Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
File:                     bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json)
Hash identifier:          X5LXvD3O6ReRs89Yuo1jExQBgd6zEFGFPciD49qLRNc=
Subject key identifier:   71:96:F2:6C:40:A2:FB:1A:F4:A5:81:C4:B6:2B:65:B5:88:DB:44:B6
Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25
Certificate issuer:       /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
Certificate serial:       019F946D859FC8916077A042833404AC8E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
Manifest number:          0281
Signing time:             Fri 24 Jul 2026 14:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:33 +0000
Files and hashes:         1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: ebCUBmU2+FaKC6IJQHyI8xJ/6eHiX1JaxEOjlQjqfzE=)
                          2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:85:9f:c8:91:60:77:a0:42:83:34:04:ac:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425
        Validity
            Not Before: Jul 24 14:00:33 2026 GMT
            Not After : Jul 25 14:00:33 2026 GMT
        Subject: CN=7196f26c40a2fb1af4a581c4b62b65b588db44b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:d8:df:2b:34:b8:97:2d:0c:9a:e5:c3:3b:
                    ec:89:d5:e6:da:cf:62:43:e3:b4:be:47:45:67:6b:
                    55:90:a5:fd:73:3a:0b:68:b2:f9:34:57:2b:62:40:
                    f1:a9:30:87:0c:50:8d:5b:5f:48:e4:40:31:b1:86:
                    35:50:a4:c5:76:25:90:d1:5d:49:c5:bc:a7:3a:e4:
                    c4:2b:12:a2:d7:d3:16:13:0a:fd:bb:b9:a5:7a:2b:
                    a4:e1:3e:e5:19:9a:19:91:b6:6a:f1:67:d3:ae:dc:
                    98:ef:33:84:c9:6d:cb:d6:1b:7d:bc:e5:1e:52:be:
                    4a:c6:cc:8f:9d:42:ff:02:03:3d:c2:ed:f3:ec:e7:
                    b6:fd:5a:c7:a6:08:74:37:0f:15:d5:33:a6:a6:24:
                    22:8f:9a:78:e5:b9:82:99:e8:6a:59:d9:69:50:72:
                    60:4f:ea:5e:81:bd:28:83:39:57:ba:aa:9b:b5:b2:
                    09:74:d0:ad:27:cd:ef:0e:c1:8f:55:a4:b0:b5:13:
                    5f:04:10:d7:13:1e:be:19:37:3f:27:e2:46:fb:5b:
                    60:a4:b9:19:e5:07:e1:8d:9e:ce:5f:96:77:eb:40:
                    0a:19:5e:f5:95:a2:e6:14:6b:61:2a:92:4d:20:fc:
                    8e:e8:99:e6:c8:24:7e:e5:cf:22:0e:f7:3e:33:b1:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:96:F2:6C:40:A2:FB:1A:F4:A5:81:C4:B6:2B:65:B5:88:DB:44:B6
            X509v3 Authority Key Identifier:
                keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:4c:ee:9b:53:b9:46:78:de:39:32:85:b0:49:d1:d0:fe:
         87:29:50:7c:60:d6:d0:51:b6:6e:b1:f1:84:e7:26:35:86:bc:
         d3:8b:bf:f4:b7:58:7b:c0:57:39:04:9a:24:a2:cd:d3:dc:18:
         0a:07:13:69:3f:11:c0:75:d1:25:bc:92:9b:b1:d3:dd:21:a2:
         66:5c:ec:e6:59:a6:5c:32:ed:39:59:87:3d:09:98:2f:7c:25:
         29:2e:5f:4f:03:55:a3:4c:ee:bd:3a:8f:3b:2a:1a:87:92:f5:
         99:d5:21:3a:e6:73:c8:a6:a1:d5:f2:15:33:82:da:ca:08:30:
         a9:16:8f:35:f7:98:3e:de:60:dc:90:4d:a4:65:0c:ae:56:d1:
         7d:43:b2:d4:ab:7d:95:7d:09:93:36:c1:4f:c7:ec:b5:26:f2:
         ee:41:6f:a1:9d:31:d5:3a:34:a3:bc:16:69:41:74:54:94:54:
         df:e3:5a:c1:1d:d1:29:31:fc:53:df:33:2a:38:a4:68:9e:44:
         cf:e8:e1:32:4a:36:ae:2e:ab:da:ad:c8:ea:5c:07:ea:48:7c:
         03:8e:d9:22:3a:8e:dc:4d:07:e2:1e:27:1a:f0:a0:8f:78:25:
         0b:46:88:77:fa:b1:63:03:36:ed:d0:13:47:9a:43:c8:e0:49:
         1b:02:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:11 2026 by rpki-client