Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File:                     BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier:          ZpHiIE44cIOLXELmQI5nfm+4w6Ct+ZwMvXeLMOy0URo=
Subject key identifier:   11:70:A1:EF:8E:68:0F:1B:7E:4D:60:4C:14:90:D2:2B:40:0E:D7:BA
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer:       /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial:       019F9059EE5BD6BD1E35F02C292786F602BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number:          4B
Signing time:             Thu 23 Jul 2026 19:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:40 +0000
Files and hashes:         1: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: +6zC8cz2FmbAtZT/CHaWugziGI0VUaaJcmsAS/lO8j8=)
                          2: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:ee:5b:d6:bd:1e:35:f0:2c:29:27:86:f6:02:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
        Validity
            Not Before: Jul 23 19:00:40 2026 GMT
            Not After : Jul 24 19:00:40 2026 GMT
        Subject: CN=1170a1ef8e680f1b7e4d604c1490d22b400ed7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:9e:36:5c:e1:ae:98:42:09:51:8c:62:e5:
                    3f:e3:cd:bc:3d:8a:78:96:57:06:2c:ed:ea:65:d2:
                    bb:14:ad:e6:d1:79:d2:3f:bb:bf:b4:39:c7:53:e7:
                    20:4c:7e:e7:14:57:a7:ee:65:88:58:9d:55:14:2f:
                    a6:1f:7a:94:9a:93:5d:0a:ce:24:34:ea:cc:a6:7d:
                    f8:06:8e:73:92:5f:2d:04:72:32:1f:9c:b7:7a:ba:
                    41:fa:78:2c:87:09:d0:7e:fa:66:0a:59:47:9c:0b:
                    d8:bd:5b:42:72:1d:1e:92:49:98:bc:97:d6:59:de:
                    1b:40:40:e8:e9:ca:4b:dd:90:5a:fa:00:8a:4c:70:
                    17:85:1e:42:3b:4d:45:be:29:66:fe:d8:c7:af:67:
                    9a:07:54:05:1a:88:43:59:62:6e:5f:53:dd:7e:01:
                    2c:0d:b1:7d:c4:7c:96:f8:c7:dd:7a:f4:24:4d:c4:
                    22:f3:aa:a6:2f:de:71:bb:d0:6f:be:19:dc:8e:f4:
                    8e:f4:16:bc:4d:b5:85:0c:6d:7c:6f:f1:4f:3b:98:
                    7c:84:a5:4d:b5:b6:a7:98:5c:3f:ba:25:30:d9:46:
                    d1:61:78:c3:3a:e7:24:da:15:af:0b:8d:13:71:92:
                    71:f4:44:f6:18:44:04:48:15:cb:f4:41:f9:db:95:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:70:A1:EF:8E:68:0F:1B:7E:4D:60:4C:14:90:D2:2B:40:0E:D7:BA
            X509v3 Authority Key Identifier:
                keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fa:01:91:c3:de:f5:38:de:f1:7f:2a:64:41:80:8e:d4:23:
         21:8d:1c:22:49:91:83:dc:14:bb:a1:15:2a:50:86:84:98:7d:
         54:29:31:f5:e4:5f:db:50:a6:79:f4:8b:70:7d:ca:0f:ab:66:
         be:4e:90:ee:eb:47:ac:4e:39:9f:f2:2e:90:69:04:53:89:5d:
         6e:34:eb:69:46:d4:ee:7a:da:16:15:8d:e7:10:8a:a2:62:7c:
         62:83:94:01:5a:61:a6:94:72:e3:bf:42:52:9c:6d:a6:80:42:
         8e:35:da:d3:5b:b5:90:cd:ea:8b:8b:60:ef:a4:39:1f:65:a1:
         0c:6d:dd:0b:54:25:44:f9:20:3a:ae:fb:6d:bf:a4:01:be:61:
         92:43:cd:90:b7:f1:6f:c0:3f:2f:11:1f:25:1f:9f:94:6b:11:
         c3:9f:83:21:22:0e:72:f7:41:07:e7:8b:e2:ca:53:71:0a:7b:
         d9:9f:28:b9:33:08:4a:7d:36:33:22:65:6b:10:58:98:63:77:
         37:20:1e:12:38:ca:3b:97:12:e2:c2:71:4b:5f:d3:e0:8d:4e:
         c3:47:c5:02:c1:5e:63:b6:e7:3d:a8:7b:58:34:a7:a3:6b:1b:
         5d:b6:1a:45:cf:9b:74:52:16:87:2a:5d:b9:67:23:95:a1:67:
         67:9c:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:35 2026 by rpki-client