Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier:          puAow1oL9fDnTQYKib/XdkMlxGktBZ/vtHkBLpMyf8E=
Subject key identifier:   E9:45:19:85:F5:BE:3F:1E:F6:DC:81:E5:5B:C8:BE:E4:DF:E9:A7:0D
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer:       /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial:       019FAB2C5C60E479DD63AB6613B38F50DADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number:          0A5B
Signing time:             Wed 29 Jul 2026 00:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:38 +0000
Files and hashes:         1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=)
                          2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: etZKCBCGsjqlPPfOhnyVO+5XBJ63CZE4qt3R3RYxMZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:5c:60:e4:79:dd:63:ab:66:13:b3:8f:50:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Validity
            Not Before: Jul 29 00:00:38 2026 GMT
            Not After : Jul 30 00:00:38 2026 GMT
        Subject: CN=e9451985f5be3f1ef6dc81e55bc8bee4dfe9a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:e0:8e:5e:f7:e5:35:fd:46:66:63:27:20:
                    80:1c:7e:14:3d:1e:ec:bd:94:0e:b9:13:6c:da:2a:
                    fd:b4:d7:d4:2c:e2:d9:21:12:a6:4c:a2:2c:19:7f:
                    99:bc:20:7f:99:56:51:77:aa:ff:0a:7d:bc:a9:df:
                    4c:02:7e:76:79:5e:66:84:33:86:7f:05:3b:25:36:
                    dd:11:bc:12:47:11:65:fa:fe:cd:ac:af:2b:34:d3:
                    72:3a:63:78:97:8f:28:97:8e:08:4f:e3:27:15:bb:
                    06:2b:9c:2d:34:99:81:db:b3:07:da:3c:1c:21:fa:
                    98:76:0e:4a:ba:6b:18:6d:c6:19:08:7e:69:98:30:
                    2e:87:f2:55:8f:7c:4f:d6:01:c6:e7:78:9c:e5:67:
                    01:58:c3:21:e3:bd:03:4a:cc:d3:9e:70:d0:74:19:
                    ec:89:ed:11:a5:0a:59:59:8d:4a:49:9f:38:63:44:
                    a9:33:c9:f0:ca:a9:13:f0:16:10:4c:77:f4:54:d7:
                    fd:4c:71:64:5e:04:a0:af:b4:ee:3a:14:d8:eb:e0:
                    0a:9c:e2:6a:d6:aa:57:10:fc:15:76:89:74:37:77:
                    13:ea:fe:2d:07:0c:fb:ae:d6:4e:e7:6f:ea:57:44:
                    c9:f4:f4:1a:69:8d:c7:13:8c:9b:e8:0f:2d:ab:f8:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:19:85:F5:BE:3F:1E:F6:DC:81:E5:5B:C8:BE:E4:DF:E9:A7:0D
            X509v3 Authority Key Identifier:
                keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:44:e2:8d:6e:f0:33:c9:a7:7c:28:98:7a:4b:da:c9:ba:e9:
         94:47:82:7e:a4:54:0a:10:8c:bc:a8:b7:dd:05:05:8b:1f:73:
         8d:18:be:53:e2:b8:10:fe:2d:67:a6:67:4e:0e:8f:90:bb:d9:
         ae:af:ac:42:25:95:86:4f:13:28:2a:0b:a2:5e:81:f3:c6:fe:
         10:cd:65:9f:0c:e4:c9:fe:f1:fb:3b:79:cc:71:33:f0:99:d7:
         33:96:72:fa:b6:b1:5f:f9:0d:13:d5:f0:29:6e:a7:92:1b:08:
         d4:cb:88:eb:43:52:96:0b:a9:af:31:f2:8e:76:c3:13:7a:22:
         61:13:76:cd:e2:f7:6f:39:47:02:41:79:e8:88:7d:a2:4c:0a:
         83:d1:a0:00:11:35:c4:81:00:2a:6a:49:f0:33:fe:81:28:ec:
         19:e1:d0:d7:6a:2f:61:56:d9:ba:fc:62:af:b8:57:a1:9a:96:
         b0:64:8b:be:ad:85:1e:1e:db:72:d8:04:b0:58:90:d4:84:c1:
         fe:3e:ad:16:62:38:d2:c3:d3:fe:bf:a4:8b:13:76:cc:4f:e7:
         fe:bf:c5:b2:07:70:eb:ff:0b:a6:2d:cc:2b:62:ee:38:f3:65:
         20:0f:15:9c:b3:1b:05:00:66:3a:f5:d8:be:10:31:b2:36:90:
         d9:9c:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:02 2026 by rpki-client