Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          bEw8pfDnq9KaKp2alX7HCTNBGFQ4ewm+m+qb6gqiJ8A=
Subject key identifier:   78:4F:34:82:9B:B5:FC:4F:12:BF:04:A8:52:C7:88:19:9C:AF:2C:36
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019EBE7EA7F37B8E1F3F59293AFE720F2B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          1654
Signing time:             Sat 13 Jun 2026 01:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:31 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: ElZw9nKNkFZiqhh9EQJf2jO82Xag1FyVVbYqASghd88=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:a7:f3:7b:8e:1f:3f:59:29:3a:fe:72:0f:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Jun 13 01:00:31 2026 GMT
            Not After : Jun 14 01:00:31 2026 GMT
        Subject: CN=784f34829bb5fc4f12bf04a852c788199caf2c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:6c:79:93:dd:44:3a:fb:59:4e:6a:b2:c4:
                    19:5e:45:64:a4:f0:c8:c1:a0:b9:83:7d:97:18:3d:
                    df:76:15:57:5f:e1:ae:d9:d3:3a:e9:7e:97:08:75:
                    38:94:1c:b9:b0:c4:b2:f8:eb:53:a1:2d:97:51:12:
                    bc:f0:35:d3:53:4b:59:51:46:cf:45:75:82:69:af:
                    bd:c0:58:ba:a8:02:44:00:ad:3e:4f:0d:54:4d:84:
                    13:4e:fe:86:91:4e:59:25:ff:5f:c1:0b:4f:06:1b:
                    3d:4c:18:0c:57:a9:97:58:03:7f:06:40:08:66:fe:
                    ee:4c:19:d1:0a:c2:5a:5e:52:2a:ba:7d:f5:e0:83:
                    84:58:9f:d0:3e:3e:b4:0e:90:aa:59:f7:7c:6a:fb:
                    38:ef:2e:59:d0:52:aa:ed:3c:09:54:6d:37:7c:c0:
                    3d:c5:02:38:50:e7:af:d8:48:41:b0:00:c6:76:b2:
                    0f:0f:65:7f:92:84:be:a2:48:e3:ab:5e:87:e0:80:
                    52:c7:39:b5:c8:a8:c1:f9:da:17:e1:83:fa:96:90:
                    02:1b:e9:a8:d4:4f:ce:e9:b7:57:80:1a:b6:d1:f5:
                    a4:e0:09:50:a0:b2:19:65:bb:40:d4:1c:f1:55:34:
                    db:62:f2:7d:d6:b1:2a:f6:0b:3c:f7:1c:3f:4c:6b:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:34:82:9B:B5:FC:4F:12:BF:04:A8:52:C7:88:19:9C:AF:2C:36
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:ba:80:d0:be:33:81:4f:3b:7c:a7:4f:ff:11:30:e0:e4:
         57:e8:11:22:ef:94:b1:e0:25:da:4a:cb:f3:22:0b:7b:25:e7:
         93:08:51:78:0f:ce:41:54:a1:36:ae:c1:1f:59:7a:04:d0:62:
         d2:5d:ac:0c:09:f7:d5:f6:ff:3a:dd:13:6a:48:5e:6b:6c:b7:
         03:d3:29:6e:ef:4b:ef:a8:38:31:88:b6:11:de:c6:fb:d9:67:
         82:b7:3c:92:2e:17:42:0c:4f:1d:94:8b:ff:ae:50:3b:46:fd:
         1a:e6:99:fc:9a:26:a4:5a:93:72:00:0c:c6:e9:59:83:73:62:
         3a:20:ad:56:14:9c:5b:25:83:fb:e3:ec:49:aa:3f:7d:2c:d7:
         7e:ea:5c:89:3f:ee:c3:f9:71:53:1e:d3:ac:ad:fa:c1:5f:a4:
         50:b7:59:84:6d:f1:72:74:e1:a6:f8:de:cd:b6:2d:4e:5a:61:
         f1:33:8d:cc:02:72:c7:6c:a4:3a:f9:01:34:87:42:2d:e4:1e:
         0c:7f:86:2f:58:11:8d:b9:74:2f:e0:67:f4:74:9a:a5:85:39:
         a3:a5:a4:f4:a5:72:81:73:bc:b0:ff:80:ca:7b:61:16:3e:25:
         db:2f:e0:26:31:d2:ff:e9:de:f4:c8:b0:bc:48:58:2e:db:87:
         ad:32:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:18 2026 by rpki-client