Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          JPt8PaDSl2ij7gugzIcveeS9+VbhoZGB3p6xrUw11d8=
Subject key identifier:   29:A3:DE:45:9D:26:0E:14:E8:08:D9:24:E7:DD:52:8B:52:D4:64:5D
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019D98F508DBF85657E150AF8EDCC0514024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          07F5
Signing time:             Fri 17 Apr 2026 01:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:28 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: mYP9fOmRBNKynP5Y7+rzTncXV8UL5Vzb2FiLGhsFcR0=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:08:db:f8:56:57:e1:50:af:8e:dc:c0:51:40:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Apr 17 01:01:28 2026 GMT
            Not After : Apr 18 01:01:28 2026 GMT
        Subject: CN=29a3de459d260e14e808d924e7dd528b52d4645d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:19:7e:01:cd:d9:91:8b:27:7e:17:54:1a:
                    a1:11:6e:cb:1d:6a:bd:7a:58:23:d9:da:23:32:3c:
                    d0:4f:0f:47:a8:e4:a3:bf:18:fc:7a:f9:a9:3f:46:
                    48:30:a8:24:25:ca:04:3d:1d:e2:44:c5:3e:33:5e:
                    d7:5d:84:31:1d:02:ac:02:43:08:ea:c5:a8:fe:d6:
                    e2:be:00:22:f8:ad:47:34:e3:b1:e0:82:29:11:bc:
                    bf:6b:fe:02:db:76:5d:fa:61:6e:f5:41:35:02:84:
                    2d:9b:5d:31:b9:fe:a4:b2:7e:ca:25:24:03:58:f7:
                    04:36:cc:4f:18:75:6b:a0:3e:77:20:38:3c:cf:82:
                    e0:cf:98:67:c3:38:d9:f9:52:c6:7d:10:ad:07:f6:
                    5d:9d:6f:ab:ee:20:c3:31:9a:cf:05:3f:08:58:d9:
                    95:12:1b:4a:28:64:38:33:39:b8:ba:fc:52:5e:5a:
                    47:11:1d:b7:37:f5:22:1d:92:44:78:24:f1:01:6d:
                    57:db:1d:40:87:b0:dd:a9:7f:2f:c5:24:e8:a0:0c:
                    03:a0:b4:4a:43:cc:26:39:82:86:85:49:e3:40:c5:
                    cc:75:ac:9f:53:8f:6a:43:4a:fc:f4:be:ac:14:0a:
                    62:4a:6b:9b:2d:be:1e:6a:e8:f6:93:8a:2e:b1:4a:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A3:DE:45:9D:26:0E:14:E8:08:D9:24:E7:DD:52:8B:52:D4:64:5D
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:a3:40:11:ff:d3:79:6c:4b:13:8b:9f:31:eb:99:b6:12:
         51:5d:39:b9:ef:fc:64:a3:b1:9c:91:1a:f4:51:72:21:2a:5b:
         e9:8d:d2:41:4a:36:a7:f3:31:f7:62:5b:fb:74:ff:f6:39:0f:
         cf:57:d6:7d:f8:2b:a2:d4:d5:07:ef:00:cf:60:73:56:4e:06:
         21:bf:2b:92:22:47:4b:1e:af:2f:f8:7a:83:98:ea:4a:85:43:
         46:7b:d3:49:1f:9a:44:90:38:a8:e2:e9:b3:ef:b8:6b:1a:f9:
         d9:52:ed:33:89:7c:3d:f6:e2:8b:2d:74:41:f4:3c:f8:ae:83:
         d6:86:f1:9c:48:f0:f3:bc:6a:11:45:3c:5a:14:92:3c:45:64:
         3f:09:42:3d:27:1a:39:2e:9d:56:69:40:be:d1:02:e7:b6:09:
         37:5c:74:62:e0:60:54:62:ef:64:94:60:fd:37:1a:5e:70:51:
         27:e7:e1:bb:92:79:33:b4:a1:b5:e6:2d:7c:51:38:ad:3c:89:
         44:2d:99:e6:66:54:9d:a9:29:52:35:0c:a8:42:14:ed:71:92:
         2e:c0:d2:d1:0c:6f:ab:7c:8c:d3:1f:de:4b:31:ec:54:46:88:
         06:2d:f3:24:29:26:10:69:23:93:46:4f:0b:fe:44:f2:25:80:
         c0:46:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:52 2026 by rpki-client