Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          uuBc5z7sfI3g51kn7dpK3ppV4uEzFtJa5B4cfhJ9BGY=
Subject key identifier:   A9:C7:D1:24:10:16:58:D5:EC:1B:6B:F8:6D:EF:F5:D1:4D:8B:ED:07
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       019DA341722B028AC8020DDB5712A65B9216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          145E
Signing time:             Sun 19 Apr 2026 01:01:08 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:08 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:08 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: NWTnC5PhNaWpvzQDB3XNAnuvtayU0pu4RxyQZUYG5Os=)
                          2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:72:2b:02:8a:c8:02:0d:db:57:12:a6:5b:92:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Apr 19 01:01:08 2026 GMT
            Not After : Apr 20 01:01:08 2026 GMT
        Subject: CN=a9c7d124101658d5ec1b6bf86deff5d14d8bed07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:bc:ac:b9:54:90:09:6a:73:73:ad:f2:5d:
                    c7:58:96:e2:14:af:94:14:81:ac:a4:f8:40:30:61:
                    49:0d:50:00:23:5e:f5:a4:e2:09:3a:c3:73:84:c6:
                    48:38:8e:b5:32:db:ec:f7:99:0a:7c:dc:74:44:46:
                    97:e1:1b:71:bd:68:c7:9f:19:db:e4:19:43:ac:26:
                    13:be:2d:d9:69:02:02:47:7d:20:f5:c5:05:df:56:
                    e7:8d:ea:b8:e3:3a:5d:80:a9:b2:87:29:43:8f:ac:
                    1d:62:27:f2:df:63:6a:46:9a:37:fa:25:ed:a8:9e:
                    b7:78:ed:6f:aa:09:b0:7f:41:30:e7:be:10:78:ce:
                    9d:a6:05:de:23:dc:f3:75:27:da:f3:8a:6d:47:c0:
                    c8:8e:1f:5f:af:00:71:21:99:99:c1:dd:e6:8a:0e:
                    20:ff:f7:e0:3c:8e:90:13:58:40:ee:f5:9e:e9:71:
                    8c:1b:52:80:57:68:56:60:be:c3:28:57:27:00:2e:
                    37:61:5e:e4:04:e3:a7:bf:a9:7e:dd:62:4a:39:cb:
                    0d:8d:5f:02:95:05:d0:11:a8:63:c8:6e:c9:be:e3:
                    d0:54:d8:c2:b6:dd:71:3d:77:4c:00:f8:fa:18:e9:
                    4b:df:f6:8f:a6:8b:47:55:34:6c:51:9e:1d:00:65:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:D1:24:10:16:58:D5:EC:1B:6B:F8:6D:EF:F5:D1:4D:8B:ED:07
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:25:78:c1:3f:32:e6:6b:a9:b5:fc:31:24:b9:5f:84:2b:
         18:8f:f5:1f:f2:1d:0d:31:44:f1:5f:a8:c0:7d:84:3a:02:8b:
         81:9b:ab:e7:99:3d:39:ee:c6:1b:0a:98:f7:96:0d:c3:33:70:
         75:2c:7f:6e:fa:a1:40:0c:5f:aa:3d:1b:79:76:e5:75:25:48:
         11:42:7b:47:4c:3c:a6:f3:8f:d9:37:6f:3a:a2:7d:0f:6e:8f:
         4e:01:1b:b8:78:00:5e:06:e1:eb:0a:e2:86:db:07:bc:de:5c:
         24:a4:5c:df:43:d3:de:4e:47:1f:60:77:ce:4e:39:b3:90:28:
         c5:81:73:3b:97:32:30:44:97:fa:89:25:18:d7:72:70:d7:52:
         41:8b:42:be:ad:56:22:a7:a2:ec:75:87:bc:7e:17:74:c4:e1:
         85:5d:52:a4:d3:b4:33:bf:42:ff:56:3c:cd:1f:a0:de:b0:f8:
         b6:af:5d:08:df:e6:49:4a:c7:2b:74:18:1a:f5:62:a5:8f:0e:
         cd:82:89:a9:11:93:75:0f:61:32:b6:e2:83:0c:48:9d:48:41:
         ee:cc:bd:1f:3c:27:00:de:38:47:d9:65:11:9a:cf:ca:88:99:
         54:93:e7:e9:7e:11:aa:b9:92:10:56:33:4b:37:a1:b3:96:60:
         58:62:e1:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQXIrAorIAg3bVxKmW5IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy
YTJjZmEwHhcNMjYwNDE5MDEwMTA4WhcNMjYwNDIwMDEwMTA4WjAzMTEwLwYDVQQD
EyhhOWM3ZDEyNDEwMTY1OGQ1ZWMxYjZiZjg2ZGVmZjVkMTRkOGJlZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XK8rLlUkAlqc3Ot8l3HWJbiFK+U
FIGspPhAMGFJDVAAI171pOIJOsNzhMZIOI61Mtvs95kKfNx0REaX4RtxvWjHnxnb
5BlDrCYTvi3ZaQICR30g9cUF31bnjeq44zpdgKmyhylDj6wdYify32NqRpo3+iXt
qJ63eO1vqgmwf0Ew574QeM6dpgXeI9zzdSfa84ptR8DIjh9frwBxIZmZwd3mig4g
//fgPI6QE1hA7vWe6XGMG1KAV2hWYL7DKFcnAC43YV7kBOOnv6l+3WJKOcsNjV8C
lQXQEahjyG7JvuPQVNjCtt1xPXdMAPj6GOlL3/aPpotHVTRsUZ4dAGUKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnH0SQQFljV7Btr+G3v9dFNi+0HMB8GA1UdIwQY
MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt
NWFlNWJjYTZmNDhjLzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj
LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLoleME/
MuZrqbX8MSS5X4QrGI/1H/IdDTFE8V+owH2EOgKLgZur55k9Oe7GGwqY95YNwzNw
dSx/bvqhQAxfqj0beXbldSVIEUJ7R0w8pvOP2TdvOqJ9D26PTgEbuHgAXgbh6wri
htsHvN5cJKRc30PT3k5HH2B3zk45s5AoxYFzO5cyMESX+oklGNdycNdSQYtCvq1W
Iqei7HWHvH4XdMThhV1SpNO0M79C/1Y8zR+g3rD4tq9dCN/mSUrHK3QYGvVipY8O
zYKJqRGTdQ9hMrbigwxInUhB7sy9HzwnAN44R9llEZrPyoiZVJPn6X4RqrmSEFYz
Szehs5ZgWGLh1g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:26 2026 by rpki-client