Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          gRTTBEv7/AJzjMVgjGg3BvkTw28Y7l7sw61dNj/QMwQ=
Subject key identifier:   4D:39:37:C8:43:AF:D6:89:48:A7:76:9F:75:B4:BE:CB:DF:FC:AA:CC
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       019D25BA8C7E7F6894EE14259CD3AF8A6E84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0E48
Signing time:             Wed 25 Mar 2026 16:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:15 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: Q+2qI9f46j+3O//1JcA6NlpVE2tfh05S7YC8ZxhnDCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:8c:7e:7f:68:94:ee:14:25:9c:d3:af:8a:6e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Mar 25 16:01:15 2026 GMT
            Not After : Mar 26 16:01:15 2026 GMT
        Subject: CN=4d3937c843afd68948a7769f75b4becbdffcaacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:7f:9d:6e:10:d3:4a:32:cb:7a:34:a0:f3:
                    b8:a5:15:67:a1:8c:cc:2f:75:2a:d6:59:04:02:d9:
                    bd:d1:78:3c:7e:04:df:30:5c:04:e8:06:96:f9:03:
                    f9:68:2c:84:b2:36:bb:26:e8:f7:14:95:4d:66:fa:
                    a1:d5:2f:64:52:16:3e:83:0a:59:bf:ad:94:5a:7d:
                    a1:7d:6a:24:f3:b0:cd:65:81:57:50:df:4c:b4:71:
                    97:f2:6f:6c:7b:fc:84:3a:ea:f3:3a:99:ed:d1:06:
                    17:68:e3:94:97:c3:4c:92:68:ce:3c:33:4a:c0:8b:
                    57:75:b7:d4:21:f3:4e:e9:ba:d3:ca:c4:bc:a5:07:
                    06:0b:98:01:fe:fb:c5:a3:9a:f3:3f:d6:15:23:6d:
                    b0:16:1d:ea:7d:66:79:4f:f4:06:83:59:11:4c:b6:
                    6b:2e:88:36:c3:64:a2:16:82:b7:75:e5:fb:88:e3:
                    88:31:e9:08:1d:a4:e5:47:fe:40:84:46:c1:f7:4a:
                    3c:8c:fd:6c:a3:9a:c8:ef:93:2f:c8:9d:69:1f:a0:
                    f7:0f:38:6b:d9:ec:0b:01:af:9f:ab:a8:40:84:75:
                    77:62:42:5b:0f:79:1d:30:20:36:4d:18:16:ce:84:
                    d6:97:0e:6b:7e:2f:55:2f:cb:98:b4:98:a8:85:4b:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:39:37:C8:43:AF:D6:89:48:A7:76:9F:75:B4:BE:CB:DF:FC:AA:CC
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:27:31:ae:db:02:0c:c6:9f:5f:57:21:4e:b4:44:3c:aa:
         47:35:32:41:c8:51:ff:a9:b8:20:9c:e7:45:e4:c6:be:bc:aa:
         bf:9a:2b:5f:1e:80:c9:7b:1b:fc:8c:91:f7:82:91:07:4b:d7:
         fb:0d:86:68:33:ac:81:8a:93:1f:2b:75:14:4a:29:54:a5:23:
         6e:a2:a0:5a:cd:85:3b:2c:fb:13:10:83:15:51:7c:a4:f0:aa:
         45:38:9c:bf:1b:ee:1d:94:63:e4:20:f5:b5:22:41:47:95:9c:
         91:61:28:27:a4:31:c7:18:ea:f2:8a:a4:91:5b:c0:e0:a2:2f:
         5f:63:60:5e:a2:f2:65:40:32:2c:9f:6e:e8:ce:5b:1d:6d:9a:
         74:e0:82:d9:a9:d5:9b:a8:3a:72:aa:ca:61:10:7d:d1:3f:ed:
         00:76:3f:f1:7f:44:fd:2c:0e:74:cd:07:d4:27:ae:83:11:b1:
         7d:a3:54:45:44:b9:16:09:54:27:da:36:05:12:84:57:19:cb:
         38:c3:2d:b4:aa:71:eb:b7:97:39:2d:95:86:e4:e4:f7:04:fe:
         ae:df:70:96:80:46:31:af:b5:97:a2:af:17:98:d3:3d:eb:f5:
         d2:39:41:76:b7:bb:bc:15:35:db:d1:5d:dc:c6:6b:34:24:49:
         f9:f5:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----