Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
File:                     bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft (raw, json)
Hash identifier:          m6TFvwobvbuJ2Mu+FxcoE3/W0Df2Is6Uaq+Ky8T4UFc=
Subject key identifier:   BB:42:A5:4E:DC:FE:13:3F:03:96:2A:B0:FC:CE:FF:D5:A6:0C:68:A4
Authority key identifier: 6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
Certificate issuer:       /CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Certificate serial:       019E205A5227721CBBF07FF43B17C0DF9486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 08:00:50 +0000
Manifest this update:     Wed 13 May 2026 08:00:50 +0000
Manifest next update:     Thu 14 May 2026 08:00:50 +0000
Files and hashes:         1: _Y3KWPgW5g7tWbAn0IxId-tYvoE.roa (hash: aYg7tkOr0lKYUUmicpFlbnWgT/KohMLQLxFqgfb/dJo=)
                          2: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl (hash: Bh5KNiPvMaJm1x6Iii4j7TzhzRPUgn3fNGVQxKIN5WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:52:27:72:1c:bb:f0:7f:f4:3b:17:c0:df:94:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
        Validity
            Not Before: May 13 08:00:50 2026 GMT
            Not After : May 14 08:00:50 2026 GMT
        Subject: CN=bb42a54edcfe133f03962ab0fcceffd5a60c68a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:4a:bd:e5:14:53:95:5b:28:b5:dc:d1:af:
                    f6:09:d6:04:32:6f:e4:50:54:17:e2:39:68:23:8c:
                    06:d4:25:c1:6d:8a:74:cd:74:18:c2:bb:e5:3c:1b:
                    03:be:8f:d7:01:ba:e9:8c:d2:67:ed:70:3f:47:6d:
                    03:12:5d:2e:e9:86:d3:4c:3f:4b:4e:e6:c8:10:28:
                    66:7c:d1:a6:c4:4a:02:9e:03:d9:de:a1:db:60:f3:
                    a3:f8:b3:3f:cf:57:de:6a:90:20:14:b6:9c:58:48:
                    a5:4e:17:66:ec:82:3d:cd:4b:52:65:16:b2:d7:60:
                    0c:b7:cf:68:bf:02:4c:2a:ed:e5:59:d4:3a:9b:9f:
                    93:f3:33:d0:8c:44:28:ae:26:bb:66:55:f2:68:07:
                    7a:70:e1:0c:7a:56:a0:07:a6:b6:b4:42:90:43:f1:
                    42:4f:2f:32:49:71:70:c8:47:02:bb:2d:bb:65:ca:
                    8e:6b:6a:f9:d9:fb:93:60:eb:95:00:15:ab:d6:df:
                    c0:d2:97:76:33:46:3e:7c:7b:5c:65:67:60:ef:f2:
                    fc:15:90:72:0b:7e:2f:66:2f:88:72:f9:50:ca:0a:
                    9b:57:a1:31:b9:73:c1:55:06:54:cb:70:6c:f5:60:
                    01:71:91:0a:20:71:b1:8a:bf:4b:f1:9e:f1:63:95:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:42:A5:4E:DC:FE:13:3F:03:96:2A:B0:FC:CE:FF:D5:A6:0C:68:A4
            X509v3 Authority Key Identifier:
                keyid:6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e8:e7:67:07:26:ae:8b:81:bc:15:f6:74:da:5f:7a:84:c2:
         f9:2f:d3:71:b4:67:34:33:8b:d4:ab:3c:a9:1c:28:d2:4a:86:
         2f:45:c1:56:6e:48:6a:98:3d:72:0a:72:b7:12:af:d1:8c:fe:
         2d:a1:e6:e0:b0:1e:52:34:02:30:a6:4d:ff:87:3d:be:c5:8b:
         ee:54:ea:ad:7f:19:82:7f:37:09:78:f2:4e:d6:3e:6e:f2:e0:
         9e:8e:7e:f4:36:2e:c0:d0:3a:da:9c:ed:9c:bf:a0:0d:0c:6e:
         11:bf:3c:19:4c:a8:b5:54:3a:14:c5:09:ee:c4:fa:54:09:ac:
         7a:8b:7e:6e:8b:cc:b3:97:50:6d:90:0f:57:c0:bc:d4:77:81:
         06:da:64:b3:35:f4:25:aa:20:d7:94:90:63:25:b5:8c:f0:9f:
         30:77:f2:ac:9a:e6:99:7a:81:1c:fe:eb:c6:a3:83:48:65:19:
         6b:7d:a1:9f:31:e4:30:fd:e4:1f:ed:20:c4:63:75:27:c2:a4:
         3c:13:27:db:fb:de:93:ea:c6:65:65:a4:2b:8a:e4:67:e2:f6:
         0e:b2:24:f5:7d:22:5d:74:2b:02:be:de:40:49:35:83:80:a2:
         61:c1:04:e3:0d:a0:a1:42:29:69:ae:99:90:cf:4f:37:51:20:
         b2:94:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:36 2026 by rpki-client