Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File:                     BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier:          +uv10bkxlo55YPUICwqnF32QnbkfLzxrmkIgFEJdt+k=
Subject key identifier:   08:D1:12:FC:74:56:5A:98:36:EA:7F:DF:DA:A6:34:BA:48:9C:54:24
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer:       /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial:       019F91A3CDB5B9BC88E088E93A06EEC9606E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:59 +0000
Files and hashes:         1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: pNBtW8AQegKmt1ccQdGwaqVym3RZuYH88L9wZlBI54I=)
                          2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:cd:b5:b9:bc:88:e0:88:e9:3a:06:ee:c9:60:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
        Validity
            Not Before: Jul 24 01:00:59 2026 GMT
            Not After : Jul 25 01:00:59 2026 GMT
        Subject: CN=08d112fc74565a9836ea7fdfdaa634ba489c5424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:4b:5f:b1:c9:53:4d:46:66:32:76:48:91:
                    a5:a4:57:14:dd:a3:c6:ab:ba:72:33:60:29:24:3c:
                    6f:b2:75:d0:26:07:86:45:fd:3e:17:ab:79:28:56:
                    83:f4:c7:74:ad:26:ef:83:fd:c8:2e:9a:e1:2d:6f:
                    9d:74:d4:b2:8d:b4:3e:c9:a5:6f:a5:16:0e:2f:e6:
                    c6:ae:66:ca:47:ee:8c:f5:ac:c1:24:aa:8c:04:14:
                    5a:37:62:36:7c:c9:ab:ca:c9:6d:3c:b9:0a:a5:49:
                    1e:28:fa:ac:bc:68:cf:a5:a3:80:7a:5d:43:1a:e0:
                    fa:64:39:af:2e:48:8a:cf:c3:6e:4c:e1:2a:d1:b9:
                    ce:0b:2c:f1:94:15:9a:5e:96:9a:35:68:60:8c:b6:
                    ae:b9:da:0c:a7:21:01:63:19:5f:04:9f:a9:b2:b1:
                    90:8c:25:72:2c:ad:e2:bc:3b:78:e4:2d:9f:21:59:
                    75:d9:53:cb:8b:f3:14:16:58:89:6e:10:e5:ad:a3:
                    6d:da:74:04:1f:d4:93:5d:73:9b:67:d7:fe:01:a5:
                    5e:ab:ed:9e:e7:86:07:e4:24:1c:41:51:dc:bc:f8:
                    53:70:70:10:bf:59:af:7c:63:6b:52:da:4c:2b:a1:
                    32:3f:e7:c3:56:7f:bf:f3:94:23:05:55:f3:cb:04:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:12:FC:74:56:5A:98:36:EA:7F:DF:DA:A6:34:BA:48:9C:54:24
            X509v3 Authority Key Identifier:
                keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:d4:a4:c1:0c:28:2b:03:d4:be:38:6d:59:11:b7:39:c9:
         65:3f:5b:a3:13:fc:07:d6:98:99:10:9e:8b:c8:17:44:38:68:
         77:99:fe:05:73:8b:92:f3:51:c4:7d:39:ea:bf:7e:88:fb:b2:
         4e:63:a5:07:f9:20:5b:c0:4c:fe:8d:bb:db:13:c8:35:db:e6:
         be:a5:69:88:bb:7e:d3:8c:bf:76:8d:54:db:4f:6e:2f:41:76:
         79:9b:ca:76:64:15:0e:28:02:04:9a:57:be:14:df:98:4f:1b:
         ac:da:ac:c8:84:5f:68:16:97:d9:06:3c:4e:29:87:10:68:21:
         54:11:3b:45:1d:b5:7e:58:f7:d9:ea:1c:00:29:d9:99:5b:b8:
         c2:60:3f:ea:48:2a:cc:f5:8e:51:3e:86:8b:92:5c:16:3a:5a:
         6c:b8:4a:80:f4:1a:84:bd:71:a1:b5:47:f3:7a:1b:da:98:81:
         60:62:e3:cb:8f:46:d7:b4:b5:ab:85:c3:b6:5a:19:34:8a:3d:
         48:49:5c:36:fe:36:23:b4:e2:4a:c3:8b:f0:99:5d:c2:e9:47:
         07:c6:99:fe:98:10:7f:68:bc:65:66:25:01:8e:89:b5:56:a3:
         0a:94:87:cb:30:db:a6:95:41:9e:d6:8a:61:59:ba:d4:99:d7:
         bf:59:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:19 2026 by rpki-client