Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          yk4ROtc17NWTNszkpjotyDMyf3+TSRsmotqtYQfURqE=
Subject key identifier:   D2:63:B2:1B:8A:EA:6E:86:88:2F:1F:AA:7C:C0:06:DF:91:35:1B:B8
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       019D9962AD59703A022BD510DA4942F720ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0F14
Signing time:             Fri 17 Apr 2026 03:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:14 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: X8Gqq6HWq29dXgL8iISMoOadJUHlth/o3B4+/XLQDzw=)
                          2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:ad:59:70:3a:02:2b:d5:10:da:49:42:f7:20:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Apr 17 03:01:14 2026 GMT
            Not After : Apr 18 03:01:14 2026 GMT
        Subject: CN=d263b21b8aea6e86882f1faa7cc006df91351bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:3a:37:7b:f1:c1:7e:04:1b:9b:89:15:ac:
                    51:ab:05:c5:cc:f5:62:25:9f:6f:d1:1b:86:67:46:
                    89:f0:da:51:13:5a:fb:e1:a8:2c:8d:cc:6b:eb:e5:
                    d9:a5:61:2b:21:a1:9d:84:df:4d:ba:d0:94:72:1e:
                    44:17:4d:54:60:a1:a2:4c:0b:c7:51:f3:2d:35:c1:
                    47:9c:95:b6:d6:0d:24:63:dc:3e:34:6c:3e:91:dc:
                    37:19:84:fb:74:a6:9f:6c:52:ae:17:ed:01:8c:0d:
                    b1:6d:6b:2a:55:22:76:9e:80:bd:b0:59:cd:fd:74:
                    c2:72:38:19:9d:1e:0b:e7:d2:89:f1:36:da:d6:ac:
                    7a:c5:fb:2b:1c:9d:7c:4b:cb:90:61:65:25:95:fb:
                    e4:e6:92:c3:53:0e:aa:87:22:76:77:31:7c:a0:b4:
                    a7:48:da:99:99:52:e3:5f:9f:47:25:48:4e:70:4d:
                    5b:57:f4:96:90:6b:cb:04:03:f0:9a:bc:2a:13:d0:
                    af:e5:e1:f3:74:b8:1a:a0:af:72:c8:69:15:d5:99:
                    dc:9c:60:fb:42:4f:f8:64:3a:80:fa:20:f6:8a:4e:
                    c5:79:e7:72:d1:8a:15:94:71:c6:c6:f1:c4:31:e4:
                    37:40:7f:44:77:ff:89:76:0f:9f:2c:94:0a:85:16:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:63:B2:1B:8A:EA:6E:86:88:2F:1F:AA:7C:C0:06:DF:91:35:1B:B8
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:51:35:19:50:66:3c:f9:0f:7d:e3:35:78:ca:e8:2d:dc:
         79:ed:ba:b2:a4:96:0b:76:49:79:a9:43:9c:61:37:59:c6:b0:
         2a:62:9d:f8:cd:fe:d0:18:4a:29:45:1c:46:a1:b8:d5:7c:ce:
         24:b9:e1:82:f4:9f:25:d4:08:3f:54:88:6b:08:e9:7e:79:5a:
         84:8f:7c:10:1d:2f:02:0a:d5:0c:91:60:51:1c:86:64:d9:87:
         d7:22:fc:74:e4:6d:3b:99:57:d3:df:69:39:1b:6a:f2:bd:27:
         e6:bf:ab:e3:d3:8f:23:ce:3b:95:14:fd:e1:40:f5:8a:7e:00:
         95:bd:2e:dd:50:7f:1c:cf:c1:cd:6b:8f:e5:7a:03:7f:79:bc:
         1d:01:cd:b8:bc:8c:4a:a6:eb:2e:53:a2:be:63:5e:01:26:8b:
         db:c0:95:da:af:80:dc:ba:3a:ca:02:34:28:eb:a5:ad:94:94:
         2c:5a:a3:fe:50:5f:df:d3:bb:e5:ae:61:23:a1:59:62:43:48:
         b8:61:25:40:bf:b6:14:24:ad:d6:c6:5b:09:dd:ed:a0:dc:d9:
         72:02:39:1b:e5:c9:b9:0f:e7:78:5e:39:19:4b:a6:52:8c:02:
         b7:49:db:ba:a1:e8:58:26:81:42:41:55:b3:c8:0e:cb:63:74:
         88:83:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:26 2026 by rpki-client