Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          M7s8eaFLhwlOBCSy0CD0Ls/WiHrte8fFiHTyXxAT2o8=
Subject key identifier:   9D:AE:F6:16:44:1E:24:C5:F6:64:28:AF:33:DD:6E:BD:43:43:EE:26
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019D985083E6331870285647FE6368DD90FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          05BA
Signing time:             Thu 16 Apr 2026 22:01:46 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:46 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:46 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: bLcsbfLBYhua0eeAhJ4FeODd89vsD9Q2F6PmTtbvefc=)
                          2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:83:e6:33:18:70:28:56:47:fe:63:68:dd:90:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Apr 16 22:01:46 2026 GMT
            Not After : Apr 17 22:01:46 2026 GMT
        Subject: CN=9daef616441e24c5f66428af33dd6ebd4343ee26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:34:05:5f:39:89:79:3a:ae:f8:5a:90:c2:
                    ca:44:bd:a8:9e:7b:d3:6e:e9:77:fa:9c:96:19:69:
                    ce:0d:93:d4:2f:60:f0:c0:1e:f7:35:7f:59:66:ee:
                    30:80:2a:4d:75:db:06:ef:a2:02:e9:5b:c3:c6:36:
                    d7:e0:4c:e2:d1:f6:7c:4a:56:12:6f:ee:dc:cc:33:
                    e1:57:8f:51:c5:8e:c3:54:02:3f:bb:83:be:f5:d9:
                    1c:b3:df:ba:53:b4:ca:e2:8d:d9:da:8d:5d:0c:96:
                    8b:61:2f:12:be:ff:82:a8:b2:3a:cc:8a:fc:75:81:
                    90:74:c0:fe:0c:a7:ed:41:64:7c:04:aa:d7:8b:a0:
                    a4:67:ba:63:7c:ba:16:83:76:78:ba:71:b6:8a:6f:
                    00:18:48:1a:e9:5f:07:96:1c:89:55:3b:9f:b8:78:
                    9a:99:58:21:62:28:6d:45:b1:a3:2f:29:24:bc:54:
                    01:39:18:06:9a:96:3c:64:98:82:da:43:6e:09:ed:
                    e5:fc:b4:d7:19:da:03:cf:94:8b:b4:2a:d3:58:41:
                    19:44:51:2b:02:bd:91:68:9b:ae:6c:1e:45:de:05:
                    85:ff:4e:5e:7a:d4:41:21:0c:8c:64:e7:2d:51:a8:
                    e9:8d:be:b7:a5:1e:a0:9f:a6:15:98:91:62:d8:4d:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:F6:16:44:1E:24:C5:F6:64:28:AF:33:DD:6E:BD:43:43:EE:26
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:ce:db:e1:ce:c9:a1:cb:19:c8:36:2e:97:22:2f:15:66:
         65:7b:ce:62:d8:a9:c6:ad:2b:54:4f:fc:99:74:6b:4c:bf:bf:
         3f:bf:7c:4b:69:ec:f1:bc:c0:8c:fd:fc:8a:c9:9e:d9:3f:37:
         48:65:18:0a:80:33:5e:46:32:01:70:cf:50:f4:b4:6e:63:9b:
         8e:78:9b:b0:40:d1:1d:49:59:fe:22:62:ee:5e:73:54:67:29:
         8c:12:8c:fc:8e:95:62:f6:17:df:6c:f6:cd:34:62:39:fc:21:
         56:c8:3e:7c:8f:59:33:5f:26:e8:fd:f7:2f:0a:93:49:fa:4d:
         d0:d7:11:e0:76:9a:91:11:ab:17:94:de:ba:c6:d2:70:bb:4b:
         09:9d:97:4d:fc:85:35:3b:fa:4b:52:99:71:36:08:93:6c:fc:
         a1:10:f0:a9:da:0b:cf:60:28:f4:24:c4:e8:90:94:b3:ab:30:
         19:ae:ab:88:59:11:e3:17:a2:a5:36:40:79:08:d3:6c:20:7c:
         a3:62:6a:a0:a2:e7:ad:d1:e2:03:89:e6:5f:7f:65:14:b2:61:
         dd:86:73:25:64:95:a0:e8:e5:4d:48:eb:10:6d:3d:e4:ed:f6:
         c8:2e:20:ee:77:78:45:b0:e4:0b:41:40:9f:9c:14:8a:e1:7f:
         7b:f5:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:02 2026 by rpki-client