Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File:                     bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier:          CPV4B3dSmaMy0LTNHyqBg+OH9TreDC3ao8dUvAyr4ag=
Subject key identifier:   F2:BA:73:98:ED:49:A3:BF:65:C0:6A:49:2E:7B:5B:0F:A1:AB:AD:25
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer:       /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial:       019E1EA34A88BC304D5BA035ECE143D54E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:18 +0000
Manifest this update:     Wed 13 May 2026 00:01:18 +0000
Manifest next update:     Thu 14 May 2026 00:01:18 +0000
Files and hashes:         1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: WD5eyOlpxjmRlp9uJQHkULWyFQKGpKSPx3x5YJiDDus=)
                          2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:4a:88:bc:30:4d:5b:a0:35:ec:e1:43:d5:4e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
        Validity
            Not Before: May 13 00:01:18 2026 GMT
            Not After : May 14 00:01:18 2026 GMT
        Subject: CN=f2ba7398ed49a3bf65c06a492e7b5b0fa1abad25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:a6:2e:f3:ba:2a:19:02:93:17:d4:14:3d:
                    c4:2a:99:39:db:94:3d:89:7a:01:b5:96:7b:14:82:
                    a5:43:bf:d1:ec:ee:6e:e7:7a:50:56:3f:99:0b:bb:
                    c7:dc:d1:63:36:f6:35:2f:d7:44:52:44:90:ff:18:
                    21:92:66:c9:7a:61:e7:2a:1a:17:25:1e:34:4a:e0:
                    15:d9:6a:a4:29:fe:89:0f:44:3b:d7:b8:6b:32:1c:
                    36:9a:b0:86:be:78:76:86:00:49:87:17:c4:e7:49:
                    e9:0c:c6:92:5c:fc:e3:88:36:08:7f:b8:97:0b:b5:
                    1e:61:78:04:97:9b:5b:00:93:bb:6d:19:00:c7:47:
                    10:36:87:e3:ef:61:24:54:08:c2:71:3f:04:39:96:
                    e5:26:17:b6:81:42:d0:fa:fe:c9:88:1a:d3:a1:14:
                    ff:7f:91:f5:c2:cb:c0:81:11:e9:5d:bd:32:76:ad:
                    f3:fa:b4:47:5e:d3:5b:4e:06:56:66:1a:7e:9e:d7:
                    5b:de:4c:e5:a0:1e:bd:4c:ad:4b:10:f0:28:ae:a4:
                    88:40:4e:66:8e:38:62:92:fc:af:19:21:9f:8c:de:
                    84:32:1e:e0:cd:fa:bd:c5:a0:23:b4:b7:77:e6:71:
                    f1:24:4c:51:f7:69:91:9b:f8:90:d7:70:5e:22:34:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:73:98:ED:49:A3:BF:65:C0:6A:49:2E:7B:5B:0F:A1:AB:AD:25
            X509v3 Authority Key Identifier:
                keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:04:2b:d1:0b:64:f3:03:8f:90:e5:28:d6:12:53:b2:e6:
         80:1d:03:87:a9:80:e0:62:d5:92:df:eb:04:4b:d2:48:00:be:
         e0:6f:15:17:16:35:5e:d7:05:69:3c:be:2b:a7:19:7d:88:41:
         81:6d:3c:ef:2d:ee:7e:00:b5:de:53:07:95:1b:82:bf:03:db:
         31:09:19:cd:8d:3b:44:43:96:36:d3:5f:75:9d:64:02:28:0e:
         44:f3:6f:a8:20:e2:9d:fc:ec:4a:97:84:8c:32:e7:ed:d7:b3:
         61:3d:e1:2b:c8:b6:7e:4d:bc:0c:71:b8:48:e5:96:f3:36:34:
         af:26:1a:a2:84:84:eb:3f:af:3e:fe:57:71:29:cb:07:40:30:
         49:a5:04:02:58:e8:d9:d4:6f:a5:f0:01:83:70:b2:6b:5d:96:
         1c:99:94:5b:95:79:78:4a:8f:7b:8d:94:b9:54:aa:47:31:1e:
         d2:df:2d:bf:b4:d0:fc:cb:a6:ec:3a:89:9d:44:c0:1a:e1:06:
         8d:41:93:47:5c:4e:bb:e9:3f:ee:02:18:94:3e:15:5a:f9:b3:
         05:ad:12:e4:8a:11:18:d2:95:5b:86:18:ff:95:72:a3:a3:4b:
         94:17:57:96:77:b9:f8:01:62:01:f4:cc:54:e8:fe:69:f5:fe:
         2a:00:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:16 2026 by rpki-client