Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          ERVL/53U8TGfcZNsfw/695kOQ25iHQfdngJIIGY1xA0=
Subject key identifier:   CD:D7:61:FB:B2:7D:30:34:0B:1D:DB:C5:2D:AC:07:73:6B:EB:98:81
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019F9247F413DBA82CA0EC1C542AA599D102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          19D0
Signing time:             Fri 24 Jul 2026 04:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:16 +0000
Files and hashes:         1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=)
                          2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: GEVnfhAXppvCAQnQBlJngBSyp+C04a6rzM7hivBhN2c=)
                          4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=)
                          5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:f4:13:db:a8:2c:a0:ec:1c:54:2a:a5:99:d1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Jul 24 04:00:16 2026 GMT
            Not After : Jul 25 04:00:16 2026 GMT
        Subject: CN=cdd761fbb27d30340b1ddbc52dac07736beb9881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:b2:ae:79:b8:e1:41:ff:be:52:d7:7a:6b:
                    c0:c1:eb:f7:32:60:a2:4a:c1:57:ed:79:64:b3:90:
                    d0:f9:3a:27:35:92:ed:ea:66:3d:7c:b5:59:75:ff:
                    94:08:7c:0c:e0:13:29:fe:bd:f7:83:a8:34:9f:02:
                    ca:16:a5:51:a6:75:71:f6:6b:8a:7e:89:1b:f0:3a:
                    03:4a:43:40:87:05:50:b4:c1:39:2e:63:bf:23:d3:
                    1e:79:2e:cb:8f:10:15:0d:e1:bd:50:bf:ef:d9:53:
                    95:21:e8:09:b9:d8:52:c7:50:19:31:c4:fb:52:ce:
                    cf:e5:52:61:09:6d:6d:57:31:0f:a0:a7:89:73:43:
                    6d:c4:a8:37:3e:ba:20:5b:61:32:50:a8:d8:23:41:
                    ea:61:b3:75:d8:7e:2a:c7:e4:36:74:d7:cc:5d:25:
                    6f:74:d5:35:e6:3d:02:4d:3e:52:46:0a:ca:94:02:
                    18:9a:64:9a:12:74:1b:9f:1b:0c:8e:1b:73:c1:96:
                    cc:92:c1:9e:37:27:90:6d:7a:39:96:94:1d:b1:c2:
                    18:89:f9:74:d1:fc:fe:2c:76:5d:2c:a8:0a:b6:c0:
                    e7:8b:6e:a7:fd:06:de:71:4b:00:63:16:d9:4f:ad:
                    a2:2f:c0:cd:7f:c5:ca:bf:c4:29:99:ce:61:ed:32:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D7:61:FB:B2:7D:30:34:0B:1D:DB:C5:2D:AC:07:73:6B:EB:98:81
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:0f:80:79:5f:d2:47:32:f5:ac:17:23:09:6c:a2:f3:de:
         00:82:ef:d0:35:2b:ec:67:d4:76:ce:04:a2:81:63:8c:fe:ca:
         bb:bd:d1:da:e3:7c:27:b5:97:40:96:00:1f:d0:61:a9:ee:52:
         40:67:0e:e0:74:35:8c:f8:db:75:bc:6a:7f:44:07:91:b3:c7:
         94:80:94:77:da:0e:1d:fc:3e:46:0f:84:88:5b:5d:4c:e8:8e:
         53:a6:c1:61:07:29:0f:4f:b4:62:f4:4e:01:3c:82:eb:4a:c5:
         2f:ee:04:e9:91:c4:b0:b2:af:25:d8:d1:52:27:65:d3:9c:af:
         62:a5:55:99:74:1f:70:77:2e:22:59:a3:69:d4:aa:95:fe:f9:
         3b:e5:f3:01:ce:b0:29:38:23:49:12:90:6c:52:7d:0f:76:b4:
         1b:f2:66:f3:a4:2d:2e:22:5e:d9:52:3d:fe:d9:8f:0c:33:68:
         e3:dc:7f:55:f8:36:1c:67:42:71:5a:cd:c0:b9:da:ac:c5:fc:
         a8:95:a1:b4:e0:a5:d0:25:ec:9c:13:9a:02:ca:3c:b0:28:5d:
         8a:8b:af:5b:09:c9:d4:6f:7d:19:0f:a7:f7:1e:0c:37:24:e4:
         98:0c:43:03:d1:8b:cb:ff:86:e6:86:e6:f0:84:ac:ae:7d:9e:
         b1:4c:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:39 2026 by rpki-client