Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File:                     BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier:          d13JSkD60mu8kHOeC0/etNIyfE5d1vfu9WS2AVSzhak=
Subject key identifier:   B7:24:76:CD:C9:B4:C7:91:82:C1:B6:61:A7:FA:75:CE:FE:C5:B4:C6
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer:       /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial:       019E1DFE8FAD9C577A85633947E51E636AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 21:01:22 +0000
Manifest this update:     Tue 12 May 2026 21:01:22 +0000
Manifest next update:     Wed 13 May 2026 21:01:22 +0000
Files and hashes:         1: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: Mo4ERNS3naxI/0DGj90wAGrtcv+AuIhfWYY6YCjxGd8=)
                          2: z_uY0nt7eJVyCANwyDj8BAg2RVg.roa (hash: 1bTh66Er+RN00waAHAn1g3FpOreT0tO5hfBMyC9roWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:8f:ad:9c:57:7a:85:63:39:47:e5:1e:63:6a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
        Validity
            Not Before: May 12 21:01:22 2026 GMT
            Not After : May 13 21:01:22 2026 GMT
        Subject: CN=b72476cdc9b4c79182c1b661a7fa75cefec5b4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:a5:04:f3:5f:8d:8c:66:7d:fa:08:99:9a:
                    f6:26:6f:9d:18:9e:36:83:92:52:f6:db:df:fd:3e:
                    a0:0c:cf:c6:d1:6e:39:7b:cf:57:b9:25:ae:dd:6d:
                    1e:a8:07:61:4e:67:a9:f1:b5:40:88:31:4c:72:ba:
                    60:74:98:d7:06:e8:8e:d6:cb:15:d7:41:53:15:15:
                    16:54:d3:2a:95:c3:7a:56:34:f4:0a:81:51:10:c1:
                    d2:0a:6b:15:65:5a:47:9f:d4:74:db:7e:a4:1e:bd:
                    4f:ff:70:a5:e0:ec:d5:3e:5e:78:b6:50:76:b5:c3:
                    9c:9a:97:8b:9b:35:b1:02:ec:56:76:79:a0:f5:6a:
                    da:88:48:4d:9a:43:d2:68:03:c3:36:30:20:25:1e:
                    4d:2b:32:f6:a4:a3:7d:f7:84:9c:cb:6c:ea:68:11:
                    aa:6e:8f:19:5a:37:bc:a8:93:f5:71:46:94:3e:0f:
                    67:0d:98:f0:be:86:0a:4f:84:22:b7:91:f0:8b:93:
                    a2:4a:7e:59:21:78:ae:8b:20:49:61:4e:d8:a0:43:
                    f4:46:c5:66:45:cd:49:7c:b4:e2:8c:59:1f:f1:5c:
                    a4:be:5b:14:83:1c:1e:80:36:82:e7:c3:f0:31:8e:
                    84:a1:3b:70:c5:ad:4f:8c:60:7d:65:88:d5:05:09:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:24:76:CD:C9:B4:C7:91:82:C1:B6:61:A7:FA:75:CE:FE:C5:B4:C6
            X509v3 Authority Key Identifier:
                keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:fd:7a:fd:db:a8:c5:72:b3:0c:24:34:3b:ff:67:1c:3f:
         a3:fc:df:b5:47:5c:49:73:1e:fe:83:b1:9c:0b:b0:68:1e:fc:
         84:a5:6b:78:98:55:ed:1a:3d:07:37:06:ea:75:16:c4:d4:32:
         f8:ac:ee:bc:8a:7b:1b:ad:a7:fb:13:5a:2a:ed:b8:d3:db:c1:
         54:d8:fa:61:1f:52:92:b5:4d:77:d9:a6:32:8a:3a:6d:d9:5a:
         a8:e9:3e:d4:38:79:47:d7:bb:86:72:5b:fd:c7:d3:d1:2a:24:
         6b:05:ec:0b:fc:06:ac:96:a8:2d:93:e0:35:32:c2:f2:31:5a:
         fd:af:5b:55:0d:b3:a8:70:df:6a:7a:0d:e8:a8:38:fc:48:c5:
         a3:49:cb:7f:36:8f:5f:79:06:3a:f4:20:89:67:fc:49:8d:ef:
         cc:be:7d:dc:97:db:1d:64:f1:98:62:9a:62:5d:5d:96:80:8e:
         e2:8e:fe:9a:b9:3e:d1:13:5c:8e:84:f3:24:54:45:2a:42:c1:
         da:07:b5:9c:af:43:54:be:3c:37:6b:a4:df:66:f5:cf:e1:ee:
         35:43:d3:79:9e:1f:bc:86:33:3c:45:c1:ae:38:9c:62:ac:19:
         f2:f0:bd:73:39:46:90:7f:3a:06:9e:4d:d8:85:0c:74:b2:ae:
         9f:1f:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:22 2026 by rpki-client