Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
File:                     Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft (raw, json)
Hash identifier:          yAeVV8EZSbNwZjgEPWh9U4CTQ9tHzL4KbQEsaexy9WA=
Subject key identifier:   AD:BD:46:0C:2E:31:43:1F:13:13:BC:02:25:C7:83:FE:21:F0:6F:7A
Authority key identifier: 05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB
Certificate issuer:       /CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
Certificate serial:       019F90C785BF75D9A0A55065E4EB9C423AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
Manifest number:          0177
Signing time:             Thu 23 Jul 2026 21:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:22 +0000
Files and hashes:         1: Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl (hash: Zw1XLxoR+jiDUY4wW76YS37D3AqsjTX3irByoPqHVz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:85:bf:75:d9:a0:a5:50:65:e4:eb:9c:42:3a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05dd416ab87e47afa7bceea832334dc0f005d5bb
        Validity
            Not Before: Jul 23 21:00:22 2026 GMT
            Not After : Jul 24 21:00:22 2026 GMT
        Subject: CN=adbd460c2e31431f1313bc0225c783fe21f06f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:a2:ab:2f:81:9c:d8:2b:fc:20:fa:67:23:
                    eb:9b:52:d8:e7:aa:3c:8a:ec:a2:8d:28:e4:79:d9:
                    26:b2:f0:74:29:17:8b:34:16:b3:4c:63:69:48:ee:
                    40:ed:46:33:d0:6a:8e:63:10:4e:23:31:aa:62:39:
                    b6:6e:71:61:cb:dd:76:bc:d5:fb:2f:69:1e:8d:80:
                    16:60:5b:74:e7:1a:84:11:0f:00:eb:9d:fb:fb:14:
                    a5:c5:ce:74:b2:94:f1:58:7a:0e:fc:e2:a8:fb:50:
                    ad:6a:a3:f2:fe:4c:ae:1a:0c:d2:fb:b7:42:01:05:
                    b2:2b:c2:15:61:f9:61:60:5b:99:64:8a:b6:eb:03:
                    8d:d2:d6:18:93:51:79:94:17:88:f6:f5:f6:dc:16:
                    32:f1:c8:f9:35:ed:b6:2d:4e:87:b6:83:42:ee:64:
                    55:09:b5:1a:22:21:84:0b:c5:86:89:d5:6f:8b:39:
                    4e:d5:9d:0e:b2:6b:2c:f1:ad:e9:7f:e5:4c:20:48:
                    52:2c:f4:a8:95:55:b1:20:01:c4:be:00:d3:df:c1:
                    80:3d:a6:76:0c:d1:4e:d5:2f:fa:3c:4d:11:92:04:
                    91:9a:88:85:5f:d9:ca:2c:a6:00:6d:07:22:bd:87:
                    69:57:b3:63:cf:7b:1f:6c:d6:c2:87:1b:a3:e8:b3:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:46:0C:2E:31:43:1F:13:13:BC:02:25:C7:83:FE:21:F0:6F:7A
            X509v3 Authority Key Identifier:
                keyid:05:DD:41:6A:B8:7E:47:AF:A7:BC:EE:A8:32:33:4D:C0:F0:05:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd1Barh-R6-nvO6oMjNNwPAF1bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9fe062-3729-4bfa-8df3-4ac832b01a58/1/Bd1Barh-R6-nvO6oMjNNwPAF1bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:60:09:eb:f7:b2:da:8d:93:7e:a0:e6:3f:e7:34:ab:2b:d8:
         53:e6:2e:27:70:26:e6:a7:09:e4:f4:11:6d:cc:14:08:aa:4c:
         18:a2:9d:5d:a8:98:e8:6f:bf:4f:0c:67:d5:96:ff:28:31:57:
         df:3a:76:0e:2c:81:c0:42:c0:27:40:db:38:23:a5:c3:4f:74:
         c9:16:a2:b3:33:0f:11:01:44:16:40:77:12:7e:d7:e9:bc:dc:
         68:e8:90:7e:76:dc:36:f2:02:d4:b7:5e:b3:00:4a:18:49:32:
         d0:60:92:d9:09:e5:65:d9:4b:96:8d:c9:b3:ba:21:c2:4c:2b:
         81:dc:50:e5:0a:44:56:d6:6b:55:3c:00:c5:83:0e:a0:05:66:
         66:c4:46:a3:96:23:cf:7b:23:a0:4d:23:a1:4a:32:f3:38:fe:
         eb:69:bf:25:b3:d5:a2:b3:3e:14:95:77:36:31:40:b7:87:2b:
         7d:91:a0:e3:4b:af:66:38:db:34:f1:43:04:51:d1:2d:e5:4d:
         8c:ea:7f:65:4d:b6:2b:53:06:20:ea:66:8b:38:35:f3:19:53:
         35:ec:dd:4f:42:67:d7:09:20:34:98:5d:e6:a9:f2:d4:93:dc:
         04:f3:5b:88:62:7a:4b:34:57:ef:57:e1:f3:af:b5:d5:44:07:
         44:18:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:47 2026 by rpki-client