Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File:                     BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier:          l0t3HUQ+AWaeNPaIbPikvoofmcPgGaegNu6N77+kSYs=
Subject key identifier:   ED:95:E5:AD:59:76:C7:32:89:55:D3:AD:AD:EB:32:0E:FE:A5:5B:DB
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer:       /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial:       019E1CB46F4C744FEC304E240A0600CCE4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number:          1901
Signing time:             Tue 12 May 2026 15:00:47 +0000
Manifest this update:     Tue 12 May 2026 15:00:47 +0000
Manifest next update:     Wed 13 May 2026 15:00:47 +0000
Files and hashes:         1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: P7ZagmjAEcHdRQg/hyQUlVUntIMUkpVs3wBt5Z2XUCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:6f:4c:74:4f:ec:30:4e:24:0a:06:00:cc:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
        Validity
            Not Before: May 12 15:00:47 2026 GMT
            Not After : May 13 15:00:47 2026 GMT
        Subject: CN=ed95e5ad5976c7328955d3adadeb320efea55bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:bd:d2:64:58:0a:84:66:d5:44:ab:42:8d:
                    cc:b5:dc:c2:fc:88:75:42:e1:3d:c0:90:9e:ab:72:
                    fb:86:c8:47:c8:32:54:5e:74:d6:61:b0:39:e3:9d:
                    ed:bc:21:c0:86:b6:ab:e9:66:8b:93:db:a6:e6:90:
                    b2:a5:28:e0:ca:5d:b5:dd:a2:98:4c:42:6d:1b:7b:
                    31:e0:7f:22:01:b2:dd:d1:13:ab:07:eb:2c:f9:fa:
                    31:3c:f5:a3:e8:a9:b2:9f:2a:3a:06:68:e3:d3:d0:
                    99:fd:db:60:c3:f7:84:dd:58:5e:9f:f1:e7:44:e3:
                    f8:11:89:39:86:50:01:1b:99:49:83:38:6c:fe:68:
                    f5:57:91:f9:1c:c0:f9:3a:4c:27:3f:3a:5f:04:cd:
                    87:f9:da:fd:9c:9b:0b:36:d6:be:c3:c0:7b:c8:d7:
                    e5:de:31:78:fa:e1:4f:40:0a:71:22:18:82:78:83:
                    d9:ea:ee:b5:41:2b:01:0d:0e:97:3b:21:78:2d:df:
                    af:7e:8a:e2:ec:6f:ec:d9:c1:fd:5f:86:ca:3d:a5:
                    37:3d:3d:79:41:00:c7:f5:cc:a1:97:0e:6c:c5:fe:
                    68:bc:ce:bd:71:64:7e:91:f6:1c:f9:d1:38:6f:8b:
                    18:64:c9:d7:a8:90:b4:2e:3f:fc:a7:52:33:c3:45:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:E5:AD:59:76:C7:32:89:55:D3:AD:AD:EB:32:0E:FE:A5:5B:DB
            X509v3 Authority Key Identifier:
                keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:02:f7:e6:51:05:ab:67:42:74:f1:3a:5b:2d:ed:c2:fb:53:
         cb:68:8a:91:50:62:1c:f6:79:42:64:56:9f:9d:a9:07:2a:e3:
         d0:39:ca:74:46:68:32:79:30:cc:6f:57:fb:a3:1e:21:c6:f2:
         5d:1a:aa:d8:80:62:52:1f:60:fd:8a:c4:b3:dc:52:e7:62:4c:
         b8:28:6d:9e:82:af:99:1f:93:36:13:df:18:bc:36:c3:65:33:
         3e:cf:9a:9f:ca:f8:3e:19:82:c6:74:fc:2e:4f:90:c8:df:db:
         11:42:30:19:03:71:e2:c9:f4:80:0f:d5:ae:36:e4:5a:23:04:
         47:0d:47:ad:1a:4f:31:95:76:db:a9:97:1a:2a:d6:54:b5:3d:
         d4:1f:f1:8a:7d:43:5b:4a:13:45:fc:5e:2e:16:ce:27:b0:c8:
         7a:6b:ca:ce:56:35:2d:aa:a8:50:f6:52:03:18:ad:dd:77:af:
         dc:81:0d:bc:14:f5:8e:58:7b:83:6e:b1:53:81:49:b0:98:a8:
         29:1f:5d:e9:69:93:a7:db:fa:a1:aa:f4:cf:59:06:c8:a9:5a:
         9f:dc:f2:77:fc:e9:cc:69:f4:b1:7f:74:67:a6:b3:8c:ba:69:
         17:72:0a:49:88:9a:fc:2b:ec:60:55:90:8b:e9:e5:6a:e2:83:
         d4:ac:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:17 2026 by rpki-client