Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          X+wempH/M8q/j4jTjtu3KgBKItM7bQ/+Sk7IjsvUXz4=
Subject key identifier:   65:0B:BD:12:2D:7E:7A:E4:61:C1:24:E6:6A:98:FD:5D:C7:75:A3:C4
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       019E1D9105983C2F72B6FECE843935F47D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 19:01:43 +0000
Manifest this update:     Tue 12 May 2026 19:01:43 +0000
Manifest next update:     Wed 13 May 2026 19:01:43 +0000
Files and hashes:         1: 5u4yfVKLM7CuktVTwTBtBI5l6mE.roa (hash: uO9x72nmQmlknEm+PYx41lDnMkhqVv8VEIukGO6B+TE=)
                          2: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: gs5cAPp51zx9Yu01SVGG2a+5OKiprWyOzWsNgXO0370=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:05:98:3c:2f:72:b6:fe:ce:84:39:35:f4:7d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: May 12 19:01:43 2026 GMT
            Not After : May 13 19:01:43 2026 GMT
        Subject: CN=650bbd122d7e7ae461c124e66a98fd5dc775a3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:59:38:4a:16:2d:e1:c8:3e:f5:d9:e2:aa:
                    7c:99:2a:1c:32:ba:b8:81:0e:f2:24:60:db:a3:34:
                    48:0a:40:38:a0:54:1f:11:f8:11:95:cd:35:70:c3:
                    b9:a8:83:d9:05:49:4f:d4:4c:b2:b9:ef:c3:a6:bd:
                    40:fc:85:5b:59:77:ca:8b:74:5b:0c:b6:70:91:6b:
                    74:68:00:27:1c:d5:f0:db:9b:f7:a0:63:4b:b6:d5:
                    26:08:f1:4d:ed:f2:c1:8b:e8:81:ac:e2:06:43:2d:
                    57:53:3e:19:85:c5:2d:79:53:de:c3:0a:91:8b:af:
                    b6:40:b1:37:21:f7:f9:b1:07:3f:77:dc:4f:07:97:
                    12:24:29:32:3a:06:e5:8f:cd:4f:ea:55:bc:b2:6b:
                    5e:9a:ea:1e:3c:b8:ae:df:21:f7:eb:07:4a:f0:ad:
                    87:81:25:cc:7f:66:8b:3c:45:4d:48:80:75:56:e8:
                    d1:83:0c:34:d2:91:0d:28:11:ba:90:e3:b9:cd:05:
                    39:06:dd:f5:00:48:0b:3f:5b:b0:9b:f6:bd:00:92:
                    9f:59:bd:1f:6d:27:14:23:4b:4f:78:40:07:81:5b:
                    8f:92:35:f8:c0:32:cc:b4:58:ed:50:1f:ce:59:7f:
                    4f:14:fa:38:fb:1f:29:bf:ac:31:0d:0f:14:d1:aa:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:BD:12:2D:7E:7A:E4:61:C1:24:E6:6A:98:FD:5D:C7:75:A3:C4
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:63:45:5c:49:cc:df:86:77:11:61:8c:da:1a:8d:54:26:2d:
         4e:02:82:42:19:0a:01:95:21:c5:00:d3:2e:29:f6:32:55:f2:
         5a:f9:08:d3:73:e8:82:03:85:35:7a:9b:86:ad:16:1d:8a:85:
         64:3e:e8:d7:47:5f:b5:ec:c3:ae:04:97:ec:a9:59:1c:ce:c6:
         9a:1c:d8:2a:a6:e8:9d:c8:b0:e2:da:e5:86:92:28:c8:9f:d1:
         7d:3b:93:1a:d8:8c:90:19:b9:8a:37:5f:f1:73:d5:7d:b3:b9:
         26:ab:03:bd:7a:0d:59:99:55:a1:0f:76:d0:77:d8:4b:07:00:
         dd:31:9b:c0:29:86:f9:63:d3:89:ea:49:77:39:a8:e4:98:d2:
         8a:c3:3e:2b:c5:ea:84:1a:97:cd:c0:e3:94:55:be:b8:a1:dd:
         f6:ac:29:9e:51:b4:5b:b0:0e:70:f3:30:6c:bd:42:ad:85:af:
         05:c0:96:99:f8:32:ce:57:d0:33:c8:f7:00:e7:ae:e0:18:75:
         f9:bf:04:38:07:4a:28:85:8d:33:a3:4d:7c:01:a1:3c:80:d3:
         3b:0e:d6:03:62:99:4f:59:2f:0b:51:4a:14:23:47:f7:e1:d5:
         e4:85:2d:9f:5d:62:db:44:1f:8d:42:14:af:9d:f9:c0:34:40:
         f2:1a:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:23 2026 by rpki-client