Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
File:                     BpSDF1Vo_2MI2iXOaQQvSaUebss.mft (raw, json)
Hash identifier:          XS7zJlp+jJHyOZHJMT0pglOBXtDgOw/wQ/iQV6I1WIQ=
Subject key identifier:   01:6C:4D:28:D1:DD:B5:90:79:F8:41:E6:6D:9D:51:F0:2C:46:AF:79
Authority key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Certificate issuer:       /CN=069483175568ff6308da25ce69042f49a51e6ecb
Certificate serial:       019F90C8281EB68E00F07F68C6B20B74D9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
Manifest number:          D6
Signing time:             Thu 23 Jul 2026 21:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:04 +0000
Files and hashes:         1: BpSDF1Vo_2MI2iXOaQQvSaUebss.crl (hash: soRZRoCmtTlx3KtqaZ2aijVt7/QYiLWs3WZSVRMTipY=)
                          2: MpAtPvXf2NUZLrtZHr5wLDE9ing.roa (hash: wDbKs3VjtAP4258J/lY8NrGeGS7zhrnbtOERXhqM3tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:28:1e:b6:8e:00:f0:7f:68:c6:b2:0b:74:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069483175568ff6308da25ce69042f49a51e6ecb
        Validity
            Not Before: Jul 23 21:01:04 2026 GMT
            Not After : Jul 24 21:01:04 2026 GMT
        Subject: CN=016c4d28d1ddb59079f841e66d9d51f02c46af79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:9d:ea:64:0a:49:90:62:82:57:02:1a:8d:
                    73:68:98:38:a2:ae:7e:e1:08:73:f6:27:3e:b1:fc:
                    cb:bf:e8:06:3a:7e:da:2f:1c:96:ce:17:51:97:0f:
                    de:6c:ca:ac:91:54:af:90:75:0e:2e:61:6b:c3:cf:
                    26:b3:e6:07:68:8b:8c:4b:c1:fa:47:00:5b:f7:12:
                    87:e3:1f:31:71:bb:b6:32:ce:29:d5:3b:b7:d7:d4:
                    29:6d:55:63:2e:8f:72:fb:cb:fe:e3:1e:ff:ac:a4:
                    d3:fe:dc:5e:bb:c5:2c:04:32:6b:09:f0:87:b9:ff:
                    29:55:4e:76:30:33:67:f8:98:66:d7:ba:4a:d6:e7:
                    02:36:ec:95:ba:8f:53:50:0a:b7:1f:28:14:05:22:
                    22:2d:6d:f3:47:af:76:67:88:33:d6:83:7e:7b:2a:
                    77:e6:80:9b:7a:6d:f6:f8:42:d6:95:7b:97:18:97:
                    fb:0b:62:85:61:d9:33:87:6b:10:46:49:de:d1:53:
                    2b:f8:60:8d:74:b6:37:4c:5e:9c:44:84:2f:5a:72:
                    6e:16:2f:d9:f5:d4:99:d7:08:f1:9a:6a:d3:a2:36:
                    f6:61:f9:1c:8e:25:f9:67:2f:db:85:33:7c:49:e1:
                    43:88:3b:7e:30:8b:97:de:7b:11:ac:82:42:fd:d7:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:4D:28:D1:DD:B5:90:79:F8:41:E6:6D:9D:51:F0:2C:46:AF:79
            X509v3 Authority Key Identifier:
                keyid:06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:0d:e0:e6:ce:47:d1:e9:f1:75:cf:7b:0d:b7:ad:4c:76:
         8a:2a:99:63:6f:50:c7:6f:9d:e8:f9:cd:f7:d2:d6:cf:c9:60:
         71:ac:bf:d3:3b:7e:86:0c:ad:d1:a2:9f:91:e2:c2:8c:3f:08:
         97:6d:51:0d:9a:f0:fd:a0:64:13:cb:b5:3a:9d:57:c5:d3:16:
         50:c7:17:95:d0:89:b4:18:e6:12:ad:7d:9e:b7:94:f8:72:6c:
         b5:18:bf:07:b7:2e:c7:23:d1:a7:62:a2:b6:30:b2:5c:ce:e3:
         72:5e:ae:02:05:9b:b8:98:92:39:89:a1:63:06:aa:8e:20:c9:
         53:3b:38:5c:a0:69:66:b9:6b:ad:38:90:ae:b5:fa:ce:59:b6:
         a4:01:bd:50:0b:29:6b:8d:27:1f:b8:b9:8a:90:15:11:0e:e4:
         f1:9d:1c:e9:62:a7:b5:8e:8b:3e:55:5e:57:69:87:c0:7a:35:
         40:5a:4c:cd:5b:4a:6a:f3:9a:13:9d:2e:27:9f:ce:a7:ff:79:
         0a:ee:6a:6a:b6:8d:a1:70:b4:14:00:12:de:e1:38:b9:79:56:
         cc:40:b6:b8:dd:c3:ac:2c:20:22:32:ac:b4:5a:cb:f5:0b:f0:
         5a:59:da:61:35:2d:1b:4d:f7:1a:2f:76:bf:cf:8b:a5:f5:65:
         a6:bd:fb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:39 2026 by rpki-client