Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File:                     Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier:          Goxo+7UFlV2DSMo0TzFi1uL7MfGwlYhVTxHuVtmdNNQ=
Subject key identifier:   1B:0F:ED:F1:CD:CD:5F:58:99:A2:8A:46:41:13:55:A8:22:3D:63:DD
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer:       /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial:       019E1CB4D25E284C5588F4CED1ACF198A325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 15:01:12 +0000
Manifest this update:     Tue 12 May 2026 15:01:12 +0000
Manifest next update:     Wed 13 May 2026 15:01:12 +0000
Files and hashes:         1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: s/R8pOoasrglZ5p5yPa6qSlbOBvoVvaoBFU5i+95i/U=)
                          2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:d2:5e:28:4c:55:88:f4:ce:d1:ac:f1:98:a3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
        Validity
            Not Before: May 12 15:01:12 2026 GMT
            Not After : May 13 15:01:12 2026 GMT
        Subject: CN=1b0fedf1cdcd5f5899a28a46411355a8223d63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:f4:92:82:4c:2e:70:c3:d7:78:7f:ff:b0:
                    71:63:6d:7c:6f:6e:79:83:e5:ab:e7:15:00:35:db:
                    83:aa:38:43:16:38:07:b6:2b:8f:10:56:79:ba:b0:
                    b5:cf:28:80:af:f4:82:20:d6:a8:6a:43:3b:77:05:
                    b5:94:64:85:98:2d:ef:81:8e:9f:ef:4c:46:74:a9:
                    8d:be:6b:d3:4d:3e:56:54:9f:46:4d:eb:25:21:9e:
                    ea:6f:d3:f0:1e:8e:0d:4c:56:cc:e2:cf:3f:b8:92:
                    0a:a7:aa:4f:4e:28:18:f1:71:4a:9e:6e:40:43:c7:
                    37:cb:8b:7f:1f:bb:6b:4e:d1:46:56:93:52:cc:b6:
                    d5:00:68:49:49:79:bb:f2:90:74:02:1e:d3:db:a0:
                    49:64:81:a8:ce:3e:f1:a7:80:ab:86:7b:4b:0a:fc:
                    cc:7c:cb:ce:7a:a4:3f:8f:15:59:49:7d:7e:28:1e:
                    db:3d:9a:dd:5c:c2:41:0b:3a:41:14:a3:8d:09:58:
                    96:01:db:70:dc:d0:1a:68:66:19:85:ba:54:9a:7b:
                    85:e5:e2:0c:c3:e8:ed:f0:33:44:5a:f0:13:2f:70:
                    fa:07:d1:2b:8f:cd:5c:d7:3d:1c:92:2d:22:06:93:
                    09:f8:48:c6:57:ab:ed:51:ae:fd:80:b1:7b:45:61:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0F:ED:F1:CD:CD:5F:58:99:A2:8A:46:41:13:55:A8:22:3D:63:DD
            X509v3 Authority Key Identifier:
                keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:a1:69:13:8a:ff:71:9d:2c:95:67:88:9e:22:89:28:af:
         b8:b9:e6:77:f4:7d:19:26:3e:4c:20:43:7c:0d:5b:87:21:8d:
         62:ab:d2:a8:f5:96:23:91:cc:c3:43:db:c3:04:da:8f:5d:e4:
         2f:4f:13:a6:7a:0a:2d:f2:a0:ea:1d:1e:1c:b4:c1:5a:87:0e:
         eb:24:8d:b9:93:38:ec:b4:1a:4c:88:f1:85:ce:54:eb:a1:40:
         af:cd:1c:62:eb:63:4b:1b:40:f3:df:d6:c1:7b:e3:36:cd:62:
         45:59:97:97:83:89:f2:d5:2c:8b:43:63:0f:9c:23:e1:1d:da:
         3b:ae:bf:71:15:b9:23:a7:0b:bc:b3:d8:39:35:58:63:af:a5:
         fd:9d:14:f7:65:64:9d:3f:b5:c4:1f:c6:31:c4:fd:d4:ee:1d:
         db:7c:aa:2b:6e:22:3b:9c:88:05:12:b2:d7:99:01:0b:65:9f:
         72:fe:26:94:d8:04:13:84:70:ec:27:50:59:80:2d:63:cd:4b:
         1d:5a:ef:a0:e7:fc:2a:93:8b:78:ea:2d:6a:1b:73:45:a0:a5:
         c8:b7:df:db:4b:b4:60:de:01:21:cb:8c:70:cc:45:71:c1:3a:
         34:16:ce:13:c9:5a:78:c3:db:be:87:f3:ec:d5:fa:f1:3c:e7:
         4f:5e:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:34 2026 by rpki-client