Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File:                     BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier:          K+LLGQHHH5ygPAK8K+dZKtq5gpQZj8HCS62hr1/wZys=
Subject key identifier:   0A:EB:E1:EB:BF:31:E9:F2:7D:4A:34:5F:5C:F5:BB:59:6B:C2:22:A4
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer:       /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial:       019E1D591705E6BC82A0AB856AE6A5B90B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 18:00:38 +0000
Manifest this update:     Tue 12 May 2026 18:00:38 +0000
Manifest next update:     Wed 13 May 2026 18:00:38 +0000
Files and hashes:         1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: LDOR7q/NBvknEv/4alfsQuKAxC81a80rKUQZyjwdprM=)
                          2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:17:05:e6:bc:82:a0:ab:85:6a:e6:a5:b9:0b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
        Validity
            Not Before: May 12 18:00:38 2026 GMT
            Not After : May 13 18:00:38 2026 GMT
        Subject: CN=0aebe1ebbf31e9f27d4a345f5cf5bb596bc222a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:df:e4:f5:2e:3a:db:48:c3:ab:25:53:97:b9:
                    2f:05:7e:0f:61:96:3e:e5:97:25:d4:5b:12:28:dd:
                    eb:85:0c:00:60:52:33:8f:d6:cb:e3:25:fa:1e:ca:
                    81:43:99:83:35:12:cc:c6:19:a8:ad:0f:28:be:49:
                    bf:52:3f:4a:63:b3:1c:7e:c1:d3:23:d7:87:c4:eb:
                    ee:2f:57:8d:b6:45:07:8e:1e:ef:ee:4d:38:fc:22:
                    7f:88:d6:c1:a5:d5:7c:dc:c3:c3:35:67:f5:c1:d0:
                    36:92:dc:0c:e8:ef:41:52:93:a3:47:e2:e1:a7:f1:
                    3d:76:de:c0:8d:ae:e1:2a:49:06:04:e3:09:08:68:
                    4a:0b:a4:0f:3f:ec:31:cb:4a:c6:45:70:06:7f:1b:
                    d3:19:7a:d5:84:92:f2:c8:d4:6b:85:66:4e:4c:3f:
                    9e:8f:4a:82:dd:e3:d7:ad:a6:b1:bf:64:ab:9d:f0:
                    b0:7a:de:99:b5:4c:06:b6:9c:66:1b:ac:5d:d3:ba:
                    e4:78:50:c7:0e:7b:9e:48:32:4f:57:30:0d:35:a8:
                    43:33:58:97:64:52:bc:6e:a5:a6:72:13:6f:dc:e6:
                    5f:0d:c6:29:6c:ca:c3:54:ef:45:1f:a7:0f:14:f1:
                    90:ee:00:41:55:16:1f:26:a7:63:16:a0:ba:c3:96:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:E1:EB:BF:31:E9:F2:7D:4A:34:5F:5C:F5:BB:59:6B:C2:22:A4
            X509v3 Authority Key Identifier:
                keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:49:43:7d:84:c1:29:d5:2a:13:c1:7e:2b:2a:e7:8a:9c:
         82:eb:f0:71:ed:f2:f3:d6:b4:9f:3f:0b:10:d3:ce:0d:88:b4:
         3d:c2:f5:63:8e:91:46:01:40:9d:d8:86:8d:dc:bf:0c:97:2c:
         d7:51:90:b2:9d:e9:5e:66:38:c2:4f:f7:43:4a:e5:29:76:a0:
         b0:14:86:45:f2:81:0f:b3:f6:3a:86:74:36:d2:46:24:85:89:
         14:e3:db:06:28:9e:32:eb:05:3e:ea:6e:e1:fd:93:1a:3e:17:
         fe:ec:79:85:1e:54:ca:e8:47:94:2b:66:0a:63:a3:de:dd:38:
         f2:c6:d7:e8:d6:c9:80:a3:ee:e4:e7:e3:02:89:af:7a:9e:a8:
         40:b4:aa:6d:55:fc:22:f8:bb:d4:70:d3:11:29:94:47:77:8f:
         2d:6b:d4:22:5d:3e:10:62:f1:7b:69:f1:c5:eb:88:33:9d:be:
         4b:61:c9:44:a6:41:ed:e0:16:a0:79:1b:31:3e:38:61:ac:cb:
         3a:f7:75:93:9b:19:f4:b2:61:ac:f7:2c:8e:86:fb:8a:15:ec:
         a8:2d:61:be:8c:15:30:ba:b3:f2:c8:1d:aa:7c:b9:3a:f4:33:
         64:c0:89:63:92:c1:4d:3e:e6:d5:ca:29:01:95:cf:21:b4:95:
         d5:a2:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:03 2026 by rpki-client