Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File:                     BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier:          2NG1jsVyx4SDi0CAfteNbZOPfhGjxJ8CxejSvMPR3ik=
Subject key identifier:   89:DC:FB:9C:96:FA:82:D8:97:1D:B0:54:96:5F:A5:B5:DF:1C:78:DC
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer:       /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial:       019E1EA2B6754893AD0AA0E4E3618777BB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number:          183C
Signing time:             Wed 13 May 2026 00:00:40 +0000
Manifest this update:     Wed 13 May 2026 00:00:40 +0000
Manifest next update:     Thu 14 May 2026 00:00:40 +0000
Files and hashes:         1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: FI2WgIwJQMJ/cip9QbVfAXE/jRFdY3Sl55Cze66WdMU=)
                          2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:b6:75:48:93:ad:0a:a0:e4:e3:61:87:77:bb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
        Validity
            Not Before: May 13 00:00:40 2026 GMT
            Not After : May 14 00:00:40 2026 GMT
        Subject: CN=89dcfb9c96fa82d8971db054965fa5b5df1c78dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:b1:84:8b:c0:26:7b:31:a6:aa:86:d9:84:
                    92:18:f3:b4:d1:62:76:0b:6b:2a:ae:49:a0:f5:f9:
                    ef:e1:e5:79:df:c8:b5:01:9d:04:fe:c9:9f:3c:a4:
                    2f:48:2c:f7:ef:06:d1:d2:4f:b1:b1:f0:c0:54:d3:
                    dc:94:33:84:44:43:b3:9b:e5:bd:ba:28:c8:6e:29:
                    d5:c3:65:11:e5:85:2e:ac:ea:c4:a8:27:86:6d:d2:
                    ec:b9:8c:a2:46:fe:f4:d7:fd:4e:c5:01:de:fa:47:
                    a1:97:03:3d:e8:4f:b9:1d:5d:df:4c:d8:d3:48:62:
                    db:2c:b6:9a:1c:a2:88:f3:aa:69:1d:89:f8:ca:f9:
                    d5:cc:a8:d8:a6:84:25:ee:11:a7:92:28:13:1b:27:
                    ee:c1:89:91:e4:ce:32:d2:6d:57:1f:92:7c:36:74:
                    65:fb:b6:8b:cc:e5:3d:68:73:27:3c:04:a5:45:9a:
                    d4:12:bc:dc:c7:a7:22:af:67:92:31:5c:01:17:98:
                    0a:2f:2e:58:f4:9e:24:6e:20:c9:d8:1f:6c:08:71:
                    71:b2:05:e7:05:51:82:a2:d4:ef:24:b5:8d:6a:27:
                    67:bb:04:49:00:dc:cd:76:e5:18:73:ca:4c:89:c7:
                    d8:ab:b4:c7:4e:e0:c1:75:3b:44:38:8b:2d:31:f7:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:FB:9C:96:FA:82:D8:97:1D:B0:54:96:5F:A5:B5:DF:1C:78:DC
            X509v3 Authority Key Identifier:
                keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:46:0f:c0:a7:28:1d:9f:62:91:eb:fd:c6:2e:32:1f:a8:
         35:84:7f:ca:27:f9:b9:44:5d:e2:f2:f8:2c:b1:d1:f5:af:1f:
         78:25:98:ec:a2:98:d7:81:a6:43:98:7e:4d:9f:d7:40:71:7b:
         69:c6:da:ed:d6:d8:cd:b2:38:00:17:c0:dc:e3:5f:10:20:1b:
         d6:b6:22:df:ac:e9:32:cd:ca:87:b2:d1:c6:7e:25:25:08:29:
         2d:33:61:d3:5c:90:d6:d6:2c:8a:d5:03:f7:84:00:15:2f:33:
         c9:78:27:57:73:e5:e4:84:6e:e0:4b:a9:55:e2:b5:4a:92:71:
         fe:8d:38:08:42:05:e6:58:0b:82:b0:70:3e:8a:35:69:41:c8:
         b4:9c:a1:a3:e5:e9:2d:d0:79:64:a0:69:bb:27:e1:15:9f:0b:
         ed:e4:9d:35:66:e2:4b:0e:64:3a:62:7d:a0:e9:c5:f5:6e:67:
         1a:ae:d3:6d:b6:73:0c:5d:de:07:b7:c3:83:f4:0d:02:88:3a:
         cc:29:66:2f:ac:e3:d8:db:68:d0:13:f8:33:85:38:cf:3d:95:
         62:16:6d:5d:31:53:a9:17:fd:9d:e2:34:a9:d7:d6:db:bb:9c:
         61:e4:ec:e4:7e:e6:fd:35:b4:c6:1e:e0:03:48:92:b2:f8:e5:
         46:3d:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:25 2026 by rpki-client