Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File:                     BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier:          d02ml6vilYV6KT83z/uQAOiy90DH5vrHj3Kv5mbIJiQ=
Subject key identifier:   59:1F:1C:FA:77:E1:34:8C:3A:E6:C4:18:33:DB:79:97:EC:DE:D6:A5
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer:       /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial:       019E1EA30E2E6BE88C4B93778649F921FE79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number:          0B51
Signing time:             Wed 13 May 2026 00:01:02 +0000
Manifest this update:     Wed 13 May 2026 00:01:02 +0000
Manifest next update:     Thu 14 May 2026 00:01:02 +0000
Files and hashes:         1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: 9F68kNb/3kNwpKHRsbaPiK2ixpjvUOQiaTCU3vEz8eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:0e:2e:6b:e8:8c:4b:93:77:86:49:f9:21:fe:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
        Validity
            Not Before: May 13 00:01:02 2026 GMT
            Not After : May 14 00:01:02 2026 GMT
        Subject: CN=591f1cfa77e1348c3ae6c41833db7997ecded6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:1e:0e:2d:55:bc:5a:d9:4c:80:9b:a4:d3:
                    c4:87:53:7e:52:1f:11:53:65:70:ef:79:b3:2d:69:
                    07:5f:e7:1a:a7:92:a8:02:61:cb:8b:5f:bb:e8:97:
                    20:cb:c2:d3:55:b8:f5:f8:d9:06:ba:46:82:12:0d:
                    8e:6c:e7:d6:82:39:ca:eb:19:d9:e6:86:3b:04:b8:
                    98:74:ff:74:30:e3:6e:91:ce:31:17:3a:65:3a:ce:
                    94:2d:1c:d8:66:3e:98:ef:85:3e:91:f7:68:40:f2:
                    25:3c:36:63:fa:05:73:a2:3a:97:f4:2b:fc:d6:fc:
                    42:ea:74:98:f0:07:a4:be:3a:81:1e:0c:9a:7a:1f:
                    48:3a:48:dd:59:f4:71:8e:52:5b:43:95:f5:ef:44:
                    ca:ba:6b:02:86:99:25:93:3c:89:c1:e8:8f:29:6d:
                    e3:8c:b5:96:f7:b9:fa:30:28:43:f3:9b:10:1f:c4:
                    64:4e:0d:77:7e:b6:b4:2b:4a:09:7f:ff:3d:83:b8:
                    91:04:d0:eb:0f:4c:3e:9e:81:34:8c:e5:09:6c:aa:
                    5c:d1:af:c7:be:84:64:65:49:1e:3c:2d:da:fc:0f:
                    27:d7:51:12:3d:77:89:87:0b:dd:52:a7:b2:da:95:
                    27:50:0d:91:99:b2:02:1c:95:d0:df:5b:a1:f8:63:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:1C:FA:77:E1:34:8C:3A:E6:C4:18:33:DB:79:97:EC:DE:D6:A5
            X509v3 Authority Key Identifier:
                keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:95:08:8c:d1:7e:81:7d:dd:f3:37:52:90:ce:52:0f:51:
         cb:cd:a5:73:28:53:73:df:47:ad:28:08:e5:f6:4f:ca:a9:86:
         c1:e8:58:4b:0a:80:cd:f6:4f:23:1c:ef:e6:df:5d:a9:15:12:
         19:6d:9c:b1:96:5f:13:8c:a1:05:71:60:00:ec:bd:4b:09:24:
         3d:17:46:75:8c:11:60:00:78:53:ff:a5:f9:cc:0e:a1:49:a6:
         e0:59:07:1a:a3:2c:f9:fe:24:44:22:85:f1:ef:73:b3:59:0b:
         4a:af:77:df:54:82:a4:da:2c:59:cd:63:99:c3:0d:b9:da:d9:
         23:35:b3:85:a4:e4:5c:58:1a:bf:9a:06:e9:a0:c8:71:d3:59:
         9d:c5:7d:1b:91:05:15:54:17:76:c2:b8:f7:b1:e6:c5:7f:a1:
         a2:85:19:a2:43:4d:79:5b:38:c8:3d:e5:d0:8e:77:18:74:d8:
         86:70:fa:36:48:64:98:07:57:e5:6f:b8:5f:85:9e:47:8b:55:
         a3:37:56:73:bb:cf:65:76:d0:3d:50:c2:af:ed:bd:85:0c:f3:
         a5:56:3a:c2:63:50:7b:25:1a:07:81:af:1c:02:8d:73:1d:fe:
         76:d4:58:4b:05:80:a4:9b:40:c4:36:9f:94:73:27:f7:59:ba:
         6c:8b:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:44 2026 by rpki-client