Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          1K0IJUHxeR0kZ+sF9UVl7wqieqWRcN4akLosz0f9w/E=
Subject key identifier:   5B:E7:31:FC:0D:71:A3:23:08:9E:94:AA:B3:8B:58:72:DE:D9:F5:BA
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       019F8E6BAAC15895533FC2861CBB8C81EA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 10:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:48 +0000
Files and hashes:         1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: 3GhgsvCP/9R4BugwpL2C5aIKwQYTIBPqHgR3D7BuZ8w=)
                          2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
                          3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:aa:c1:58:95:53:3f:c2:86:1c:bb:8c:81:ea:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: Jul 23 10:00:48 2026 GMT
            Not After : Jul 24 10:00:48 2026 GMT
        Subject: CN=5be731fc0d71a323089e94aab38b5872ded9f5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:71:77:30:a4:b0:4e:f1:0c:cf:7c:1a:d0:
                    c0:17:28:1b:40:c7:7b:f1:61:5d:93:8d:d9:1e:67:
                    82:61:01:19:8a:2e:e2:2f:64:9a:14:e0:09:9d:9f:
                    21:b5:a8:2c:9e:60:ae:42:c6:cf:91:59:ea:52:38:
                    29:1e:a9:8c:e7:76:b3:2e:08:30:77:ae:29:ee:a0:
                    35:ce:97:bd:35:88:d7:a1:8f:3c:ce:bb:53:bf:0d:
                    6f:44:e9:cc:80:33:7d:87:de:ec:3a:41:cd:f6:42:
                    10:9b:c0:d0:fa:ef:c8:19:49:af:c0:c3:0a:65:5a:
                    ca:c3:72:0d:ed:83:36:e0:0a:75:ab:fd:54:30:e5:
                    4c:7a:32:95:b0:9f:80:84:97:c9:ce:f5:6f:57:d9:
                    28:9f:e1:81:de:7c:05:77:44:ea:60:6a:03:a6:49:
                    40:0f:07:5e:f5:90:15:68:38:d0:8b:37:cd:a8:5b:
                    6f:9b:16:f6:45:74:20:22:15:8c:61:64:11:12:c5:
                    d2:64:5d:e3:21:ea:6f:1a:38:8d:9a:ca:09:c9:ec:
                    a6:0d:54:ad:52:de:b4:9d:df:e4:ef:85:9c:f1:82:
                    ff:ef:67:f6:d6:44:90:86:14:14:15:19:df:73:6b:
                    90:ca:ba:74:73:88:7b:61:1b:ef:5e:6c:c0:56:32:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E7:31:FC:0D:71:A3:23:08:9E:94:AA:B3:8B:58:72:DE:D9:F5:BA
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:46:91:ad:63:bf:20:be:23:88:9f:ef:8d:82:d6:a3:64:
         e6:e5:2a:2e:8e:1a:9a:b8:94:ea:36:8c:0a:05:cf:70:eb:71:
         e0:74:22:94:79:96:8d:a1:b9:4a:de:fa:8f:ec:41:e9:d4:1a:
         9f:3d:73:2d:d2:19:f2:e3:db:7a:f5:78:09:e6:c0:8f:5f:48:
         63:a3:f7:3e:6a:4f:02:b3:dd:15:f7:fd:65:7c:6a:17:fb:06:
         9e:3d:3f:88:92:15:20:54:4c:75:a3:50:58:89:20:71:f3:bf:
         2f:28:de:3c:7c:26:37:22:80:52:df:06:b2:7e:10:74:c4:72:
         a2:48:a5:15:e8:c2:58:73:3f:58:4f:1b:c8:2b:4e:a9:62:f2:
         0b:49:e7:db:1a:88:9c:2c:8a:55:a9:98:67:e4:27:91:a1:4f:
         11:f1:5a:14:02:c4:ed:46:aa:be:3c:b6:2b:c8:c0:06:44:aa:
         3d:b9:19:9d:95:4f:73:1b:b9:51:0c:6b:2f:73:7b:56:69:af:
         0f:31:60:aa:95:1e:23:3e:54:36:9e:ec:a6:b6:5b:b1:2b:0e:
         ca:ed:4c:09:ef:40:3d:a0:65:69:45:41:64:61:92:27:40:f2:
         47:e2:7c:83:d8:56:02:06:63:f9:e3:95:d2:53:48:af:dc:dc:
         2f:97:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:50 2026 by rpki-client