Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          FeeyJoW+nxmdBCUVkIkumFsQTNHhiSfBu5ZLDTfCFlg=
Subject key identifier:   25:EF:4F:C4:4D:DE:17:40:78:FE:44:C6:30:A4:CD:97:39:21:5C:93
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       019E1DC76E3C82D795CBBEF33B76C9310383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 20:01:09 +0000
Manifest this update:     Tue 12 May 2026 20:01:09 +0000
Manifest next update:     Wed 13 May 2026 20:01:09 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: f8D6aSexXGMMF/ecI+z1LJUSdgD0Ofnq7aeh5/vxIv0=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:6e:3c:82:d7:95:cb:be:f3:3b:76:c9:31:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: May 12 20:01:09 2026 GMT
            Not After : May 13 20:01:09 2026 GMT
        Subject: CN=25ef4fc44dde174078fe44c630a4cd9739215c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e9:5c:82:fa:0d:91:34:06:94:a9:2c:5a:e2:
                    c9:d9:93:78:29:b9:53:e2:ff:f2:a2:90:9d:1c:b3:
                    94:2a:0d:63:32:2b:2b:94:02:77:61:40:01:5c:a8:
                    d3:c8:1b:23:2c:03:bc:11:e3:d4:1a:ec:f2:51:75:
                    8b:8a:c9:44:a7:21:12:f7:6f:e6:d1:fb:cb:89:14:
                    8d:93:a8:1b:ff:51:94:fd:b6:eb:72:d8:bc:52:c1:
                    30:eb:b4:7d:35:83:1c:8a:7c:c3:75:c5:7d:89:2d:
                    80:76:d1:5a:d6:8a:88:99:45:2a:12:dd:5c:c9:23:
                    63:84:46:3a:b3:6f:e1:7d:08:a5:97:1d:23:0c:de:
                    41:6b:74:95:b4:f5:10:ea:78:e7:a6:4a:be:e7:ba:
                    cc:c3:13:e8:75:96:b7:2c:e7:88:59:52:ef:d7:f5:
                    7a:17:d3:ad:be:97:f1:9f:63:fe:df:e2:bb:c5:9d:
                    a7:7b:16:e9:5a:70:52:97:df:fa:e1:03:99:f9:b5:
                    8f:fe:47:a3:2b:59:1a:7a:6f:fc:19:19:16:00:47:
                    12:27:d5:6e:e5:ee:5f:9e:9c:3a:17:1e:5b:17:fb:
                    3e:1e:23:c2:4b:aa:0b:2c:14:2b:00:d1:d2:de:0d:
                    71:77:25:e5:a5:30:8d:f8:f0:bd:ca:0d:d9:32:5c:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EF:4F:C4:4D:DE:17:40:78:FE:44:C6:30:A4:CD:97:39:21:5C:93
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:8b:a3:51:71:6e:8a:99:aa:5f:0e:a2:29:c1:38:08:59:
         13:1b:10:f3:7e:08:30:cc:c5:9d:36:b4:fc:56:cb:da:fc:a8:
         7d:a4:bc:f7:cd:e3:bc:27:e0:91:83:ed:09:51:25:87:f5:d9:
         1d:14:f1:d5:e5:8b:cb:48:7f:e1:aa:d2:92:ea:64:da:d5:9b:
         1c:e0:18:53:2c:95:73:e8:72:8b:f1:c0:9e:e0:44:d0:cc:43:
         ba:92:b9:32:0a:91:a3:52:d0:e2:a4:20:ec:0e:57:09:b1:f3:
         54:aa:ca:03:09:4e:80:8b:c5:7a:5b:35:fc:a8:55:34:b9:7f:
         af:8d:b4:b7:5d:04:9f:d6:f0:e7:5e:62:68:fe:cb:2a:fb:9a:
         21:4e:30:85:16:13:5c:76:c4:41:25:cc:23:f6:96:69:66:99:
         fb:90:18:6b:a0:9d:95:7f:0b:89:c5:77:f8:ca:23:37:d5:7d:
         91:86:65:81:97:40:05:b3:7e:a0:ff:fd:d4:ae:08:60:de:fe:
         44:9b:1e:22:4b:1d:a7:36:3b:c2:26:e5:ee:46:e2:44:31:4a:
         fc:9d:9e:63:2e:ce:d6:e0:67:06:35:60:7a:ee:22:0a:83:64:
         22:54:69:c1:39:3e:65:c9:d4:72:d3:9a:67:6f:b7:42:fa:15:
         21:49:58:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx248gteVy77zO3bJMQODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Zjc2NmYxZGUxM2FlYzdmYjA1MDE5M2Y4MzI5YTY2MDll
MDA5NWQwHhcNMjYwNTEyMjAwMTA5WhcNMjYwNTEzMjAwMTA5WjAzMTEwLwYDVQQD
EygyNWVmNGZjNDRkZGUxNzQwNzhmZTQ0YzYzMGE0Y2Q5NzM5MjE1YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9elcgvoNkTQGlKksWuLJ2ZN4KblT
4v/yopCdHLOUKg1jMisrlAJ3YUABXKjTyBsjLAO8EePUGuzyUXWLislEpyES92/m
0fvLiRSNk6gb/1GU/bbrcti8UsEw67R9NYMcinzDdcV9iS2AdtFa1oqImUUqEt1c
ySNjhEY6s2/hfQillx0jDN5Ba3SVtPUQ6njnpkq+57rMwxPodZa3LOeIWVLv1/V6
F9Otvpfxn2P+3+K7xZ2nexbpWnBSl9/64QOZ+bWP/kejK1kaem/8GRkWAEcSJ9Vu
5e5fnpw6Fx5bF/s+HiPCS6oLLBQrANHS3g1xdyXlpTCN+PC9yg3ZMlwICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXvT8RN3hdAeP5ExjCkzZc5IVyTMB8GA1UdIwQY
MBaAFAb3ZvHeE67H+wUBk/gymmYJ4AldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQt
ZWQxNDA4ZTcxYzFmLzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80OTEwYjItYjcwOS00MDhmLWE5ZTQtZWQxNDA4ZTcxYzFm
LzEvQnZkbThkNFRyc2Y3QlFHVC1ES2FaZ25nQ1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9SLo1Fx
boqZql8OoinBOAhZExsQ834IMMzFnTa0/FbL2vyofaS8983jvCfgkYPtCVElh/XZ
HRTx1eWLy0h/4arSkupk2tWbHOAYUyyVc+hyi/HAnuBE0MxDupK5MgqRo1LQ4qQg
7A5XCbHzVKrKAwlOgIvFels1/KhVNLl/r420t10En9bw515iaP7LKvuaIU4whRYT
XHbEQSXMI/aWaWaZ+5AYa6CdlX8LicV3+MojN9V9kYZlgZdABbN+oP/91K4IYN7+
RJseIksdpzY7wibl7kbiRDFK/J2eYy7O1uBnBjVgeu4iCoNkIlRpwTk+ZcnUctOa
Z2+3QvoVIUlYSA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:06:00 2026 by rpki-client