Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File:                     BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier:          BF06lMvTelUP+RNuoMLrP2S/Hc+cdSgTaFmYRPAmAWU=
Subject key identifier:   8A:F0:EA:BB:B5:39:D4:B8:F5:5B:4B:3B:86:EA:09:92:B4:60:00:2F
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer:       /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial:       019D99D0CF6F0433CF705F71AB65E68EDBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number:          0F2E
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: AB8umA8bjPgJltKkIRne6IfYP0Y.roa (hash: bEK6Pc0xzgpCyMevab0GP8GntCpJtnUMRsRnsemYpvg=)
                          2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: ka5Z/SuFYfGIXkagZ7En5QVn4Uq7czV9L6NasQ8jodc=)
                          3: Ef2mz8xqhrKj3SB5AKH3hlrhTzU.roa (hash: 3/Mu4QjcxxnSUOoxL+4VfjaGTMXn9INAMEpjV6ScrKI=)
                          4: sNWqTxun9B8T5a1nVHtvNEr4TKw.roa (hash: z/D95gZg33TdNSMDHOhYm62OJIqU2YgKuCi7L08cx3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:cf:6f:04:33:cf:70:5f:71:ab:65:e6:8e:db:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=8af0eabbb539d4b8f55b4b3b86ea0992b460002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:3a:43:04:4d:f4:7b:51:b8:ee:4f:7d:16:
                    19:fb:ca:ba:d5:e7:4c:2e:b6:03:f9:ee:2e:f5:d2:
                    c7:c5:06:f0:4f:db:6a:3d:65:d0:04:c1:20:92:6e:
                    49:23:51:63:05:9b:de:92:21:cf:a1:81:6b:82:7a:
                    67:94:50:8d:14:93:82:68:91:92:e8:aa:44:96:b1:
                    77:b6:e5:10:e8:4e:59:5a:63:6e:b5:e9:95:b3:64:
                    36:fb:9f:c3:52:c3:cc:d0:b9:ca:6d:9b:81:07:54:
                    81:ad:ae:22:39:cc:2b:83:b9:97:ae:10:47:47:c2:
                    4c:b1:46:6f:de:70:00:9b:a7:49:c6:95:d3:56:57:
                    f4:d4:5b:44:45:e5:73:96:4a:0b:83:c8:3b:63:40:
                    6a:c8:95:5c:87:99:6f:3d:2a:c9:42:80:60:10:a4:
                    38:55:94:00:bb:f1:38:22:d3:b1:9c:da:37:ff:65:
                    a0:34:c6:18:fc:cc:d0:1a:4f:55:4f:2b:05:ed:94:
                    3d:7a:d3:d6:d3:f5:02:9e:f3:b8:eb:2d:70:36:30:
                    6d:42:1d:de:39:8d:be:f0:bb:b3:5c:e3:5e:bb:43:
                    ea:34:82:4a:87:1f:8d:61:b5:a7:ed:9a:57:14:70:
                    75:83:1c:c5:93:7a:d1:98:99:7f:d0:22:68:03:67:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:EA:BB:B5:39:D4:B8:F5:5B:4B:3B:86:EA:09:92:B4:60:00:2F
            X509v3 Authority Key Identifier:
                keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:09:ce:34:e2:6b:5a:f0:66:14:8b:4d:ca:14:06:67:ab:
         a2:9f:67:9f:cc:98:cd:7d:90:70:9c:66:96:53:f6:9c:59:fc:
         f8:af:49:b5:91:97:50:cf:db:a9:52:ba:08:9d:14:22:2f:18:
         d1:4d:90:52:a2:4c:c7:9e:d4:b0:f1:67:7c:ba:b8:68:e8:19:
         c0:6e:10:4b:05:a9:a8:cd:89:53:9c:20:18:50:62:f8:6f:f5:
         7f:b1:d3:51:23:bc:f8:3d:6c:85:47:a4:b0:67:a7:ce:2e:2f:
         57:8f:5e:ae:46:5f:bf:df:bc:1d:71:29:16:de:32:e4:88:ff:
         e5:af:18:09:be:33:c8:a5:67:14:6d:fc:00:e9:a5:4a:fe:44:
         23:34:37:f1:6d:25:47:04:e1:e5:62:0d:4c:48:d4:fd:3a:d0:
         50:e4:b2:06:aa:19:60:e2:2c:ad:ae:76:49:37:8d:c4:95:5f:
         38:f3:bf:e0:00:3b:c6:46:ca:39:e0:cb:bf:c3:bd:2f:6f:ca:
         33:c9:34:9e:74:27:51:b6:3e:a8:22:be:d6:7b:b2:b9:69:22:
         c6:a7:f5:24:0e:60:ba:a1:c4:b6:9a:ee:d7:55:8e:2b:08:5c:
         c8:8a:02:c3:58:8c:d2:c5:1d:c3:be:2d:a5:d4:46:6c:a0:3b:
         df:32:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:23 2026 by rpki-client