Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          TOJ0FfVsQwpgQ3iKiP5O3NXtvg4/fq+fN31jUAYrIEE=
Subject key identifier:   C5:F9:B8:B0:83:C2:88:F4:B7:E4:B8:8D:AA:6A:42:04:0C:36:70:BB
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       019F94DC5797AC89F78DB47C4000BAD9F182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0C87
Signing time:             Fri 24 Jul 2026 16:01:36 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:36 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:36 +0000
Files and hashes:         1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: AjGFF6b1XVhvtFNwQCi03IiTibufVtQ21U/HtYt2Bq0=)
                          2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:57:97:ac:89:f7:8d:b4:7c:40:00:ba:d9:f1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Jul 24 16:01:36 2026 GMT
            Not After : Jul 25 16:01:36 2026 GMT
        Subject: CN=c5f9b8b083c288f4b7e4b88daa6a42040c3670bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:49:c7:6c:35:1a:22:35:68:59:3a:6f:e8:
                    96:e1:85:96:d8:14:ef:42:d2:b3:9a:8b:04:01:a7:
                    25:82:03:08:1c:2a:58:7e:59:b9:5c:73:82:ac:8b:
                    0e:ff:14:85:87:3d:a8:38:76:31:8f:a6:8a:fa:98:
                    60:d9:a8:8c:fd:14:4f:a5:62:50:5f:5f:bb:c7:19:
                    35:0f:b1:0b:2b:e9:9c:4d:3c:c6:1c:8a:ef:fa:36:
                    d7:ff:ff:70:48:83:d0:c3:86:b1:05:11:7a:4f:d7:
                    6e:93:1b:b2:4f:10:61:9f:23:42:1f:59:3e:28:bf:
                    8d:2d:90:01:44:71:29:44:cf:68:a1:95:f1:f0:fd:
                    5a:57:9b:f7:53:bb:99:9d:b1:a3:6f:58:a6:70:0e:
                    b1:04:9f:e8:dc:3c:5f:ce:29:41:ef:0e:25:cf:6d:
                    da:18:f0:38:8a:32:56:21:44:de:5e:3f:0f:9e:cf:
                    e3:a0:fb:24:b5:2f:c9:8d:e7:04:a0:66:e8:26:86:
                    66:8f:69:b6:3b:f8:5f:48:62:39:b9:b3:82:97:1a:
                    08:6c:86:0d:5f:cd:c8:f7:4a:72:14:cc:d4:b1:19:
                    c4:50:2b:59:e7:93:10:de:c6:5a:92:87:08:97:df:
                    bf:6a:f4:4a:66:e5:83:ff:af:84:80:5f:1c:72:b0:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F9:B8:B0:83:C2:88:F4:B7:E4:B8:8D:AA:6A:42:04:0C:36:70:BB
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:78:03:49:2e:bd:e8:c3:73:ac:aa:10:b2:73:70:aa:da:d8:
         ed:a9:3a:44:62:b2:45:50:48:6e:e6:eb:4e:d2:42:6b:3a:8d:
         22:42:4e:27:86:dc:65:9e:b8:ec:cf:ad:00:db:50:43:2a:4e:
         9b:e2:b2:b0:04:e2:50:50:a0:f2:ef:89:13:9f:b6:25:4b:99:
         6b:0f:11:dd:9a:33:28:af:a1:40:aa:e4:18:3a:6e:16:d7:ea:
         ed:42:13:cb:9d:79:9d:f2:e2:d0:0a:0d:f6:03:5c:f0:de:56:
         20:81:83:d3:48:8c:07:ff:6b:10:51:77:b2:46:dc:2d:06:82:
         62:bb:cd:c8:83:86:d4:bf:98:ee:8b:4c:0d:15:76:8f:3b:cc:
         09:1b:4e:7d:4a:34:7d:85:45:74:d2:10:91:44:da:84:0a:42:
         1d:b3:a3:6e:dd:d4:1d:61:02:06:a3:6f:05:08:fc:62:60:31:
         96:ca:a5:c9:11:84:5a:38:fd:3b:d2:14:fd:bc:64:02:a1:6b:
         94:9a:94:9d:2f:83:43:a9:38:73:0f:aa:3e:a4:35:8b:4c:79:
         f9:9d:c0:ab:5d:42:af:fe:62:65:f2:6b:cf:73:d7:6e:88:da:
         fc:bb:0d:59:0e:82:43:27:c7:81:33:6e:6e:1e:99:f0:6e:35:
         fc:19:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:44 2026 by rpki-client