Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          KmaH7wSZti2SiQQjjCXX+6pZHjh80wvVw2M7wY4/0M8=
Subject key identifier:   E6:DE:53:44:B2:D2:31:64:63:4A:FC:2C:82:5B:77:2D:44:D7:BC:8A
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       019E2F5FD547EC24F5BE00F81B6F2E8FD908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          0D52
Signing time:             Sat 16 May 2026 06:01:10 +0000
Manifest this update:     Sat 16 May 2026 06:01:10 +0000
Manifest next update:     Sun 17 May 2026 06:01:10 +0000
Files and hashes:         1: 5T7ElemNC6g4KLG0_8xrYW5fehU.roa (hash: 1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=)
                          2: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: edvFe9SCkTiF42iuU7fSM0N3Ihj4NoQ6+iFHs/XnX2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:d5:47:ec:24:f5:be:00:f8:1b:6f:2e:8f:d9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: May 16 06:01:10 2026 GMT
            Not After : May 17 06:01:10 2026 GMT
        Subject: CN=e6de5344b2d23164634afc2c825b772d44d7bc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:e5:24:4f:37:97:bd:03:f2:b1:60:01:9a:
                    ab:89:65:8c:e8:67:f4:b0:4e:5e:1c:0f:9f:74:3e:
                    0c:ec:16:c8:af:c5:5c:9c:2f:49:59:29:72:46:dc:
                    50:08:03:01:23:1f:68:09:fc:23:97:29:21:fc:30:
                    f9:8e:73:96:17:43:3a:44:d9:17:fe:f7:6f:f1:81:
                    52:37:45:81:2f:31:8a:d4:02:88:00:76:0f:0d:fc:
                    cf:3c:f3:ba:5a:f9:e1:ec:ce:18:e0:2c:29:f2:24:
                    ce:3b:99:87:0b:34:10:50:b9:f6:e7:17:85:ee:03:
                    9e:6f:eb:0b:1e:f3:e6:5e:60:4a:41:3b:38:b6:7a:
                    64:cb:f9:5a:65:e1:1f:a7:65:30:0e:3c:ac:84:30:
                    5d:c6:3c:71:19:28:91:94:8a:6f:ae:db:45:97:4e:
                    28:a3:49:dd:59:9a:13:13:93:a3:9b:6f:1c:a5:62:
                    e9:b9:46:a3:ce:14:2e:3c:51:6b:a6:3a:05:ab:5d:
                    d3:93:ae:06:4d:f1:4f:3f:fd:54:43:ab:ea:d0:f8:
                    65:c7:52:95:d1:0a:4f:68:ed:bb:9f:1a:f7:8b:00:
                    a6:a9:34:c0:af:50:25:62:80:c3:89:55:46:3f:85:
                    48:3b:c8:f2:d8:76:00:38:ba:86:9c:7a:f3:ea:1f:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:53:44:B2:D2:31:64:63:4A:FC:2C:82:5B:77:2D:44:D7:BC:8A
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:95:a0:36:86:1d:ad:09:62:c3:de:29:a6:88:88:02:bc:
         b8:af:77:b1:60:c2:0e:c8:7c:05:7c:cf:e5:51:4d:f2:c8:98:
         96:4e:d5:8e:2b:d8:2a:79:14:9c:7b:0c:c7:7d:e0:d1:6c:4a:
         63:59:22:71:7e:c9:42:07:f2:c2:94:fe:2f:73:7f:29:2d:fb:
         6f:98:98:fb:ff:4a:da:ac:fc:48:b3:24:8f:55:ba:11:59:ed:
         d1:3f:fc:a0:3a:c9:f7:cc:17:93:ae:61:d0:aa:6b:60:e9:8e:
         44:c5:6e:c1:1a:93:1b:c7:27:82:70:00:fd:43:c3:8d:90:1b:
         29:ef:6a:90:b7:4d:15:d1:90:f9:c7:a6:87:de:48:6d:29:58:
         d1:25:2d:d7:63:e3:87:ed:aa:06:8f:23:7e:68:fa:84:57:d2:
         5a:c6:e5:31:73:75:a6:6c:2a:0f:27:3b:ab:df:a5:65:28:9e:
         9c:f3:8a:20:76:69:0b:d1:89:40:43:0e:f2:de:db:24:d6:53:
         ca:98:b5:38:de:a3:89:93:b0:ff:0c:89:f4:09:54:ab:36:64:
         8c:06:ed:19:87:0f:c1:fb:97:7f:41:2d:83:e4:5b:a3:73:74:
         ee:42:5d:9c:78:f2:71:4c:5f:c8:29:8d:5f:5c:ed:2e:31:6f:
         6e:32:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client