Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          qmH/yCl1j8mua9v88u/2yMDiKcn6aG2UqkFmWlo2MGk=
Subject key identifier:   28:A8:DD:6C:08:67:5B:A0:C1:46:06:F3:9C:BA:A4:2D:38:94:55:92
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       019E1C7D967B249C75C15458F617D2B48DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          1482
Signing time:             Tue 12 May 2026 14:00:52 +0000
Manifest this update:     Tue 12 May 2026 14:00:52 +0000
Manifest next update:     Wed 13 May 2026 14:00:52 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: qOciwU/vm/xIrOpGudQWkTaVX/kDgsZJlxlhS+u3XNA=)
                          2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:96:7b:24:9c:75:c1:54:58:f6:17:d2:b4:8d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: May 12 14:00:52 2026 GMT
            Not After : May 13 14:00:52 2026 GMT
        Subject: CN=28a8dd6c08675ba0c14606f39cbaa42d38945592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:a0:ab:47:e2:64:a9:da:4e:98:a7:64:36:
                    24:eb:9c:14:6c:a9:4b:59:43:01:2f:77:7c:e5:eb:
                    98:24:b1:58:dd:eb:a5:64:5d:61:24:98:1c:67:8c:
                    61:62:d2:b9:24:c1:70:52:de:1c:ec:fa:39:71:d7:
                    11:90:df:b0:08:f3:27:21:57:83:f1:46:a1:5c:85:
                    32:71:6d:37:41:77:17:83:77:d1:22:5f:3f:fc:cf:
                    29:6b:b0:f7:d4:b1:5f:5f:99:d4:a2:7d:f7:5b:4c:
                    ff:07:0c:d6:6a:5a:cb:52:d3:56:7e:0a:e0:7a:07:
                    38:c0:d9:63:bb:d7:8b:14:02:fc:28:49:ac:c0:ea:
                    88:e3:87:b3:cf:9c:5d:b4:a0:9e:a8:ba:cb:25:e0:
                    87:8a:81:0b:a4:09:ca:da:32:a4:cc:ed:91:40:88:
                    c5:9e:bf:fe:0d:a3:29:7e:3e:2f:45:67:cd:d1:07:
                    8b:21:5d:c8:8d:10:fa:92:79:22:4a:97:f0:0e:a9:
                    46:dc:69:87:e9:e2:fa:d3:be:5e:04:91:16:13:83:
                    fe:37:7e:0c:d6:94:11:0e:19:38:08:c8:0a:e3:48:
                    cd:e0:8d:a5:44:8f:52:13:e4:22:92:4c:1f:7c:68:
                    46:6f:05:af:3e:73:4a:fc:e1:1e:28:21:ef:e1:55:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A8:DD:6C:08:67:5B:A0:C1:46:06:F3:9C:BA:A4:2D:38:94:55:92
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:3f:b2:14:5c:fc:4d:5f:ad:e8:54:5e:04:78:a9:01:36:
         5a:07:18:c4:18:76:c9:84:8d:fd:eb:5e:9e:67:18:06:64:83:
         c2:73:a3:1f:fd:ff:a2:ab:70:39:18:69:f9:a9:7a:3c:fc:86:
         c9:21:8a:03:b0:d5:7a:18:e6:48:9b:28:65:8f:49:d5:2f:6b:
         3b:c2:d4:39:d6:2f:a2:bf:5d:e6:3b:d3:37:7f:f9:81:b2:7f:
         5e:ed:78:e9:81:6d:d9:d2:80:7f:d7:59:4d:16:e0:ff:93:2a:
         86:25:51:e4:18:da:aa:2d:40:f2:f7:63:c6:94:a6:be:bc:bb:
         90:cf:99:b0:e2:bd:0c:29:58:93:01:f2:6f:4e:6d:39:9c:fd:
         25:91:9e:55:9f:c9:52:2b:e5:53:41:c1:f8:bc:6e:2a:4c:18:
         98:a0:25:52:70:ea:e9:3e:a7:95:c2:8f:f1:09:63:a0:46:ff:
         c3:53:bb:9f:3d:69:5a:1c:c3:08:76:1d:d1:cf:b4:4c:13:24:
         7a:15:c0:39:58:4c:f5:da:3d:80:f3:77:30:fe:32:cd:cb:c2:
         ed:ed:b4:03:ec:a4:ab:b8:e0:54:a8:b7:15:7d:31:30:c3:67:
         60:7d:64:25:6a:31:7d:c1:8e:8d:02:24:0a:db:88:36:11:9c:
         28:f7:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:39 2026 by rpki-client