Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          rD5v3bx6JP6tTKynoog2EqvK6O12oR7UewMNstUXY4Y=
Subject key identifier:   82:48:71:C9:96:00:47:78:D9:E8:88:94:A9:94:04:BC:99:66:80:F7
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       019F909163D1D1AFF94471114D1D5725ACCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0F1F
Signing time:             Thu 23 Jul 2026 20:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:15 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: g62divUMU723TQPCH/qGhV99qBqknuqspTM0NnMrHVM=)
                          2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:63:d1:d1:af:f9:44:71:11:4d:1d:57:25:ac:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Jul 23 20:01:15 2026 GMT
            Not After : Jul 24 20:01:15 2026 GMT
        Subject: CN=824871c996004778d9e88894a99404bc996680f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:7a:04:47:96:34:fd:d2:72:ce:a3:09:ff:
                    88:99:7d:84:0f:e0:52:2c:40:d5:54:7c:1b:aa:25:
                    db:18:05:86:da:92:48:a7:06:8d:14:fb:fa:be:82:
                    d1:60:06:bb:c8:6e:fa:6d:e6:e8:43:27:c9:f4:ec:
                    03:46:e3:16:68:9f:16:9a:97:a3:90:b5:a2:a9:5d:
                    fe:50:4f:4d:96:cb:0c:8f:c2:a5:62:61:37:3e:4c:
                    db:bd:31:b4:8a:04:36:73:98:eb:c0:da:6c:ec:97:
                    58:e2:65:1b:8c:a8:01:46:8d:17:75:aa:23:52:c4:
                    f4:5c:4f:b6:61:69:52:ce:47:13:5d:7d:7e:6f:5b:
                    ba:7f:31:87:33:1f:d2:3c:82:7d:49:12:5b:e1:eb:
                    cd:8f:cc:c1:3d:82:4d:d9:52:eb:cf:f1:a1:94:b9:
                    7d:96:56:29:5e:e7:d0:22:ad:a7:63:ca:1d:fb:81:
                    2e:79:75:27:3d:ff:f4:df:8e:6d:7f:f5:59:03:73:
                    95:a2:bb:63:8a:9f:97:a3:72:23:40:15:a5:c2:1f:
                    c7:7c:f3:ff:7c:50:2d:ac:4d:fb:5c:53:ed:56:86:
                    95:9d:aa:9c:8b:4e:f5:be:f8:3d:6d:ea:4f:4f:25:
                    43:06:a1:84:97:41:14:e4:c9:41:17:51:d0:74:01:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:71:C9:96:00:47:78:D9:E8:88:94:A9:94:04:BC:99:66:80:F7
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:45:e5:5e:08:cc:34:43:33:ff:e8:48:3b:8b:3c:c9:c5:07:
         27:ee:b3:6a:91:e2:22:f7:2c:f4:6e:38:84:b0:fa:3b:09:a7:
         c2:58:24:b1:de:82:8e:83:32:26:7a:41:40:34:02:a0:fa:5f:
         c7:81:7b:93:bb:b4:27:e0:b7:b3:95:4e:0e:99:e4:80:08:10:
         6e:e6:ed:a4:9c:b6:2a:44:06:dc:6b:b4:3e:ad:40:90:8d:3a:
         b8:53:dc:45:bb:d7:13:a9:4a:cc:8f:bb:ae:4a:56:b0:d0:6d:
         21:3c:c6:88:7a:b1:0e:bf:92:37:c2:56:b7:57:6d:4d:bd:86:
         38:28:18:d9:53:74:e2:98:df:8a:80:bd:6d:76:07:fe:f1:1c:
         05:52:59:52:fe:d2:98:61:98:61:46:35:5e:4f:03:22:b6:1c:
         28:d3:34:2e:c3:8f:fa:b6:92:ee:d7:81:3f:99:6c:6d:44:db:
         79:60:a7:21:78:c0:4f:a6:0e:90:2c:9e:f4:5d:85:34:9b:97:
         60:7c:cd:be:d0:20:79:21:0f:b5:5e:b9:43:6b:0d:22:17:cf:
         82:cd:35:be:03:f5:b7:a0:7e:21:70:56:86:f0:f7:22:05:16:
         d2:e5:d9:2f:0c:c9:dc:7b:22:89:4e:a6:2b:13:06:fa:42:1d:
         10:4e:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:17 2026 by rpki-client