Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File:                     bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier:          2X604EahKAndt0CeO/xxVZnPgmFrhDdSy3GXxIjx46U=
Subject key identifier:   57:AB:CB:76:B2:F7:AD:43:A8:94:13:A6:F4:C1:3C:36:54:5A:5B:C5
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer:       /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial:       019E20C82DD620676137BEA00E5334195F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number:          0F10
Signing time:             Wed 13 May 2026 10:00:50 +0000
Manifest this update:     Wed 13 May 2026 10:00:50 +0000
Manifest next update:     Thu 14 May 2026 10:00:50 +0000
Files and hashes:         1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
                          2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: cqB9x//ZB7nJicJlfUg+B8s7exjyxIkjAbiiloIg+d8=)
                          3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:2d:d6:20:67:61:37:be:a0:0e:53:34:19:5f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
        Validity
            Not Before: May 13 10:00:50 2026 GMT
            Not After : May 14 10:00:50 2026 GMT
        Subject: CN=57abcb76b2f7ad43a89413a6f4c13c36545a5bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:90:a8:6c:12:d4:a0:ca:54:3d:25:3e:9f:
                    29:a0:15:92:d0:1d:ca:3c:17:4c:46:26:c9:b0:96:
                    f3:a8:7a:49:1c:f8:82:ff:df:b9:81:e0:9b:2c:ff:
                    5a:86:f4:b5:44:a5:e8:b4:ad:a2:90:10:0d:68:69:
                    03:50:f9:f1:df:ed:38:e5:9b:24:47:78:08:a4:7a:
                    de:3d:34:78:05:20:cb:ec:f5:c2:a2:55:cf:39:57:
                    4c:7d:ce:c9:86:0a:fc:13:9e:2f:34:12:4c:d6:ce:
                    09:10:01:ad:b6:a8:98:31:8b:57:d4:12:f5:11:ba:
                    17:35:21:2f:84:28:61:24:2a:00:da:62:f5:54:dc:
                    e0:be:4c:21:2d:e8:6f:3b:d1:4d:da:5a:44:8f:99:
                    2c:50:eb:2f:43:7b:80:2f:4c:cc:d2:3e:76:7d:ef:
                    66:51:b6:34:90:d5:59:a1:23:0f:9b:a9:54:25:5c:
                    b9:8e:95:d4:8d:78:48:89:8c:33:4b:41:ad:ef:5a:
                    83:2a:01:4f:5a:da:3e:4b:35:aa:2b:e8:46:51:0e:
                    12:91:57:7f:3d:00:8b:61:e1:71:eb:fd:10:65:ec:
                    68:0f:3f:df:57:77:b4:bb:c9:a6:0b:83:4d:dd:d0:
                    b0:93:7b:33:15:cb:d6:bf:eb:fc:26:ae:66:e4:8b:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:CB:76:B2:F7:AD:43:A8:94:13:A6:F4:C1:3C:36:54:5A:5B:C5
            X509v3 Authority Key Identifier:
                keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:f4:bd:d6:63:7c:26:5a:8d:34:02:11:34:6c:c5:16:13:
         ee:9a:cb:b2:61:a9:5a:ad:c3:54:99:b4:93:ee:25:4c:32:87:
         f4:85:d5:9d:5c:73:b5:87:79:60:1b:88:88:14:7f:52:ee:ea:
         b1:df:13:a5:dc:90:24:83:ed:34:bf:b9:79:2d:fe:7d:e9:9f:
         50:8b:49:b6:a6:d3:0e:47:53:f9:41:e0:11:a7:fb:94:63:ac:
         93:af:61:60:13:2a:01:13:70:b5:df:38:33:ba:2b:d4:42:16:
         00:0a:e9:75:01:80:63:11:67:7b:41:51:d7:c4:28:6f:a6:d5:
         e4:f9:64:73:05:01:e7:11:d8:57:1f:86:c6:28:82:81:a2:f6:
         25:ba:24:ed:a9:63:7b:34:4e:be:8b:0d:57:29:f4:fa:65:56:
         a1:6c:1e:cb:0d:01:07:8b:a8:3f:ea:72:90:a5:7e:a0:72:62:
         5b:d2:ab:6b:c6:81:45:e0:b6:10:26:12:9c:34:ee:3e:bc:40:
         35:14:e6:a4:40:f8:5a:00:9e:89:34:af:94:38:b2:4d:f5:08:
         7f:e8:cd:48:7c:63:e7:11:23:43:05:8d:99:b9:b8:11:e7:53:
         33:12:1f:4f:7f:5a:60:be:0d:51:e4:5e:2b:90:80:d6:fb:e9:
         9c:4e:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:30 2026 by rpki-client