Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          Np3KunxD/H/TtrdqqqBZF1bVMOXDr1oP0eMBIpKLVlg=
Subject key identifier:   E0:F7:BB:13:A7:BB:A9:1F:CB:03:15:DA:61:25:AC:5E:A2:D3:D2:BC
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       019D98F4DCF0331C50D4B69C421698F1D850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          0BF3
Signing time:             Fri 17 Apr 2026 01:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:17 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: 2N5dgoFaUpigI7iNl3J2jOn5bbcqe1yiffVYMR6CBtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:dc:f0:33:1c:50:d4:b6:9c:42:16:98:f1:d8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Apr 17 01:01:17 2026 GMT
            Not After : Apr 18 01:01:17 2026 GMT
        Subject: CN=e0f7bb13a7bba91fcb0315da6125ac5ea2d3d2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:26:dd:c5:9d:d2:09:96:5d:df:83:22:24:
                    0a:95:58:20:27:b3:f6:de:83:29:a0:28:fa:05:f2:
                    39:be:98:c4:d4:32:d4:b0:dd:95:c8:16:ee:1e:76:
                    49:cd:fd:50:b3:99:be:f5:88:f4:90:bc:ec:df:e1:
                    c4:61:bf:e7:0d:d8:d4:43:3c:df:d5:33:20:29:0b:
                    55:bc:8d:38:c6:96:55:6f:30:9d:9a:a7:ef:65:1b:
                    71:6f:a8:b7:c8:cd:df:32:18:73:65:f1:32:96:f4:
                    11:ee:d5:63:a2:26:42:6d:f4:9b:39:e7:95:93:ea:
                    79:b6:cd:6a:1c:00:40:fd:e4:34:4e:40:8c:13:cb:
                    5a:0e:22:8a:53:65:aa:e2:ca:95:f7:1c:77:b0:81:
                    bf:9d:f7:7d:75:b8:11:ca:1a:58:02:38:63:a8:f0:
                    cd:2b:0f:57:01:3a:08:08:45:51:77:fe:35:dd:69:
                    71:f7:9f:85:0a:52:ae:37:b9:4a:45:d7:f7:1a:27:
                    69:52:85:0b:f7:18:69:55:57:db:fc:2a:53:83:e0:
                    17:4f:dc:43:31:dd:c2:73:91:ee:37:35:43:c1:70:
                    b2:6a:46:16:0c:5b:55:de:2b:e6:09:98:19:af:36:
                    45:da:7c:15:97:04:15:c0:37:13:d1:04:e9:47:df:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:BB:13:A7:BB:A9:1F:CB:03:15:DA:61:25:AC:5E:A2:D3:D2:BC
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:e4:f1:1d:a2:1b:e4:f3:d6:f0:56:c7:1c:77:17:b6:77:
         15:c8:5f:0e:e3:74:6d:48:cf:1d:f8:2f:98:7d:5a:74:71:45:
         0d:da:2d:30:b9:15:4b:c4:52:64:ac:86:c9:33:51:42:32:52:
         2b:ce:95:7d:7b:77:b6:b9:18:0e:62:9d:65:d1:55:74:d9:6a:
         de:57:ba:07:3d:f8:fd:46:1f:a6:a4:6b:30:b2:db:16:5e:83:
         b7:ce:1d:60:2b:ad:88:81:aa:88:3b:9e:07:21:06:8c:91:50:
         dc:75:ef:07:20:9e:a0:33:3c:01:d0:e7:6d:53:a9:9b:bf:0a:
         c2:82:3b:6d:32:bd:57:47:c7:55:b6:cc:50:fa:9c:36:6a:85:
         2a:bc:10:e0:3f:94:6b:bc:55:0b:62:71:81:99:7c:96:3e:39:
         b6:c0:fa:8d:f1:2f:58:5a:f7:3f:3c:01:a8:82:11:8d:67:7e:
         7a:0a:e7:3f:21:71:0f:2f:e9:e7:3a:e8:31:7d:2d:88:8d:e0:
         bb:91:53:34:be:bb:d3:da:93:b7:e6:ec:bf:47:00:f2:08:fa:
         34:ff:8c:e5:86:3b:6f:03:21:24:57:41:90:fe:c0:09:dc:94:
         e4:cf:8d:c9:b9:05:71:df:6b:15:39:c7:9b:4a:1d:75:80:2a:
         28:6b:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:45 2026 by rpki-client