Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          mzPvC+StsqKNtfev5R0pV/UxjodYt8IJo0HxNnTGOyI=
Subject key identifier:   87:48:E9:53:3C:BB:68:11:F4:8D:A2:39:36:78:F9:72:E3:83:A4:D8
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019F9090E748751A301D1914D3D171D9C206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 20:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:43 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: OmuVbSefE8vvQ/yFb2vbJ1ijqPO7DYIy6Mm4yXd6jRg=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:e7:48:75:1a:30:1d:19:14:d3:d1:71:d9:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jul 23 20:00:43 2026 GMT
            Not After : Jul 24 20:00:43 2026 GMT
        Subject: CN=8748e9533cbb6811f48da2393678f972e383a4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:d0:b1:e5:af:8c:fb:75:3a:b9:67:26:cc:
                    b2:ad:62:a4:94:3c:1a:62:87:25:cc:d2:12:75:ca:
                    61:15:95:64:2f:00:ec:d7:c8:99:fe:20:de:47:e4:
                    0f:ac:bb:3c:a9:75:7f:85:e8:ae:85:79:a7:38:55:
                    69:f5:b0:27:1b:01:4f:0a:73:e5:bd:28:17:53:79:
                    92:3d:3d:97:2d:03:18:66:d5:0a:86:d0:1d:4c:ac:
                    c4:2e:24:c1:4a:e8:65:de:ef:84:1c:05:93:00:60:
                    75:43:fa:cc:b7:99:6b:9f:ef:a4:7f:fb:a6:7e:d3:
                    f0:fd:04:5d:18:81:7d:9e:d3:41:a1:9a:d9:ea:81:
                    b1:ac:8b:90:bb:d0:76:ff:2a:7e:6f:c9:44:0c:67:
                    db:49:3d:19:6d:a7:24:a3:ac:4d:c2:6c:26:5a:d3:
                    53:36:35:68:86:8b:26:65:d4:32:d1:16:05:eb:53:
                    41:85:c2:4a:49:e4:14:35:00:97:d7:76:ad:e0:aa:
                    aa:43:1a:ba:01:0d:c6:fe:5a:c1:fb:af:86:60:14:
                    1f:35:0b:24:ca:35:55:9c:9d:b0:5b:d3:64:d1:07:
                    49:cc:0b:c4:92:0b:35:71:7c:01:38:00:32:92:2f:
                    a9:7d:6d:a9:87:ac:3c:46:49:f6:d9:9a:14:58:98:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:48:E9:53:3C:BB:68:11:F4:8D:A2:39:36:78:F9:72:E3:83:A4:D8
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:61:34:69:af:f3:96:40:d4:fc:08:bb:74:7b:26:e3:06:
         8a:ee:7b:20:1b:fb:ad:85:03:10:a2:21:45:f5:10:68:ce:ad:
         da:22:22:4d:30:23:07:d3:17:ea:82:9e:a4:5f:8a:35:3d:05:
         67:46:30:68:f0:d8:a7:66:7b:aa:30:63:62:e5:57:16:e8:e5:
         3f:c5:96:a9:aa:da:9f:16:d4:80:8f:e0:a4:3e:c4:15:8d:71:
         92:ec:f8:18:97:ac:57:be:4e:fa:81:ec:cb:68:a2:cb:99:98:
         53:d9:81:14:f9:ad:3a:be:9e:23:fc:51:94:8d:af:6c:30:38:
         8a:76:63:55:df:78:0e:cb:bf:6a:e8:c3:bc:6c:77:0b:4b:82:
         c9:3b:f4:09:00:6c:e7:c9:62:c4:58:14:41:b6:58:49:bc:4b:
         1c:e4:e3:9b:3b:ee:41:96:45:64:cd:82:c2:0a:5b:5f:61:8a:
         07:47:23:45:6a:bb:51:12:2a:2a:a2:9b:db:e3:c6:12:a9:42:
         a3:95:bb:ee:b9:04:07:81:cd:88:f8:31:4d:95:06:f5:35:92:
         d9:57:14:68:5d:53:a9:a5:9d:c4:40:38:cd:72:94:9d:77:f9:
         0a:0d:1d:fa:e9:91:89:28:dc:c6:36:36:00:40:58:c9:07:32:
         be:d4:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:38 2026 by rpki-client