Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          1BZ2ZmxrxpU7qGSRyyt0r+Xk1ntXYjDnbx6ddxgGRuw=
Subject key identifier:   E6:AE:34:41:BA:39:2C:62:9C:5C:69:64:7F:22:45:C5:FA:EE:F4:6C
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       019CAA2159B4B2C4C68DDDEE46C833AEB643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0E08
Signing time:             Sun 01 Mar 2026 16:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:38 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: UKNVw8DJ4jBmul02VE7rKEUlJ1Urxp32fPn4QYpMIvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:59:b4:b2:c4:c6:8d:dd:ee:46:c8:33:ae:b6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Mar  1 16:00:38 2026 GMT
            Not After : Mar  2 16:00:38 2026 GMT
        Subject: CN=e6ae3441ba392c629c5c69647f2245c5faeef46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:24:02:e9:bb:80:41:ce:59:53:76:63:b3:
                    35:ce:81:55:ba:1f:9c:f7:e1:aa:df:03:34:df:80:
                    18:5f:68:cc:f5:75:8e:d4:b3:72:8d:a6:5a:42:73:
                    84:93:1c:be:48:5d:26:be:58:9e:5d:2b:69:c6:15:
                    21:fe:09:e4:ab:76:51:d2:dc:c1:f6:6f:dc:3e:83:
                    8f:dd:42:c7:f2:34:99:a9:3c:59:07:04:4e:43:48:
                    b0:69:08:1d:29:83:d3:9b:9b:40:50:06:bf:f1:08:
                    e8:2c:70:24:7b:8d:63:60:35:d2:79:fb:2a:33:6f:
                    dc:14:78:a7:6a:c4:b1:8a:5e:c4:46:8d:5a:dd:f8:
                    a5:36:3e:0a:58:a3:5e:11:f3:0e:94:5e:b9:a1:0e:
                    4a:7e:ae:2c:38:c1:e4:38:2e:ce:17:2b:ae:a0:3d:
                    ef:18:00:ff:23:ab:d3:c8:28:34:b1:8b:2e:5a:b6:
                    12:e2:b6:c4:fa:b2:0e:bc:c5:ff:0e:58:55:d7:19:
                    30:3f:2d:96:02:d5:00:b1:ac:17:26:6a:82:a6:16:
                    96:ab:2e:90:d5:1a:bd:bb:58:36:f1:4d:3b:3d:b6:
                    1f:b4:9a:92:0e:f4:73:fb:52:fa:dd:15:ba:3b:f8:
                    0d:7d:83:37:94:1f:52:a9:fb:ff:a8:06:c2:d1:7c:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AE:34:41:BA:39:2C:62:9C:5C:69:64:7F:22:45:C5:FA:EE:F4:6C
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:e2:cb:67:97:54:36:8a:69:67:7b:2d:0d:98:02:d4:57:
         68:40:8b:0e:5b:5a:8a:2c:6b:a3:08:c3:c2:65:eb:88:ef:4d:
         fa:cd:6d:2d:d3:c8:57:e9:e5:39:10:6a:d1:e5:bc:5f:0d:e0:
         31:48:84:7c:f7:31:eb:40:40:89:f8:8b:3b:1f:27:e0:f5:a8:
         95:e1:5a:00:24:71:ae:30:67:bb:fb:de:83:d4:c0:39:e4:fb:
         94:3d:75:4c:66:a5:40:47:17:3a:9e:6c:61:76:fc:4b:ff:9d:
         eb:b3:0c:07:8e:59:b3:e1:41:c9:b7:00:5c:4a:de:5d:b2:4f:
         11:f5:e2:5a:5b:c7:5a:51:70:cc:56:75:45:f1:2f:31:8e:b7:
         b8:c3:5c:eb:4b:38:62:13:1b:dd:f3:01:16:3e:69:17:bb:b4:
         22:e9:d5:80:c2:a5:a9:15:e1:45:03:4e:3a:96:e0:21:55:27:
         f9:d6:49:84:f8:c4:a3:4a:4d:0f:d7:74:79:53:7c:b6:ef:ee:
         1b:7d:da:f4:36:b5:ce:c9:ad:7e:4e:a5:86:b3:a2:86:f3:5d:
         5f:ec:93:36:0c:b8:ee:ef:da:bb:20:21:d9:53:f8:45:d8:88:
         05:90:7c:fd:0f:e5:6c:eb:a1:49:b6:10:86:cf:18:bd:9b:f3:
         b2:30:1a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIVm0ssTGjd3uRsgzrrZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm
MGNhNzEwHhcNMjYwMzAxMTYwMDM4WhcNMjYwMzAyMTYwMDM4WjAzMTEwLwYDVQQD
EyhlNmFlMzQ0MWJhMzkyYzYyOWM1YzY5NjQ3ZjIyNDVjNWZhZWVmNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIwkAum7gEHOWVN2Y7M1zoFVuh+c
9+Gq3wM034AYX2jM9XWO1LNyjaZaQnOEkxy+SF0mvlieXStpxhUh/gnkq3ZR0tzB
9m/cPoOP3ULH8jSZqTxZBwROQ0iwaQgdKYPTm5tAUAa/8QjoLHAke41jYDXSefsq
M2/cFHinasSxil7ERo1a3filNj4KWKNeEfMOlF65oQ5Kfq4sOMHkOC7OFyuuoD3v
GAD/I6vTyCg0sYsuWrYS4rbE+rIOvMX/DlhV1xkwPy2WAtUAsawXJmqCphaWqy6Q
1Rq9u1g28U07PbYftJqSDvRz+1L63RW6O/gNfYM3lB9Sqfv/qAbC0XyH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOauNEG6OSxinFxpZH8iRcX67vRsMB8GA1UdIwQY
MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt
ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw
LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbDiy2eX
VDaKaWd7LQ2YAtRXaECLDltaiixrowjDwmXriO9N+s1tLdPIV+nlORBq0eW8Xw3g
MUiEfPcx60BAifiLOx8n4PWoleFaACRxrjBnu/veg9TAOeT7lD11TGalQEcXOp5s
YXb8S/+d67MMB45Zs+FBybcAXEreXbJPEfXiWlvHWlFwzFZ1RfEvMY63uMNc60s4
YhMb3fMBFj5pF7u0IunVgMKlqRXhRQNOOpbgIVUn+dZJhPjEo0pND9d0eVN8tu/u
G33a9Da1zsmtfk6lhrOihvNdX+yTNgy47u/auyAh2VP4RdiIBZB8/Q/lbOuhSbYQ
hs8YvZvzsjAa1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:04 2026 by rpki-client