Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          5EOd3Lu604rW9ZITr6DisVmE6gsGseGlt/XzPnj2NdM=
Subject key identifier:   B1:C0:AC:BB:97:E1:8B:6D:9E:18:45:23:3B:C4:4C:73:FA:0C:31:24
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       01A1DE7102F8D49BB6FEE5D356C970B0ECF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          10BB
Signing time:             Sun 15 Nov 2026 09:01:50 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:50 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:50 +0000
Files and hashes:         1: 146jXKm1mB4IU8Kk9LRMQC_zNOY.asa (hash: 8veQrZoFWsY11ga3ViFvUI7ou0i1F07bbxgfAtHV5BE=)
                          2: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: pV1iJkDQGyUWhL0/N1LwPniifxg/aJUqguSzGX3Ging=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:02:f8:d4:9b:b6:fe:e5:d3:56:c9:70:b0:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Nov 15 09:01:50 2026 GMT
            Not After : Nov 16 09:01:50 2026 GMT
        Subject: CN=b1c0acbb97e18b6d9e1845233bc44c73fa0c3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:82:9e:df:32:95:a7:f1:9f:b5:7f:33:20:
                    97:07:dd:bd:dc:4f:75:10:ef:80:af:39:54:8a:c0:
                    c3:7b:be:66:b9:f6:b6:4a:61:ea:58:3a:19:8d:81:
                    23:d1:32:87:dc:09:e3:58:b3:75:49:c3:1b:30:65:
                    3c:6e:a2:0f:c4:4d:68:bb:a6:28:2b:fb:bd:b6:11:
                    c8:0d:d8:da:88:2b:f7:a6:de:6b:dc:19:1d:a8:ed:
                    5a:5f:54:7b:c2:24:9c:d0:00:d2:b6:6f:fa:20:d8:
                    32:e4:71:40:dd:82:f5:f0:e3:4d:32:c2:62:ba:79:
                    1b:81:33:37:a5:b8:f7:fe:53:4a:94:53:62:e0:1e:
                    d2:bb:15:c9:a1:7f:af:a8:97:9d:6f:69:3f:1e:71:
                    43:1b:1a:70:c1:99:8c:16:ec:f6:89:35:c5:85:a0:
                    23:c2:0f:05:a3:00:5a:4a:ee:52:54:84:a0:c7:0a:
                    5d:7e:25:8d:cb:ad:8e:e5:f2:2c:55:fc:44:60:bc:
                    47:92:d2:05:3e:2e:64:81:13:e4:98:e5:7c:50:5e:
                    a3:78:d5:b6:5a:95:4c:76:6f:db:97:a7:a8:a7:59:
                    da:a4:05:27:87:87:9f:8a:5a:7f:3a:26:2b:79:82:
                    b6:8e:01:4f:3e:70:c3:89:b4:81:a1:68:f5:d6:db:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C0:AC:BB:97:E1:8B:6D:9E:18:45:23:3B:C4:4C:73:FA:0C:31:24
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:1a:b8:b1:32:8b:3c:4f:8a:a8:17:12:55:0a:f5:a0:51:
         32:1d:60:4a:5f:4c:29:8b:b6:55:35:ba:5e:09:17:70:ff:07:
         7c:05:dc:f0:94:33:13:d5:53:f7:94:87:76:f5:f8:46:1f:a8:
         5c:85:be:62:62:c8:47:10:b1:20:74:76:13:e8:d6:08:9e:73:
         de:0b:30:ad:28:1d:fd:84:6b:32:27:17:16:29:35:39:b5:cf:
         d0:fd:4f:48:69:79:be:92:90:76:01:89:ae:3b:0c:a1:ce:cb:
         1a:54:3e:69:d2:af:f1:79:04:bb:e6:0c:b1:17:17:06:bb:71:
         b2:22:99:71:0d:04:32:3b:f4:2d:93:fa:4a:1f:ca:36:f1:6b:
         35:61:a1:33:0d:6b:6a:b6:a8:fe:f0:ae:35:27:cd:a5:dd:93:
         de:7a:39:85:92:90:58:c3:31:99:b3:92:5c:50:e4:38:90:31:
         32:35:43:7f:cc:18:b8:a2:0c:e4:37:a3:48:70:9c:c9:08:77:
         49:6f:3a:d4:01:f6:0b:9c:97:53:32:a0:aa:a8:a1:d4:78:72:
         56:1c:d0:63:09:d9:5d:9b:f7:58:b7:29:24:bd:2e:ab:e8:08:
         ce:bf:d7:a5:82:fd:c7:57:7b:14:9d:1b:10:c1:5b:09:bb:da:
         1d:bc:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:39 2026 by rpki-client