Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File:                     BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier:          1mjMmizfI0rOHHurI/wABSr4ojLC3zUX5I8mdrYlP/M=
Subject key identifier:   FF:BA:FA:A5:A1:42:9E:99:A4:B9:7E:0B:FD:DB:4B:8A:FA:CC:52:24
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer:       /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial:       019E1E6C248FCEB45BBB048A0B455659E543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 23:01:04 +0000
Manifest this update:     Tue 12 May 2026 23:01:04 +0000
Manifest next update:     Wed 13 May 2026 23:01:04 +0000
Files and hashes:         1: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: K6AlRGQZrKMdnaXytWiFbzMFCRWx/6cE7mhmx2lMmxQ=)
                          2: CZyTJuOlnq-ky9dbEConr41Bm38.roa (hash: 5rtJlpCqmLKREoblfIHZUZwHo3e3ekq4hHO8j58CnBY=)
                          3: euKoI7vmey1fTPE04HoSqLuDz4Q.roa (hash: 32wDb/N882DtoqSetNBAzx24jUXx/OWTovG5eWeLxNM=)
                          4: jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa (hash: m/C4McZFMkjpAqtTsTyqkoINmbz3Lx0YilvVZ7bpG9M=)
                          5: rWvQJ8xO6-SPDys-uWKDLRUA43o.roa (hash: zHIdrKZtf58ZqctGwQ2WHJ41AOjM3MPJlFFP2hW5ctw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:24:8f:ce:b4:5b:bb:04:8a:0b:45:56:59:e5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
        Validity
            Not Before: May 12 23:01:04 2026 GMT
            Not After : May 13 23:01:04 2026 GMT
        Subject: CN=ffbafaa5a1429e99a4b97e0bfddb4b8afacc5224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:ba:1b:46:1b:1a:60:17:a9:ba:e3:ed:ef:
                    90:6a:d7:55:b0:8b:a3:78:5e:55:cc:cb:46:34:e9:
                    d9:94:e6:54:ae:cb:02:60:97:b4:71:dc:16:7a:5d:
                    92:d3:12:7f:38:2b:35:34:32:13:3b:8e:ab:80:36:
                    09:55:11:11:04:85:ac:87:b5:98:01:e2:a6:3f:78:
                    ac:4f:f1:a2:a0:b5:b6:1e:3d:d4:e6:1b:17:79:30:
                    94:07:87:a9:06:63:67:6e:02:b3:bd:93:bd:cb:7b:
                    13:cb:e4:59:7b:3b:90:41:13:91:ac:b9:19:f6:74:
                    69:ad:3e:99:fe:fc:43:ca:57:3a:e5:b2:21:94:36:
                    d2:2d:32:37:28:7e:23:6b:51:64:0a:d9:ed:41:3b:
                    43:74:56:c6:f3:69:f9:80:e1:2d:99:5a:a1:8e:59:
                    c6:52:8f:27:d6:20:5f:4e:92:68:33:a2:b2:37:da:
                    4a:e5:08:65:94:5a:cc:47:b2:4d:b7:5e:dd:eb:d3:
                    6b:6f:42:63:c4:df:48:7d:bb:6a:2a:c4:dd:fe:35:
                    34:1b:06:c5:82:30:3e:6f:d4:d7:68:18:e3:ac:6f:
                    87:32:bf:ed:f3:a2:21:de:68:a6:f2:fd:01:4b:71:
                    50:a5:13:72:d4:68:35:e3:19:af:a3:22:19:2c:0d:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:FA:A5:A1:42:9E:99:A4:B9:7E:0B:FD:DB:4B:8A:FA:CC:52:24
            X509v3 Authority Key Identifier:
                keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:73:9f:b0:9d:47:ad:09:3b:99:cd:5e:71:10:2b:b8:b5:
         e7:dd:c4:4f:26:0e:b1:78:9d:f3:47:de:82:18:7e:77:81:f3:
         94:9b:75:67:95:34:46:26:06:39:94:6d:38:f9:68:8b:75:2e:
         65:c2:5d:37:05:7b:50:9b:ec:7d:df:6b:94:26:7c:b7:9a:6f:
         67:a7:e9:0b:aa:3b:30:06:c9:a1:56:e9:3f:49:8a:f2:d7:1c:
         ce:5d:45:45:79:d1:6a:e1:1b:de:3c:d5:22:05:73:43:ea:78:
         23:02:b9:72:37:0e:50:a2:14:75:e6:9c:38:f2:30:25:c1:46:
         6a:7d:50:10:d1:09:f2:73:cd:a2:4f:e6:07:bb:59:3a:09:75:
         ed:a6:d5:90:56:83:ca:c8:0c:4e:60:49:f6:89:13:ca:50:de:
         7a:8c:31:c2:be:bd:7c:92:01:f8:3d:f5:3d:24:41:c3:39:ac:
         ea:12:22:5b:eb:3f:d7:4a:c3:d8:65:11:74:49:68:9a:15:37:
         d8:95:df:eb:1c:70:09:51:97:8c:45:75:a1:21:ff:c6:1d:71:
         56:1e:d9:36:df:37:4c:6f:3e:93:6c:87:e5:03:3f:41:a3:72:
         26:29:45:f2:35:f6:5f:80:20:23:2f:f1:ba:72:d5:84:67:64:
         94:04:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:57 2026 by rpki-client