Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          GYpjzxPTqeLflEXo4sBiVpKUmT6+343ctLo/QqqBWaU=
Subject key identifier:   83:D0:CF:34:99:EB:12:47:E5:BF:38:4E:93:25:4F:9F:90:00:CE:86
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019E30A925913102DBEB350569D880A59F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          05F8
Signing time:             Sat 16 May 2026 12:00:51 +0000
Manifest this update:     Sat 16 May 2026 12:00:51 +0000
Manifest next update:     Sun 17 May 2026 12:00:51 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: WYJnANA9vOBy0A52Txhc7t8CUNv6h/zx2gYcoN+/ZyU=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:25:91:31:02:db:eb:35:05:69:d8:80:a5:9f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: May 16 12:00:51 2026 GMT
            Not After : May 17 12:00:51 2026 GMT
        Subject: CN=83d0cf3499eb1247e5bf384e93254f9f9000ce86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:f5:54:77:7f:bb:27:c4:01:bc:15:d0:85:
                    5c:5d:07:56:32:bf:a8:4f:4b:a2:05:8b:a3:de:ca:
                    9e:86:10:32:42:aa:ed:f6:2d:3b:f6:13:80:ad:8c:
                    65:10:8e:80:a8:a0:84:fa:d0:61:f8:34:c3:e0:1f:
                    8b:7c:d3:82:2f:d4:4b:b0:e2:7b:d8:66:94:33:a3:
                    7e:f9:a6:6c:0c:86:f3:a0:7a:25:44:e1:5a:e5:89:
                    b0:d7:c1:ed:76:00:8f:9e:df:8c:b9:58:0f:cf:9b:
                    1d:15:e0:6c:83:6c:ed:ec:e3:3a:5f:3d:f2:4f:7a:
                    07:0e:23:d2:f0:25:1d:47:61:ec:a8:db:63:4d:c0:
                    3a:38:df:fa:e7:b8:dc:01:4b:07:2b:11:c9:28:c1:
                    a2:7e:be:11:e8:44:93:e9:ff:8f:6b:25:a4:37:4e:
                    28:0d:44:86:66:33:fc:52:63:1c:94:89:e1:a1:75:
                    69:a8:96:b6:74:5a:ca:c0:29:5f:c1:c0:8e:49:56:
                    f4:cd:f7:c9:4d:b1:7c:09:01:9c:68:57:62:28:8f:
                    dc:bc:a4:09:80:4d:b2:14:ae:fa:9b:a7:94:19:55:
                    d1:33:ae:7a:86:07:f4:39:89:55:d2:59:75:94:6f:
                    bc:e4:58:5a:e9:98:ee:82:32:72:87:cf:f9:5c:a5:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:CF:34:99:EB:12:47:E5:BF:38:4E:93:25:4F:9F:90:00:CE:86
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:ce:41:5a:f6:a3:b4:86:d4:19:1e:fe:29:85:f7:c7:0f:
         93:27:e9:ad:df:22:c4:f0:75:50:c7:4a:cd:c3:3b:a4:c5:0a:
         6f:59:2b:d3:f6:9f:98:fb:11:33:d9:8f:90:77:21:ba:c9:47:
         ca:ac:67:7d:7e:ea:6f:4c:77:c0:63:72:63:11:10:33:24:06:
         76:61:d3:77:2e:a6:73:07:c7:47:24:88:e9:3d:b8:e9:35:80:
         7c:1f:26:28:bf:5e:12:23:fe:ce:c7:59:a6:8e:4a:2c:ec:34:
         c1:a8:00:2a:df:e8:65:0a:e2:76:e9:5f:15:36:50:0e:ee:46:
         d6:08:e8:fa:39:88:df:a6:d3:65:88:44:df:81:6b:66:43:ce:
         e5:1e:b2:d2:e3:05:84:49:d8:5d:3b:2d:6d:25:ab:23:5c:b7:
         a5:a4:0b:23:4f:ca:eb:ac:74:13:f9:a8:fe:85:4a:7c:b7:5a:
         8c:ff:15:4d:8f:16:a2:71:60:1f:dc:fb:16:e8:18:af:31:a1:
         fc:3f:58:ab:d9:63:62:67:22:71:e4:01:b3:64:ad:55:4f:f5:
         d2:cd:98:02:7c:27:d2:ed:47:1e:96:83:59:cd:39:00:22:d2:
         a1:67:7f:dd:85:19:22:75:99:bd:48:94:1f:6d:30:01:d9:25:
         5f:4c:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:36:27 2026 by rpki-client