN=3968a2d9fcd057a322fd099e0e1ee6a854c00c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:b4:fe:c2:a4:0a:dc:6a:62:09:00:30:a8:
                    1d:4c:e6:e4:86:dd:2b:be:7c:2b:db:0e:26:a3:82:
                    bc:72:de:11:52:c3:75:e3:d1:d2:d4:99:1b:02:00:
                    63:76:38:44:01:10:1e:ee:35:45:05:f8:71:f7:af:
                    18:ad:1b:55:11:0f:94:ba:9a:3b:1e:df:82:ad:71:
                    83:32:57:be:5d:28:01:9a:e4:a5:9e:f8:35:62:71:
                    e2:7e:ee:0a:e4:a4:f1:91:c9:8e:7c:18:24:ce:3f:
                    2f:b4:e8:42:ad:9c:e4:e1:f9:f3:88:95:a2:92:1b:
                    3d:ae:eb:fc:4d:de:42:dc:62:14:0f:21:3d:59:ab:
                    18:37:47:79:57:6c:81:8e:83:08:67:82:5b:79:f1:
                    04:a3:ae:71:bb:0b:3e:b8:5d:65:a7:97:84:46:86:
                    56:5d:48:1d:fa:48:34:a5:c9:bf:8b:0f:ef:77:f5:
                    7c:2c:4c:36:00:92:06:99:c2:6a:1e:32:aa:98:be:
                    30:ce:06:10:1b:7c:8c:0a:cb:2f:64:40:6e:3f:e8:
                    87:9a:76:e5:96:0b:51:a8:60:d2:5b:34:02:cc:0a:
                    54:86:c3:f1:a3:78:93:38:54:fe:bc:22:81:fc:0a:
                    76:8e:a3:c0:3c:9a:cd:18:e4:23:f6:3c:ed:01:15:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:A2:D9:FC:D0:57:A3:22:FD:09:9E:0E:1E:E6:A8:54:C0:0C:51
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:d1:22:62:23:ea:e9:68:49:72:19:7a:ee:b2:0e:b5:c3:
         4a:a6:81:7e:b7:a8:1d:91:9f:fc:48:38:2e:ce:f2:de:5c:08:
         b9:58:7a:a5:e7:82:7a:ca:6a:48:ad:d9:22:ae:4e:a2:2b:87:
         da:e9:09:94:ed:79:6b:16:3f:fb:af:a3:3a:fc:44:59:c9:30:
         38:f7:a9:29:5f:be:c0:2e:6d:24:ab:19:70:fa:0f:82:55:39:
         a2:f1:2d:8c:37:a9:a7:d4:34:5b:30:0e:53:c9:f4:30:e2:cf:
         60:07:1c:22:b4:f3:4e:69:ae:33:a2:c7:b7:88:ad:46:ed:fa:
         11:da:6c:56:5b:c3:e6:3f:f9:02:7e:55:c7:18:67:30:94:ba:
         fb:6d:01:76:54:1d:9c:59:a8:06:4b:e1:df:0f:f2:04:a8:ad:
         32:6a:c9:7d:e2:f1:08:77:1b:4b:29:ca:3e:ec:bd:7a:3d:f3:
         28:08:8c:30:bd:e7:32:bd:9b:14:92:4d:05:ce:ac:06:1f:09:
         3a:a0:70:7e:97:16:fc:54:7a:fd:e3:a4:54:ba:05:21:98:a4:
         ea:99:9a:27:21:94:6c:c3:93:3a:da:14:39:2c:8b:d1:71:f3:
         9c:2f:d3:c5:95:18:2c:90:ab:54:3b:df:a4:01:f8:39:48:bb:
         b7:a2:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:43 2026 by rpki-client