Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.mft
File:                     BtHo1oujxV5Rv4nH3XSyQWn1Jpo.mft (raw, json)
Hash identifier:          O7cr6YWoEGFwy6BdQ0HgW4Fkj7GIIrQFdXsFMYF91m4=
Subject key identifier:   A6:80:7A:F9:FF:8E:B8:9E:A9:CE:A2:89:10:3A:70:83:71:F6:81:98
Authority key identifier: 06:D1:E8:D6:8B:A3:C5:5E:51:BF:89:C7:DD:74:B2:41:69:F5:26:9A
Certificate issuer:       /CN=06d1e8d68ba3c55e51bf89c7dd74b24169f5269a
Certificate serial:       019F90910CB1B6EFC6B0CBDFD73CB9001754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 20:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:52 +0000
Files and hashes:         1: BtHo1oujxV5Rv4nH3XSyQWn1Jpo.crl (hash: c4xOkt1fIIMZHSsuuF8Kiw3aBH/MOmO49UwuGWZvKao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:0c:b1:b6:ef:c6:b0:cb:df:d7:3c:b9:00:17:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d1e8d68ba3c55e51bf89c7dd74b24169f5269a
        Validity
            Not Before: Jul 23 20:00:52 2026 GMT
            Not After : Jul 24 20:00:52 2026 GMT
        Subject: CN=a6807af9ff8eb89ea9cea289103a708371f68198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:6b:1f:b6:2d:43:07:99:8d:91:26:d2:90:
                    9a:cb:3f:bf:a6:83:d7:9a:ad:2a:4c:d4:72:34:99:
                    55:6e:20:63:8c:67:01:c5:3b:ee:cc:1f:c5:1f:60:
                    23:48:16:76:9a:ab:b3:13:d3:67:4c:89:3a:8c:80:
                    be:e7:ed:be:9a:00:ad:6e:72:e3:c4:30:42:97:e4:
                    56:01:75:2a:91:ba:e3:60:6a:13:10:33:81:94:d0:
                    7b:69:c9:ba:dc:b3:b3:a4:61:ac:94:97:f2:ba:71:
                    a5:f2:6e:21:5e:8a:38:c6:a5:0d:25:cd:1f:e8:34:
                    78:d0:fb:45:21:be:3c:01:9d:5d:c7:c2:f5:ac:f0:
                    47:cb:07:0d:46:ff:d5:05:a7:ea:37:da:cb:e3:c9:
                    bd:0a:23:5a:cd:a0:58:02:66:de:2c:d3:8e:5e:60:
                    85:78:c3:4e:c1:25:34:7a:6c:28:21:0b:67:a5:c3:
                    c5:71:5f:51:75:76:4b:1d:60:93:d1:ae:fb:ec:2b:
                    8f:0a:18:61:9f:a8:d1:0f:13:dd:e5:3e:d4:e5:cc:
                    ec:6b:50:3a:a5:c9:0a:71:14:8d:d1:8c:17:a3:00:
                    ea:2e:e4:89:7d:02:76:fb:4f:24:9d:7c:71:21:7e:
                    b1:0c:71:28:f5:21:00:c9:16:2b:9f:2f:a1:3c:49:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:7A:F9:FF:8E:B8:9E:A9:CE:A2:89:10:3A:70:83:71:F6:81:98
            X509v3 Authority Key Identifier:
                keyid:06:D1:E8:D6:8B:A3:C5:5E:51:BF:89:C7:DD:74:B2:41:69:F5:26:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/BtHo1oujxV5Rv4nH3XSyQWn1Jpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:24:2a:d2:23:a2:5e:73:02:96:04:4f:41:9f:4a:6c:c9:9e:
         e6:bf:b9:9d:cc:f6:8d:44:08:42:e6:2d:e2:de:2e:32:02:92:
         01:0b:c4:af:72:ea:32:96:71:94:be:f0:4a:92:f5:f6:22:6f:
         5e:c4:3c:f7:4e:5a:bf:6a:8c:f6:16:7a:6b:4b:13:7b:6e:71:
         67:9d:8a:b9:97:33:04:9c:f0:e8:10:89:f4:a3:e8:42:9d:ca:
         76:47:bf:4f:6c:e2:92:90:cf:25:38:29:82:1e:9b:20:7b:b5:
         0a:d8:ae:58:b7:f5:3b:9b:fb:1f:bf:7a:9f:a2:aa:79:8d:4f:
         4c:45:0d:b1:18:a2:6b:da:8a:ed:90:1b:8c:e7:36:95:45:29:
         d3:ad:f0:24:56:78:0a:a7:43:f9:e4:20:61:5b:79:44:20:1e:
         e3:bd:8b:ab:a5:fd:b6:61:d8:88:83:f3:9b:50:de:9b:c6:48:
         58:6a:8e:78:da:c9:c4:96:bb:cb:aa:a2:fd:4c:d6:a5:b9:ec:
         78:d4:fa:77:af:78:53:0a:00:8a:37:29:17:72:42:bb:19:95:
         1c:08:4b:69:19:b4:37:b5:bd:37:73:14:07:48:df:9b:5c:70:
         04:39:c8:70:57:91:76:65:80:87:37:35:f6:93:8e:19:e3:08:
         22:c5:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:22 2026 by rpki-client