Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          BK3gTAlIiU5FssVCZX25tzOcY4bAuJ45+Bgz7Abwd8M=
Subject key identifier:   CE:7E:5F:31:4A:19:69:93:CF:88:A1:10:F8:6D:B8:20:92:A5:D9:A9
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019E1CB5537E17B295894E151093821FAA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 15:01:45 +0000
Manifest this update:     Tue 12 May 2026 15:01:45 +0000
Manifest next update:     Wed 13 May 2026 15:01:45 +0000
Files and hashes:         1: 3JZHqPsWutux5J8tHXPSTpnIdjE.asa (hash: VJyftmErWIHuJi9O9+UcgaAO+btvOOaS+hqj+dP6C7o=)
                          2: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: QIXZaxu4s1+9KuJqTpxilBsck+7QOy5DJ2QF7o1vGw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:53:7e:17:b2:95:89:4e:15:10:93:82:1f:aa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: May 12 15:01:45 2026 GMT
            Not After : May 13 15:01:45 2026 GMT
        Subject: CN=ce7e5f314a196993cf88a110f86db82092a5d9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:1d:ba:6a:22:27:46:9e:30:31:ce:52:ab:
                    ae:29:65:bf:39:68:0c:89:d8:54:53:9d:8a:7f:ed:
                    ab:56:3a:a9:af:bf:ec:e9:7f:30:33:1b:dd:14:89:
                    41:cd:2f:30:63:00:b0:d7:be:12:d0:c4:5f:3e:a8:
                    60:b3:d0:87:03:70:ae:be:9f:70:30:8a:55:bb:9e:
                    89:2b:b1:7d:c2:9b:7a:c4:1f:65:93:5c:ca:01:08:
                    4e:a5:72:5b:19:a1:8f:5a:37:db:24:24:0f:fb:81:
                    00:bd:d3:c3:0a:bb:f2:41:6b:92:f0:d1:a8:7e:7d:
                    e5:41:30:32:9b:ef:d7:07:01:11:c5:fb:ac:13:2e:
                    b4:35:1c:a6:f3:ed:b6:60:f7:47:06:f1:e1:9a:8b:
                    53:47:55:6d:90:79:e7:78:91:2f:0e:bc:2b:01:f3:
                    26:75:69:9f:49:4b:d1:ec:a4:02:c6:0e:53:98:5e:
                    e2:82:d2:89:f5:6c:53:eb:5a:6a:aa:28:2d:39:0e:
                    60:6e:85:80:07:3f:3b:44:d3:74:a2:33:f6:a6:b9:
                    71:ff:8b:4f:93:d8:0a:b8:92:45:4e:41:b3:e5:72:
                    cd:3d:8c:99:a9:e6:41:b4:16:58:d6:f3:c0:11:25:
                    7e:a9:f2:bb:11:ef:04:e2:77:77:7c:a0:6b:e2:c9:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:5F:31:4A:19:69:93:CF:88:A1:10:F8:6D:B8:20:92:A5:D9:A9
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:76:a9:83:f1:cb:f5:ca:c1:c5:92:d2:5a:d5:03:99:2c:6e:
         96:8f:31:33:79:0f:61:ea:73:b3:96:59:39:59:56:c9:5d:b8:
         0c:09:d1:95:e9:54:82:ff:40:ed:d6:2f:8f:fa:ef:da:0f:61:
         ba:70:0f:ef:92:ad:69:0f:95:c4:3f:64:11:1f:91:84:dc:bb:
         29:d7:bb:00:d5:8c:12:4a:10:11:82:72:27:06:a3:0d:f6:1c:
         34:91:b0:41:1b:2b:f2:90:22:40:cb:fa:fa:a6:3c:70:0a:04:
         bd:4d:d0:44:3e:aa:bc:1e:1f:d8:af:01:2e:b9:30:d5:5c:2b:
         c1:ee:bf:a8:a5:42:e1:9e:03:c2:7e:80:14:c1:ac:f5:58:42:
         55:b7:3c:16:0a:7a:70:ba:a0:1a:26:fd:5c:06:4f:f7:a3:59:
         62:dd:8e:71:6d:0c:ac:5e:96:5d:b9:db:6b:01:ee:ad:d2:d6:
         6b:cb:a9:f3:62:c0:ed:1f:36:99:ab:15:a5:f3:d5:52:14:a5:
         db:33:93:38:cf:5e:d9:81:60:29:0c:04:d9:fc:28:fc:12:57:
         c5:f4:05:c0:bd:92:84:42:27:72:1a:a2:7d:c5:cd:59:d8:82:
         b6:6b:79:94:17:7b:58:b2:b9:aa:25:e6:1c:aa:f1:db:ec:61:
         8e:9d:08:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctVN+F7KViU4VEJOCH6qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjYwNTEyMTUwMTQ1WhcNMjYwNTEzMTUwMTQ1WjAzMTEwLwYDVQQD
EyhjZTdlNWYzMTRhMTk2OTkzY2Y4OGExMTBmODZkYjgyMDkyYTVkOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5kdumoiJ0aeMDHOUquuKWW/OWgM
idhUU52Kf+2rVjqpr7/s6X8wMxvdFIlBzS8wYwCw174S0MRfPqhgs9CHA3Cuvp9w
MIpVu56JK7F9wpt6xB9lk1zKAQhOpXJbGaGPWjfbJCQP+4EAvdPDCrvyQWuS8NGo
fn3lQTAym+/XBwERxfusEy60NRym8+22YPdHBvHhmotTR1VtkHnneJEvDrwrAfMm
dWmfSUvR7KQCxg5TmF7igtKJ9WxT61pqqigtOQ5gboWABz87RNN0ojP2prlx/4tP
k9gKuJJFTkGz5XLNPYyZqeZBtBZY1vPAESV+qfK7Ee8E4nd3fKBr4smu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5+XzFKGWmTz4ihEPhtuCCSpdmpMB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXapg/HL
9crBxZLSWtUDmSxulo8xM3kPYepzs5ZZOVlWyV24DAnRlelUgv9A7dYvj/rv2g9h
unAP75KtaQ+VxD9kER+RhNy7Kde7ANWMEkoQEYJyJwajDfYcNJGwQRsr8pAiQMv6
+qY8cAoEvU3QRD6qvB4f2K8BLrkw1Vwrwe6/qKVC4Z4Dwn6AFMGs9VhCVbc8Fgp6
cLqgGib9XAZP96NZYt2OcW0MrF6WXbnbawHurdLWa8up82LA7R82masVpfPVUhSl
2zOTOM9e2YFgKQwE2fwo/BJXxfQFwL2ShEInchqifcXNWdiCtmt5lBd7WLK5qiXm
HKrx2+xhjp0I0w==
-----END CERTIFICATE-----
Generated at Tue May 12 22:14:40 2026 by rpki-client