Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          qPTKds9ksaanx7pEI9P+7LAFSEB8K4acHIkfCesWnjk=
Subject key identifier:   5D:3B:96:AE:95:59:10:03:D2:BD:2B:C0:7F:AD:E2:11:4F:1A:6E:0C
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       019E1CEB3BB00F15480B557E9DCBC8F37D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          088A
Signing time:             Tue 12 May 2026 16:00:38 +0000
Manifest this update:     Tue 12 May 2026 16:00:38 +0000
Manifest next update:     Wed 13 May 2026 16:00:38 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: fQHbpRf9/zsHKr6fxil4Tvs+6TsReFhtfxjNq94cUIA=)
                          2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:3b:b0:0f:15:48:0b:55:7e:9d:cb:c8:f3:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: May 12 16:00:38 2026 GMT
            Not After : May 13 16:00:38 2026 GMT
        Subject: CN=5d3b96ae95591003d2bd2bc07fade2114f1a6e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:c4:55:f3:95:7c:c5:08:c8:ff:c3:2c:ee:
                    50:6e:cd:06:56:03:00:40:55:e7:67:5b:3f:76:f3:
                    8f:54:02:c6:ed:60:e0:8b:80:e3:d7:c1:89:9e:b6:
                    be:04:b6:84:dd:aa:03:4d:7e:bb:f5:e7:26:2f:79:
                    47:fa:88:36:c5:38:ad:1e:82:77:b9:00:e7:ec:fd:
                    e5:dc:d0:0d:4b:e4:3d:5a:55:25:1c:75:cb:ea:6f:
                    5b:f0:f0:e6:15:f0:7f:a2:05:4f:b6:2b:69:b9:4e:
                    98:ee:12:37:ec:4e:b7:87:6e:5b:3c:60:48:62:01:
                    8c:a2:a3:97:29:a7:ac:11:93:cf:91:cd:cf:25:28:
                    41:5e:a5:26:41:2d:5a:83:97:73:95:61:08:ee:21:
                    10:f5:83:8d:70:2f:82:0d:2d:a5:74:eb:00:b7:be:
                    87:27:f6:d8:0b:4e:14:60:40:de:8d:55:7a:a9:e0:
                    31:79:92:5b:d7:53:64:d7:3b:e5:ee:e9:43:d9:39:
                    40:07:9c:6f:1c:10:85:04:83:18:f4:5f:6d:3a:ac:
                    49:73:12:9e:42:95:dd:1b:fb:cb:17:73:bb:ed:21:
                    46:23:47:ad:57:13:43:b3:29:ab:85:6f:5a:ae:42:
                    3c:35:4c:d0:d4:e7:55:82:81:71:9b:a9:0e:a0:b8:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3B:96:AE:95:59:10:03:D2:BD:2B:C0:7F:AD:E2:11:4F:1A:6E:0C
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:61:45:01:d4:55:ac:ad:74:11:0e:22:73:86:a5:5c:84:
         c3:da:16:ea:4a:2f:2b:e4:52:85:62:07:a9:c3:7e:f2:9e:e1:
         df:32:e8:70:06:fd:d9:d5:33:40:d4:45:42:1d:42:d0:e7:44:
         a0:77:9e:45:bc:6d:7e:31:6a:d3:a4:23:e9:69:ca:b8:3d:c9:
         fd:31:1c:e7:7e:88:22:f3:3f:c6:20:e4:b1:f1:cf:07:13:0f:
         7a:33:db:90:15:5c:d1:69:51:62:00:0e:2a:fd:ac:20:a6:85:
         58:64:92:69:f3:23:e4:ab:cb:77:66:ca:7b:c3:2d:c4:9d:14:
         26:56:00:a7:cf:a5:ff:2c:b6:25:65:4d:07:da:9b:c0:0f:94:
         8c:38:6b:4e:c8:9e:ae:15:48:c0:0a:bb:87:27:91:cb:31:35:
         16:62:6c:97:01:90:71:ee:c7:04:24:b7:b9:72:58:a0:e3:1f:
         63:69:c9:90:14:3c:0e:68:dd:73:38:64:48:3e:53:89:a0:f2:
         d1:cb:0c:11:21:b4:68:fc:6b:d1:64:2f:5d:6f:ad:78:b2:01:
         ae:93:c2:6c:dd:a0:f2:b5:27:66:8c:dc:b5:a9:14:15:15:4d:
         08:a0:27:b1:c2:7b:e0:e0:27:b5:4e:df:ec:27:0c:b9:95:9b:
         af:b6:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:34 2026 by rpki-client