Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          Ng3vJizqnQ/nMO3mL9wUUj19g3Ik5F3yrGAIekqwoUw=
Subject key identifier:   72:26:C1:7C:58:7B:F0:EA:B3:4D:5D:15:31:ED:17:44:27:71:FA:7B
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019D98F47B8FA838434866BA3A78EB301AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          15BC
Signing time:             Fri 17 Apr 2026 01:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:52 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: vvNa0OehrbTKbwPCCZpzy3cXK+D30RJuseg2GLXRMrA=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:7b:8f:a8:38:43:48:66:ba:3a:78:eb:30:1a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Apr 17 01:00:52 2026 GMT
            Not After : Apr 18 01:00:52 2026 GMT
        Subject: CN=7226c17c587bf0eab34d5d1531ed17442771fa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:42:f4:1d:f6:32:8b:88:60:45:9c:00:b9:
                    d0:74:aa:2f:36:f2:38:03:66:4a:e8:f2:a0:d7:2f:
                    5d:2d:50:51:e5:9d:01:dd:94:5b:a1:04:29:eb:d5:
                    00:eb:d7:93:c9:bb:44:18:37:ba:60:f7:2c:32:97:
                    33:c3:5d:28:36:7b:5c:f2:ef:0b:bb:f6:d6:2d:b0:
                    10:01:18:9a:82:ca:34:4a:f7:1f:6a:67:7c:cd:83:
                    98:eb:b2:b9:70:87:1a:68:8a:6d:c1:97:a0:fe:4d:
                    3c:c0:67:86:9c:c4:7a:17:20:e2:30:d0:13:21:3b:
                    7a:ed:59:a1:3f:a1:22:2a:6e:81:74:dc:f6:7a:7e:
                    ff:e5:37:48:71:d2:d8:ba:00:c0:d4:2b:fa:9a:38:
                    82:b4:91:25:a0:bf:40:7c:53:09:92:d9:43:05:0b:
                    e8:c9:b0:73:a9:c1:50:8e:dc:ea:18:a5:2f:48:d6:
                    b5:37:e2:36:a8:69:a2:9f:71:0a:98:8c:19:fd:d1:
                    98:06:2b:0e:a3:68:e9:44:24:ad:23:46:3a:15:bc:
                    bd:18:7f:44:36:61:a0:c7:5e:c4:e0:53:a6:53:96:
                    83:7c:a7:21:c5:a7:fd:5a:d6:31:c2:46:3d:0d:44:
                    c3:14:59:72:bc:81:e7:d3:b2:63:15:72:1a:2e:95:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:26:C1:7C:58:7B:F0:EA:B3:4D:5D:15:31:ED:17:44:27:71:FA:7B
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:71:fb:bd:ef:79:2e:39:28:0a:6c:69:aa:ec:ef:46:08:59:
         ad:ae:61:04:a7:38:af:3b:fd:27:4b:bc:33:a9:cb:2d:26:93:
         5d:b5:d1:7c:a0:3e:57:92:43:be:d1:e8:df:f2:98:f4:7a:72:
         dc:ac:01:74:66:db:d7:ba:76:2f:3c:0e:05:71:c5:80:5c:51:
         05:56:1c:17:ac:c1:5a:dc:af:67:84:64:51:4e:99:bc:4f:31:
         fd:5f:e3:85:c3:da:76:e0:36:33:56:82:a1:4a:1f:64:07:3d:
         6f:ce:ad:4a:20:fd:bd:94:99:85:d2:8f:72:37:22:f0:4d:16:
         6a:f7:28:7a:42:5a:43:90:5d:e6:e0:f7:4a:b0:7e:f7:dd:50:
         b2:c5:df:4d:99:5f:37:74:8f:87:6e:7c:ae:12:4f:15:b4:0a:
         39:1f:34:6f:53:a9:bd:d0:52:f9:36:92:d9:39:06:32:e8:3b:
         ff:9c:f8:b8:18:68:50:22:9f:b1:fc:19:d7:5a:9f:98:ad:11:
         4e:b2:d7:72:55:91:81:ae:e9:88:2c:04:37:53:1a:32:9a:58:
         39:29:42:05:79:00:98:ad:84:2c:f0:38:0f:2f:85:3c:ac:03:
         90:13:b0:49:4a:58:2f:e0:81:c0:2c:04:45:8f:70:66:3d:ad:
         db:ba:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:42 2026 by rpki-client