Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          DmQRj5RL8uDb+BuIwZXpjTAfJZ+1iuRp7yLgEGYq5ls=
Subject key identifier:   6D:5C:CD:A0:0F:D3:AF:49:C7:D8:28:57:35:F6:2D:4D:FB:90:2D:2F
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019DA3AF17E6CCC6503B4CE1D68590AE6D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          05AF
Signing time:             Sun 19 Apr 2026 03:00:54 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:54 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:54 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: siqvOgxyOeKbrU1LZKbaAonBwhm0dyJ25ncX12I8VOI=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:17:e6:cc:c6:50:3b:4c:e1:d6:85:90:ae:6d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Apr 19 03:00:54 2026 GMT
            Not After : Apr 20 03:00:54 2026 GMT
        Subject: CN=6d5ccda00fd3af49c7d8285735f62d4dfb902d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:71:60:bf:eb:a5:98:2d:5d:05:f2:17:7c:d3:
                    93:a8:ab:14:e2:91:87:e5:aa:e4:e3:76:65:7c:c5:
                    ec:84:0a:56:b3:cd:36:c1:d2:b8:4b:57:32:d9:38:
                    52:37:db:e4:ec:83:7b:d0:7d:14:8e:4b:6e:84:3c:
                    18:e2:be:7a:e8:38:89:9a:14:28:b7:d6:0f:ae:95:
                    b8:d5:c0:26:f2:71:59:39:7b:e9:a1:24:38:9d:40:
                    ca:07:6a:df:bf:b3:9a:1e:4a:8e:a0:42:72:e9:87:
                    9d:e6:ab:d2:23:8d:58:f3:57:7a:42:dc:f6:07:dd:
                    99:36:27:3d:de:94:4c:32:3e:07:b7:60:ab:60:3a:
                    e6:dd:c4:96:ed:83:12:e0:6d:4a:38:f3:5f:02:45:
                    ba:32:d0:98:52:78:1f:c7:02:c3:92:c7:ba:c1:5e:
                    1d:b2:fe:06:ed:5d:84:85:4e:7c:35:1e:eb:5e:6c:
                    9f:17:c8:9d:27:2b:6a:c5:fa:89:22:e9:cd:b9:07:
                    27:3f:cc:03:11:bf:71:a7:ab:d2:b0:ba:02:7a:09:
                    2b:75:d0:3f:d5:f1:e3:eb:2b:f1:6b:aa:47:45:08:
                    76:34:d3:f9:3a:c6:48:96:a3:95:a1:13:33:c1:5e:
                    19:5a:a9:63:9b:1c:31:17:9a:4c:91:dc:03:30:4d:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:CD:A0:0F:D3:AF:49:C7:D8:28:57:35:F6:2D:4D:FB:90:2D:2F
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:d1:8c:e8:48:98:49:21:75:56:2c:fe:4b:c2:f5:3a:1b:
         8e:f2:13:59:62:31:62:6f:0b:a3:49:b1:7b:89:93:1d:e9:30:
         4a:11:8d:7b:7b:4d:14:65:4b:52:ac:a7:68:87:79:26:d6:e9:
         77:19:26:df:65:b0:cc:1f:09:9f:b3:d2:6c:15:c9:67:ee:d8:
         8b:d8:59:80:55:ec:9c:c6:e2:32:88:a7:79:73:64:18:9f:71:
         ab:0d:d8:cc:9f:a0:b4:15:3f:21:01:73:5a:64:d8:64:db:d4:
         56:2c:21:c1:cd:55:1a:e1:b5:76:52:79:fc:3b:13:77:9f:ad:
         e3:de:ae:d2:2d:b7:ae:2a:b2:b9:bd:8d:0c:9c:66:c5:c9:a4:
         8e:28:5d:bf:77:88:ae:0f:2c:8c:44:cd:4f:92:05:76:15:98:
         0e:b4:24:f2:f5:d8:b5:9a:1a:bd:5d:39:49:76:8c:40:97:be:
         e2:4d:27:67:74:05:b4:61:0c:05:c3:a5:b8:29:9f:37:fe:49:
         cc:b5:c3:60:85:9e:5c:d9:f0:c0:15:06:11:e2:07:b2:0a:d4:
         4d:7d:72:0c:fd:f1:0b:cf:57:83:81:63:4b:c2:87:b3:8e:dd:
         52:6f:be:cc:12:0a:86:19:7c:15:0a:b4:0b:a1:f2:f3:e8:ff:
         46:cb:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:39:17 2026 by rpki-client