Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          aarU+YxXhdDPtPyflC5yubbcYnOA7KCu20dE4xiM/mA=
Subject key identifier:   26:7C:06:6F:C4:2B:03:00:1A:B0:78:56:E3:01:5B:2D:95:C8:3E:13
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       019E1D903279542896408E49FB6AA684ED2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:00:49 +0000
Manifest this update:     Tue 12 May 2026 19:00:49 +0000
Manifest next update:     Wed 13 May 2026 19:00:49 +0000
Files and hashes:         1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
                          2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: KUxgIzbmRxEETifCKOO10z59bwje3Iby29Jopuj3oAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:32:79:54:28:96:40:8e:49:fb:6a:a6:84:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: May 12 19:00:49 2026 GMT
            Not After : May 13 19:00:49 2026 GMT
        Subject: CN=267c066fc42b03001ab07856e3015b2d95c83e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:ee:0f:83:0b:54:ab:a5:86:d9:19:16:d2:
                    91:75:46:1b:d9:39:f6:05:65:f1:e4:e1:03:a0:56:
                    4d:6c:ec:c8:25:41:6e:4c:c2:0d:24:c4:47:68:d1:
                    19:74:6f:ba:39:35:67:dd:42:25:0d:5e:72:dd:db:
                    07:db:7d:aa:6b:ad:81:c4:14:9a:a5:84:f8:f4:8e:
                    78:64:54:3a:28:d4:5e:8f:97:37:d3:b7:f9:0f:b4:
                    d6:b9:db:3b:96:16:98:8a:75:63:14:98:19:83:10:
                    f9:fd:cc:1b:5f:2e:1c:55:23:39:5d:50:15:44:a8:
                    a4:0c:64:c0:d6:bd:6e:19:50:0a:40:54:60:95:74:
                    35:8b:c2:10:82:b5:eb:a9:89:7f:7f:e3:1f:9e:32:
                    fd:d8:68:48:bf:52:d5:ac:7b:ff:20:64:12:cf:fa:
                    6d:56:3a:2e:c5:aa:ef:67:41:0f:22:3f:8e:c3:81:
                    ef:ea:3b:72:10:b0:e3:59:0a:e7:bc:f1:ad:62:0d:
                    a6:a7:88:7e:00:00:9a:f3:51:31:b5:e4:9f:4b:96:
                    10:ca:81:a1:93:52:ef:e2:11:35:e6:b2:1c:5c:8e:
                    13:90:f1:39:d2:c0:9d:37:81:e2:fb:2c:cc:92:cc:
                    0a:64:01:59:cf:77:01:58:f8:89:b9:a6:ff:60:00:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:06:6F:C4:2B:03:00:1A:B0:78:56:E3:01:5B:2D:95:C8:3E:13
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:9f:c1:08:93:cb:ba:3e:1f:5e:30:d7:a4:d0:7c:8d:f6:
         b2:0e:f2:bf:7f:5b:76:c7:7c:17:91:8f:0d:e1:c8:7a:e7:19:
         fe:7c:f4:3d:94:e9:73:35:03:b5:5e:65:45:1e:79:c5:8a:06:
         c0:3a:5d:d9:ba:20:c2:12:ee:f2:75:9f:ad:51:ab:5d:6d:22:
         56:b5:63:a6:34:a6:9f:f7:9a:86:9f:b3:0b:ef:c1:01:97:de:
         03:51:d7:9e:fe:ca:3c:ee:ed:59:01:00:22:d3:40:86:98:a0:
         34:ef:8f:c3:56:87:dd:bd:68:d4:90:c6:68:c4:4f:47:64:f6:
         a0:b9:6a:19:68:a2:22:9e:39:07:7c:31:9b:40:ac:3c:c0:d1:
         5b:82:0a:db:a7:1a:3a:78:13:a2:0e:4d:1f:65:c5:00:a3:d9:
         07:86:5c:74:e2:a3:2b:ef:4d:0e:53:bf:74:e4:68:3b:1c:ac:
         1d:17:10:45:5c:8b:d9:9f:e2:a4:84:55:e0:3d:d0:6b:97:52:
         4e:59:2e:a2:14:cf:19:cd:9c:ad:ee:bc:2d:46:f5:0f:51:3a:
         74:f3:d1:67:ef:83:26:78:78:52:e3:8c:36:1f:5f:dd:35:51:
         37:c5:f7:52:5c:25:54:37:3e:04:e8:bc:80:9c:68:d4:dc:d9:
         56:3a:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:37 2026 by rpki-client