Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          3MSVC2CyjB6w5ahOGavoncN0uXKBiz1O5ahtmfyC13Y=
Subject key identifier:   0A:7A:26:C2:1D:AC:5D:1F:E6:C6:3B:E7:F0:2A:35:37:DE:33:23:4A
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019E31857EE7BA82A70AFED8C8E8DD83EDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          160B
Signing time:             Sat 16 May 2026 16:01:32 +0000
Manifest this update:     Sat 16 May 2026 16:01:32 +0000
Manifest next update:     Sun 17 May 2026 16:01:32 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 48+CXmWYOXrU0FDvCyW2kGFb8UiXHGw/YthRTOaX4MQ=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:7e:e7:ba:82:a7:0a:fe:d8:c8:e8:dd:83:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: May 16 16:01:32 2026 GMT
            Not After : May 17 16:01:32 2026 GMT
        Subject: CN=0a7a26c21dac5d1fe6c63be7f02a3537de33234a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:75:72:ea:ee:37:23:37:e5:08:25:99:00:
                    b7:9f:e5:09:65:1c:62:ec:e6:1e:a0:0a:fb:6e:3d:
                    ba:e1:f1:d9:4e:37:70:a4:97:9c:5a:35:79:50:25:
                    47:c4:4b:72:e8:32:9b:03:a7:6c:b6:3f:52:52:44:
                    65:aa:ab:77:ff:6e:96:ac:d9:1a:0f:f2:15:58:dc:
                    69:01:7c:a3:6b:6e:af:4a:1f:fc:10:56:40:bc:ea:
                    d2:aa:4d:24:ab:6c:ed:43:7e:bc:3c:62:88:56:e3:
                    7a:60:e5:cf:f8:4c:ab:89:2e:11:d4:37:28:96:80:
                    8f:b3:64:bc:fe:f5:ee:3b:84:a1:43:ec:f9:bf:04:
                    f9:42:6c:b3:08:c0:65:e7:ef:9b:17:aa:a7:91:11:
                    51:f1:60:b1:71:28:88:02:16:c2:cb:55:25:35:fe:
                    23:ea:a0:e8:f8:16:a3:77:49:f6:0b:33:b1:b2:ff:
                    f1:99:0e:c7:00:c3:8b:a1:c3:a6:ef:6e:42:0d:1e:
                    13:75:5a:d8:52:4f:e6:7b:af:f4:88:ed:f5:be:51:
                    ca:49:46:06:eb:81:ec:c1:0c:e3:52:e2:15:5f:47:
                    3f:cb:1c:33:6d:0b:2c:1f:9d:b4:0c:f1:bf:26:67:
                    be:21:0f:ff:3c:6a:cb:6d:bd:84:a2:fd:d9:51:59:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:26:C2:1D:AC:5D:1F:E6:C6:3B:E7:F0:2A:35:37:DE:33:23:4A
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:23:d1:93:95:f3:79:e7:01:7c:04:c6:7d:c3:5e:e1:f4:
         64:e9:25:0e:82:bf:4d:81:4c:70:61:e8:5c:65:cd:47:6b:e0:
         ef:87:15:a7:3c:30:c0:e8:6b:fc:60:9f:a6:08:53:25:2d:d8:
         95:5f:df:f1:d3:fe:04:43:ca:01:a5:72:21:61:45:e9:b8:a7:
         fa:fc:2f:3d:0e:f9:82:a0:6c:30:6c:98:47:92:66:f9:2e:37:
         2c:d6:62:46:d2:d4:06:69:cb:74:e0:d3:f9:cf:bb:eb:24:89:
         f5:2d:40:ad:5c:9b:0c:a9:38:35:a1:02:36:16:1c:43:01:6f:
         14:60:55:5b:6e:f5:1f:b9:6e:c7:e2:82:20:57:8e:45:c9:e7:
         22:04:50:c7:95:0c:d8:74:a3:c5:62:30:a5:a0:a9:e9:45:16:
         59:07:9b:d8:99:82:4b:3e:89:c9:be:b6:62:a3:ea:14:ea:ed:
         b9:18:bd:56:6c:bf:37:07:3f:24:8f:d7:39:2c:41:17:44:a0:
         5c:de:58:46:0d:3a:18:04:78:23:ed:80:43:cc:6a:fe:ab:cf:
         c5:35:e4:26:40:ea:0d:0f:3a:9e:b7:6f:c7:ad:dd:fb:03:c0:
         36:4c:61:a2:c5:6e:e5:68:d6:01:d9:92:41:c9:58:8c:31:4a:
         c6:ae:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:46 2026 by rpki-client