Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          RkiGkWbxRS5HMUcxxtvgAJKVdfJz1BGPQ5wnpskOFYE=
Subject key identifier:   91:68:77:37:27:C5:31:DD:87:4E:B4:CD:E8:A2:1B:67:73:89:F7:6F
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019E1D599021051FE28902467AE92606B895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 18:01:09 +0000
Manifest this update:     Tue 12 May 2026 18:01:09 +0000
Manifest next update:     Wed 13 May 2026 18:01:09 +0000
Files and hashes:         1: D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa (hash: tjw3dTvmZmkhSGo/nTvjDlfnKPPhFeeD7BJ95LJU948=)
                          2: UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa (hash: c42wwDGvS0oacLlYOE62P909TTqbzLeL8jdw4PO42z0=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: EaW8Rmvp8MRhzHtDVNKc2v+dKGh/dw4HPqhogWPHf4I=)
                          4: kQ09oRNTXVR1xe3b-WsWF5CPy-g.roa (hash: mSM7RpELOqwcQmqGi1wB2iUWIWwoZbiElym83yRxbP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:90:21:05:1f:e2:89:02:46:7a:e9:26:06:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: May 12 18:01:09 2026 GMT
            Not After : May 13 18:01:09 2026 GMT
        Subject: CN=9168773727c531dd874eb4cde8a21b677389f76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:ca:7d:b5:27:e1:10:ff:d9:5a:be:e5:a1:
                    79:74:96:9c:3d:1f:fb:e9:ae:82:b1:df:0c:31:3c:
                    09:32:5b:37:9b:0d:32:d9:9c:f2:98:92:38:8c:3b:
                    e7:56:22:fc:9b:66:8b:bd:82:51:10:0f:fb:ea:5f:
                    a1:81:9d:40:95:8d:17:42:59:82:49:2b:18:84:dc:
                    98:14:30:3f:86:e7:88:73:97:1f:df:de:37:33:db:
                    f7:98:2f:af:61:91:83:04:5d:d9:fd:5b:6c:80:93:
                    1f:31:19:6a:a2:ec:2a:2a:bb:c9:33:0b:dd:26:b3:
                    bd:f0:f1:ed:a8:86:82:35:9b:1a:b7:ba:65:d4:d9:
                    75:ff:2f:c2:18:33:fa:7a:38:bd:3a:94:52:10:5b:
                    7a:fb:66:12:bf:31:91:5c:22:ab:a8:fd:18:52:de:
                    08:c9:f6:dc:6a:49:87:be:58:ee:8b:88:27:a3:24:
                    30:da:76:05:3a:a7:d8:ce:c3:5c:a1:dd:82:e3:9d:
                    37:ee:8f:d3:4d:3d:22:78:73:a5:f4:a6:30:87:e2:
                    cf:82:e4:ef:77:d2:0b:2c:46:ab:38:dc:a9:91:db:
                    39:b9:25:4f:a9:46:5c:73:34:12:37:cd:b6:86:e8:
                    3d:cb:10:7a:f0:a1:65:ae:a2:da:2b:1f:5b:84:dc:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:77:37:27:C5:31:DD:87:4E:B4:CD:E8:A2:1B:67:73:89:F7:6F
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:c5:af:24:38:59:b8:8c:1a:eb:4f:0e:51:ee:fe:3e:2f:
         27:73:fb:e0:10:ac:60:3f:ba:46:bd:1a:50:c3:52:c9:01:1c:
         f1:c5:f5:1e:7d:f6:49:84:d0:6c:8c:81:59:a0:1d:e4:bb:75:
         0b:05:c2:90:c1:76:82:29:63:d0:a7:61:70:04:b6:77:04:ba:
         60:c1:d1:6f:2c:3b:02:61:bd:fd:f3:15:35:c4:b9:a0:95:b6:
         7e:a4:f8:4f:44:c6:f5:3a:23:55:43:03:40:33:6d:45:0f:42:
         1b:2b:2f:8d:25:ab:11:f7:57:11:7c:73:65:77:69:3d:fc:6f:
         a9:7e:58:c4:b0:1c:df:2d:20:3d:90:e0:ca:de:a8:5f:86:e9:
         f4:e6:0d:a1:8d:ef:10:c5:3e:55:76:4c:cb:01:c4:f5:af:39:
         f4:69:6b:5a:2c:78:90:1e:36:ee:4f:7a:0c:8a:2e:a4:60:41:
         06:f1:f2:e7:50:09:ed:03:9c:f7:0f:27:d0:32:44:3d:8b:04:
         c2:51:5d:a5:d1:1e:9a:c4:07:1c:75:86:90:92:7a:e0:c6:0d:
         88:31:6c:78:3f:94:b3:4e:79:fd:04:38:b6:a4:54:24:8a:01:
         3d:b0:27:17:5a:8d:e2:78:44:a3:d2:c6:a8:27:d7:47:50:84:
         6e:b4:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:38 2026 by rpki-client