Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
File:                     biCb10rb00nQEq8KpjDR_oZpxy8.mft (raw, json)
Hash identifier:          7fD5CPsuPQoy3LHqyCSMLll8TydT7mbCApkswWV8WpY=
Subject key identifier:   B1:20:BA:4D:E2:8C:14:34:CF:0C:44:B5:6D:7D:D4:26:D7:1C:56:8F
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Certificate issuer:       /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial:       019F927F4EEE22A73B9D0A135DC0D16906E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
Manifest number:          19
Signing time:             Fri 24 Jul 2026 05:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:44 +0000
Files and hashes:         1: biCb10rb00nQEq8KpjDR_oZpxy8.crl (hash: AdFx8eJf95RqEpNe7DEBl8WssolcQ96uO7s+esz14AY=)
                          2: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (hash: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:4e:ee:22:a7:3b:9d:0a:13:5d:c0:d1:69:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
        Validity
            Not Before: Jul 24 05:00:44 2026 GMT
            Not After : Jul 25 05:00:44 2026 GMT
        Subject: CN=b120ba4de28c1434cf0c44b56d7dd426d71c568f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:df:27:4b:b8:da:b2:6c:b3:f5:6c:cb:73:
                    a6:a3:ad:44:99:fb:c0:4d:ea:68:27:0e:c5:57:14:
                    0f:b2:07:3f:25:af:43:88:bf:44:d2:f7:b5:6f:fb:
                    fc:5d:0d:2c:47:d4:43:c8:89:8f:91:41:49:0e:69:
                    49:8a:75:4e:be:c9:d8:09:fa:57:61:c1:06:26:03:
                    df:c3:82:f9:4b:97:f3:a7:ee:6d:8b:e7:73:95:b5:
                    fd:45:0e:ca:cf:8e:89:d1:da:32:4c:14:0d:c3:e3:
                    58:cc:0e:6f:54:fd:87:4e:39:03:d8:3f:87:43:1a:
                    15:bb:13:fc:12:e3:7c:3a:b4:9b:74:bd:6d:1e:e1:
                    36:f1:1a:29:db:8d:6b:f7:86:a2:b5:e1:37:b1:e4:
                    91:36:bb:79:c9:ab:7b:ef:25:e3:61:82:8c:9c:ac:
                    d9:01:5c:a8:2a:82:56:ba:82:b5:05:ed:45:60:2c:
                    a5:0e:c3:35:99:35:a2:ae:b2:57:f2:28:41:9c:65:
                    bb:35:22:34:5b:a6:ef:f4:6d:5e:b0:d1:fc:14:7a:
                    79:bf:6c:d2:35:77:cf:6d:a8:50:ba:10:fe:c6:2f:
                    de:71:c2:0a:15:5a:5e:9d:4c:5d:5b:4c:fc:40:7e:
                    f5:dc:24:e9:ac:77:2c:26:76:25:1b:91:e0:fa:58:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:20:BA:4D:E2:8C:14:34:CF:0C:44:B5:6D:7D:D4:26:D7:1C:56:8F
            X509v3 Authority Key Identifier:
                keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:15:fa:3c:0b:68:d4:96:fb:d1:12:26:2a:1c:1c:cb:57:
         1b:8a:cd:81:de:53:32:f8:1e:a9:07:dc:93:bd:32:d2:44:c2:
         f9:1b:55:99:d1:02:21:49:89:d9:32:e8:78:ec:d8:68:aa:41:
         56:82:e6:87:1f:b6:3d:2c:68:97:6a:b5:08:10:e8:18:9d:2a:
         ec:81:31:8d:5c:f0:57:b0:72:b7:87:38:94:0e:c2:ca:4e:a9:
         f5:ea:7d:1f:01:42:29:d9:96:a6:f4:aa:10:c6:ce:21:38:07:
         ef:f9:17:08:b0:b5:f7:ee:4c:8d:a4:10:35:01:70:8d:c1:40:
         95:48:7b:db:4d:2b:cf:59:da:64:5f:ae:f0:85:50:d5:5c:c6:
         3d:6b:ee:2f:d3:3a:00:79:4f:45:7e:23:b9:48:aa:05:b2:63:
         2b:c1:d3:af:16:19:b3:78:c9:ae:57:c4:6a:ac:5c:4f:42:8e:
         53:a9:48:04:3d:a0:cf:0c:59:8f:d4:97:a0:f4:56:a0:6b:be:
         14:84:09:32:0d:4e:a5:e4:5c:b3:2a:2e:e9:bb:b8:3b:95:16:
         11:02:91:94:f6:93:bf:e6:4b:f6:77:01:a8:15:b7:fe:7f:50:
         c2:96:50:14:0e:ca:63:a8:a4:11:02:fc:20:69:7d:b9:46:04:
         b5:15:aa:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf07uIqc7nQoTXcDRaQbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjA5YmQ3NGFkYmQzNDlkMDEyYWYwYWE2MzBkMWZlODY2
OWM3MmYwHhcNMjYwNzI0MDUwMDQ0WhcNMjYwNzI1MDUwMDQ0WjAzMTEwLwYDVQQD
EyhiMTIwYmE0ZGUyOGMxNDM0Y2YwYzQ0YjU2ZDdkZDQyNmQ3MWM1NjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPfJ0u42rJss/Vsy3Omo61EmfvA
TepoJw7FVxQPsgc/Ja9DiL9E0ve1b/v8XQ0sR9RDyImPkUFJDmlJinVOvsnYCfpX
YcEGJgPfw4L5S5fzp+5ti+dzlbX9RQ7Kz46J0doyTBQNw+NYzA5vVP2HTjkD2D+H
QxoVuxP8EuN8OrSbdL1tHuE28Rop241r94aiteE3seSRNrt5yat77yXjYYKMnKzZ
AVyoKoJWuoK1Be1FYCylDsM1mTWirrJX8ihBnGW7NSI0W6bv9G1esNH8FHp5v2zS
NXfPbahQuhD+xi/eccIKFVpenUxdW0z8QH713CTprHcsJnYlG5Hg+lgFyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEguk3ijBQ0zwxEtW191CbXHFaPMB8GA1UdIwQY
MBaAFG4gm9dK29NJ0BKvCqYw0f6GaccvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYt
MTlhNDJiODk1MTgzLzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYtMTlhNDJiODk1MTgz
LzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+UV+jwL
aNSW+9ESJiocHMtXG4rNgd5TMvgeqQfck70y0kTC+RtVmdECIUmJ2TLoeOzYaKpB
VoLmhx+2PSxol2q1CBDoGJ0q7IExjVzwV7Byt4c4lA7Cyk6p9ep9HwFCKdmWpvSq
EMbOITgH7/kXCLC19+5MjaQQNQFwjcFAlUh7200rz1naZF+u8IVQ1VzGPWvuL9M6
AHlPRX4juUiqBbJjK8HTrxYZs3jJrlfEaqxcT0KOU6lIBD2gzwxZj9SXoPRWoGu+
FIQJMg1OpeRcsyou6bu4O5UWEQKRlPaTv+ZL9ncBqBW3/n9QwpZQFA7KY6ikEQL8
IGl9uUYEtRWq2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:00 2026 by rpki-client