Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          kY0sckYAuh85+FIJKJnrq0kAi8HHYLC1lPyD0zOWXSE=
Subject key identifier:   91:44:96:EE:05:2D:FD:7A:75:25:51:9C:31:A8:6E:3B:02:70:A7:4C
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       019FA82B63E4A0FA84D625ABA33B6784A484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          0D04
Signing time:             Tue 28 Jul 2026 10:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:43 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: mhFvApfar0vN7N3DawPY/6AET0sqpLsjbIlmSomEexM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:63:e4:a0:fa:84:d6:25:ab:a3:3b:67:84:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Jul 28 10:00:43 2026 GMT
            Not After : Jul 29 10:00:43 2026 GMT
        Subject: CN=914496ee052dfd7a7525519c31a86e3b0270a74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:82:d7:df:12:3b:d5:1e:ba:14:4c:22:7f:
                    d8:4e:94:b7:5a:43:ba:80:ce:cf:4b:80:d7:05:83:
                    62:09:fb:52:f8:2f:cb:3e:9b:bd:d2:fb:cf:55:49:
                    c4:e4:59:36:1f:62:5f:b3:bf:97:d2:dc:11:73:cb:
                    86:92:24:5a:0d:e9:90:9b:35:e3:11:54:4a:26:53:
                    ec:95:81:09:6f:83:0a:61:77:84:f8:c0:97:ac:ee:
                    36:df:05:19:6c:37:4b:95:a8:be:d6:18:6b:2e:5f:
                    34:21:be:dd:07:25:88:22:11:7a:46:ea:ba:90:80:
                    a2:3d:be:1c:91:1d:bf:4a:cb:ca:45:97:ef:5d:eb:
                    a2:7c:01:24:7b:4e:d0:4c:c6:44:3b:8c:b6:c3:3b:
                    48:08:6e:81:63:18:4c:11:70:da:c0:05:57:e4:6b:
                    88:3d:af:0d:b4:61:d7:ce:57:0b:1a:64:23:f3:d0:
                    04:b6:30:48:08:93:75:5b:1a:33:0f:e3:bd:a4:f0:
                    db:d3:30:57:27:24:31:c3:7e:72:dc:57:8b:ea:53:
                    bb:03:37:70:98:13:bc:ad:df:41:f2:a7:c3:95:b4:
                    ca:ed:ae:c8:ac:11:e4:49:4c:36:26:86:8b:3e:81:
                    b4:85:89:76:c1:96:07:5d:d5:9a:ab:25:36:2c:86:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:44:96:EE:05:2D:FD:7A:75:25:51:9C:31:A8:6E:3B:02:70:A7:4C
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:31:06:c8:99:ac:c3:27:19:1e:79:5d:6e:6e:19:80:e6:
         1f:2d:b4:e0:93:69:00:a0:06:14:f1:a2:5a:db:3e:06:00:75:
         40:90:03:75:19:e7:29:7b:4d:db:e6:b3:41:ad:14:e1:4d:7e:
         ea:0a:49:ac:45:e4:05:88:e6:62:09:f1:3f:42:35:ef:14:31:
         dc:ae:64:f7:22:ce:e2:83:29:59:4d:80:01:8b:04:63:50:ea:
         68:ae:22:02:78:17:4d:60:29:f8:03:0b:f1:f7:1a:0b:b6:40:
         6d:19:78:9f:74:6e:99:f2:22:c7:1e:8e:72:cd:bf:58:e0:e2:
         f8:78:fe:83:c1:3d:64:dd:76:bf:eb:90:3c:f8:e1:08:76:82:
         fb:24:48:e9:3e:ff:ba:c6:b0:06:c0:c1:41:d2:73:eb:04:2c:
         a3:b1:9d:2d:34:30:48:66:ca:8a:03:97:31:35:09:a7:90:84:
         5e:3e:53:c2:81:c2:81:51:b5:63:3b:78:28:cb:ec:d6:ab:f9:
         61:1f:55:50:93:2b:a0:05:b8:73:0b:cf:cc:2d:37:31:14:f8:
         6a:4f:b8:64:c0:79:5d:b2:cd:25:47:ba:d8:fe:ca:9b:f2:14:
         20:90:d1:a7:34:51:12:9a:e7:75:89:6d:38:5b:ae:81:5b:19:
         ce:62:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:49 2026 by rpki-client