Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          S3tEIYGTqR1QTNZLFLaCMUU6wtC4G+7oArkW2am8/dc=
Subject key identifier:   5C:25:8E:96:72:DE:3D:9F:2C:59:E8:B4:F4:0F:23:45:92:19:5D:CB
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       019F935BCBCA2A0E26E96151BEB590A402E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          0D4B
Signing time:             Fri 24 Jul 2026 09:01:34 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:34 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:34 +0000
Files and hashes:         1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: Y4BrWu2++hJOGBhtdMtSeXerlFp/FZ4AUDlWbA6ADmU=)
                          3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
                          4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:cb:ca:2a:0e:26:e9:61:51:be:b5:90:a4:02:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: Jul 24 09:01:34 2026 GMT
            Not After : Jul 25 09:01:34 2026 GMT
        Subject: CN=5c258e9672de3d9f2c59e8b4f40f234592195dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:c6:50:ac:86:4b:a4:75:c5:4c:2b:df:7d:
                    6d:5d:c4:9d:9a:25:96:48:fe:60:8d:01:48:16:a9:
                    53:c0:b6:cd:24:e6:f5:48:84:fb:3a:f9:55:ce:53:
                    69:26:ef:9f:73:ab:95:73:7d:24:c1:d2:7a:fc:2a:
                    fd:35:66:f9:aa:8a:f6:93:8c:f6:30:c3:d5:fa:04:
                    05:4e:ea:88:78:d5:c8:4b:36:0a:39:28:60:33:b2:
                    68:26:cc:a5:e8:e5:67:9c:c9:80:01:58:38:73:8e:
                    96:ac:28:1d:e4:c3:46:e7:61:39:61:14:a6:12:3a:
                    63:7d:8a:28:bc:0a:2f:cb:83:9e:bf:a5:a1:0b:b1:
                    1b:2c:aa:68:0a:9e:36:94:99:8d:75:54:55:68:45:
                    8e:39:fe:19:30:fe:dc:b8:25:4d:0d:9d:8b:77:52:
                    32:7d:f9:33:be:7c:ab:e3:37:6d:05:63:82:7b:88:
                    08:7c:1c:62:ec:2c:5b:ae:23:e8:5e:e4:60:3b:6a:
                    a6:4a:e9:15:a6:d0:d4:65:df:d2:f1:9a:66:2e:ea:
                    d5:be:00:e9:ee:e1:bf:51:68:b4:c1:20:ef:04:d7:
                    e2:e6:9d:f7:24:4d:50:ca:88:3a:f8:40:16:fc:df:
                    d9:5b:8b:a4:93:07:3a:8e:50:b9:eb:48:87:d6:57:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:8E:96:72:DE:3D:9F:2C:59:E8:B4:F4:0F:23:45:92:19:5D:CB
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:88:f7:07:df:b9:65:ad:8d:c0:b5:98:e8:8e:5c:20:6d:
         e3:fe:89:70:a7:1c:7b:02:47:38:6c:ef:4f:94:02:ef:cd:92:
         ed:bf:a0:af:25:87:a2:31:70:6a:6a:e0:6c:ef:1c:7d:22:80:
         d1:61:33:5c:2c:6e:66:58:58:04:a8:9b:46:91:dd:7c:6a:19:
         c9:df:03:28:39:02:38:f5:0c:74:8c:6a:71:ef:57:9f:f0:8b:
         2e:f1:c7:e9:5e:be:4e:b1:01:b9:ee:f7:bc:61:9f:7e:65:ca:
         52:e8:15:14:a7:0d:76:92:28:2c:19:2e:1d:4d:c8:49:96:c7:
         b5:09:89:87:27:67:f8:d1:a7:d6:8a:7c:54:93:f5:cf:69:36:
         c5:8e:fe:72:5d:ea:51:49:fc:de:7d:8b:ca:9e:58:4e:ac:aa:
         82:88:c0:fa:37:bb:91:c6:78:9f:64:5f:0a:2e:cd:98:64:76:
         e5:b8:4d:aa:ed:7c:bb:98:e9:65:45:f7:d1:4a:57:a0:7d:8f:
         07:bc:43:e8:4e:2e:ce:67:2e:51:5c:51:80:81:c2:6e:4f:8d:
         ac:7c:8c:7b:4b:b5:32:d0:c2:10:c2:de:ab:e2:2e:2c:1d:4a:
         86:7f:a3:df:c3:9e:cc:41:88:15:71:55:15:c5:84:7f:39:1a:
         3d:e7:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:01 2026 by rpki-client