Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          FC/pRY4nlHfGZtC+0ZJ327vAlSEPmy5j6eylL5XkgJA=
Subject key identifier:   B1:D7:D7:C7:64:A4:59:F7:2F:99:40:D1:03:86:DE:8C:D8:A6:C3:8D
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       019FA8D00F86B69CF93E0596475D6161F1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          156A
Signing time:             Tue 28 Jul 2026 13:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:35 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: eVMDzRMigIfo3ZHOHICN7sZcA04aQU4tyhIqehku4Jg=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:0f:86:b6:9c:f9:3e:05:96:47:5d:61:61:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Jul 28 13:00:35 2026 GMT
            Not After : Jul 29 13:00:35 2026 GMT
        Subject: CN=b1d7d7c764a459f72f9940d10386de8cd8a6c38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:75:5b:7b:d3:b9:eb:25:fa:ca:d0:cc:30:
                    c4:f7:0f:2e:1d:df:ae:a3:ef:88:ee:87:dd:c4:e2:
                    fc:f5:a8:6b:d8:14:be:a9:ba:d8:f9:10:a8:f0:e5:
                    26:f7:1d:c6:54:b2:44:17:ec:45:52:e0:37:8a:39:
                    59:41:0d:83:6f:a5:f5:83:f9:7d:74:6c:54:64:ae:
                    55:dd:e7:cf:74:92:e4:81:4b:a1:f1:9c:13:4e:2b:
                    6b:34:85:e4:9a:a9:a8:9b:8d:52:d4:16:71:07:01:
                    ff:40:58:cb:b4:c5:d0:83:20:f6:2e:65:3b:2d:3c:
                    fb:14:72:77:87:fe:17:07:11:06:94:75:53:b1:ca:
                    77:0c:18:1c:dd:c0:71:b9:4a:49:9f:9d:33:29:21:
                    a9:a5:45:36:aa:01:ea:eb:75:88:5f:1d:24:54:ce:
                    c4:e6:63:53:ab:a1:ac:d9:14:a8:72:21:b2:fb:97:
                    db:1d:25:84:04:c6:13:8b:ca:f9:fe:3d:ed:64:72:
                    39:7f:b9:1b:39:53:fd:83:f0:ea:00:5c:ce:0e:8b:
                    48:08:85:6a:9e:2b:a5:ea:a6:f5:88:ef:97:45:cd:
                    48:f7:59:ba:15:de:d9:50:a9:1a:e1:fb:41:3c:6b:
                    b5:6e:46:73:f0:d9:ea:ff:ce:04:3f:17:33:e7:ab:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D7:D7:C7:64:A4:59:F7:2F:99:40:D1:03:86:DE:8C:D8:A6:C3:8D
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:ca:1a:6f:d4:2a:70:ca:6f:99:3a:e1:0d:d5:82:58:38:
         62:68:b6:d0:38:72:b7:77:78:06:9c:99:7f:6e:56:ef:64:62:
         1f:95:b9:72:c5:8b:c9:0e:5c:6b:d5:52:9e:a7:87:49:ef:05:
         82:a2:4b:93:e1:e6:a0:16:1f:8e:ef:32:ab:37:f7:d4:77:12:
         c9:c7:25:c3:4f:04:8b:f1:61:5e:5b:47:1d:f9:53:aa:b4:c0:
         f3:0e:94:20:ee:73:f1:38:5e:6d:ee:0f:b1:50:d7:57:5c:77:
         0a:f2:80:83:cd:d6:51:3b:45:fb:58:c4:32:0b:9b:4d:aa:e6:
         22:e8:ea:23:ae:2f:c2:88:ba:7d:a1:57:94:23:af:a0:1d:92:
         92:d0:7a:a9:a6:08:2e:66:fd:1e:67:f5:4d:db:ac:d8:4a:40:
         9c:ac:fa:82:94:fd:2d:2a:d7:17:f8:7d:a6:76:1e:49:35:41:
         de:fa:e4:f0:5b:9c:b8:81:47:c7:5d:c8:3e:f2:d0:ba:d2:aa:
         74:80:9b:ef:b8:46:55:b9:0f:70:e7:d8:ca:fb:3a:52:87:ac:
         c3:28:a7:e2:47:43:6c:46:d3:b5:42:22:82:f4:9a:f7:d3:3b:
         30:ec:af:12:a3:db:67:0d:56:35:84:41:db:b6:d1:f5:fb:8e:
         aa:14:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:40 2026 by rpki-client