Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File:                     BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier:          xXLQX47KTJOLunB7XHjYK19itfDyE4WjVhQjBC46sqw=
Subject key identifier:   F1:BE:14:3A:A3:E8:18:6C:B1:3E:9F:FD:30:1F:38:C2:77:02:74:07
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer:       /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial:       019E1D9042EF307CB0E6FA702DB2AE51E22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number:          15E0
Signing time:             Tue 12 May 2026 19:00:53 +0000
Manifest this update:     Tue 12 May 2026 19:00:53 +0000
Manifest next update:     Wed 13 May 2026 19:00:53 +0000
Files and hashes:         1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: 91QhBXUSlPCguQ5Whd+TTUTkE/flrjulxDUGA8X5aWE=)
                          2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:42:ef:30:7c:b0:e6:fa:70:2d:b2:ae:51:e2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
        Validity
            Not Before: May 12 19:00:53 2026 GMT
            Not After : May 13 19:00:53 2026 GMT
        Subject: CN=f1be143aa3e8186cb13e9ffd301f38c277027407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:43:97:50:d0:48:3f:4e:16:f7:62:db:dc:
                    72:95:29:cf:bf:82:bf:5e:dd:63:4a:aa:61:ad:65:
                    d0:28:d1:8d:0a:ec:4b:2d:a0:74:49:dd:95:f9:c8:
                    e1:25:98:b3:79:a6:65:41:d1:ae:5b:c3:8e:d2:e9:
                    d6:b3:9e:d8:23:e7:0b:39:a7:fa:d6:a2:1b:38:12:
                    76:0e:a4:1a:8c:90:1a:2c:a2:13:e5:c3:c9:46:0b:
                    5d:99:d4:75:5c:df:f7:7d:10:9a:b9:03:77:c1:b5:
                    ad:52:42:98:c0:40:08:a0:16:86:67:9f:ab:2c:69:
                    93:ec:ec:5a:4c:d8:54:1a:ed:b2:48:92:ad:01:07:
                    a9:82:0a:8c:94:92:ec:f6:7b:14:e9:67:6e:1d:11:
                    19:b4:c0:5a:f8:9c:d3:a1:3e:ab:6f:eb:b1:6b:f0:
                    ea:b6:73:eb:70:de:06:3d:83:28:d4:ec:92:50:cc:
                    46:4b:59:0f:66:54:f6:4e:8b:4a:69:e1:83:47:02:
                    53:25:6b:8e:31:4c:a4:bf:ff:27:c6:19:ea:98:26:
                    8b:22:59:e6:b4:23:3c:39:65:cb:44:fb:da:2d:f8:
                    81:56:c2:31:80:db:26:42:a0:e9:4d:ac:09:36:d7:
                    2e:be:7b:b7:43:a9:35:67:f1:8e:b0:02:77:08:88:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:14:3A:A3:E8:18:6C:B1:3E:9F:FD:30:1F:38:C2:77:02:74:07
            X509v3 Authority Key Identifier:
                keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:b7:86:15:f9:50:ff:5c:30:92:58:e4:b1:83:b4:4f:c3:
         0b:c2:8a:b9:53:c5:1c:bd:c6:c2:27:6b:2b:9c:55:cd:28:d2:
         7c:22:27:d2:73:6d:07:b8:d8:b5:85:5b:2f:44:08:e5:f2:4c:
         81:a2:e0:b9:8d:53:98:28:c7:6e:17:49:54:72:e4:21:eb:db:
         bf:3d:ce:fe:ea:19:73:da:74:53:80:c6:13:8c:7d:cc:fc:2a:
         8f:3e:44:39:a4:ec:55:a0:18:4b:7b:59:72:98:5f:bc:73:ac:
         1a:a8:f1:8a:63:cf:88:f0:77:f5:86:40:83:23:27:9e:7a:db:
         b4:82:35:d6:ff:9e:f9:5d:39:57:2d:8a:a0:05:b2:78:de:19:
         db:58:28:f7:b2:18:43:e1:29:1d:a8:4b:50:41:1c:14:4e:41:
         c1:9a:77:e8:10:e5:6a:97:85:10:21:13:5a:19:ae:46:e7:05:
         68:c3:5c:0f:20:3c:17:d5:03:a7:e2:35:0e:92:e3:87:24:d5:
         92:52:e2:82:a9:3d:8e:85:85:b7:9c:b9:ab:68:9b:93:43:bc:
         76:fe:fe:39:e2:34:91:9e:76:79:13:c7:2a:a0:d4:0c:77:6e:
         5a:c2:18:89:80:04:1b:fe:ed:5e:85:64:1b:b0:91:c6:02:9d:
         5a:08:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:58 2026 by rpki-client