Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File:                     BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier:          O0oEslkdP6IOYpnmQ1wOE1IfjN5zfOV2dYSC5yrNtBU=
Subject key identifier:   5C:8B:16:EA:23:79:FB:36:36:42:B6:69:5D:0E:BC:B3:F1:77:4F:B1
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer:       /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial:       019F92B6326482771377880EC2FEBBA8B97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number:          1800
Signing time:             Fri 24 Jul 2026 06:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:41 +0000
Files and hashes:         1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: vlJYJyvc+xJbDOxir1ZlFxkcdnERks6Ki55yR8ogge0=)
                          2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:32:64:82:77:13:77:88:0e:c2:fe:bb:a8:b9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
        Validity
            Not Before: Jul 24 06:00:41 2026 GMT
            Not After : Jul 25 06:00:41 2026 GMT
        Subject: CN=5c8b16ea2379fb363642b6695d0ebcb3f1774fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:3e:96:80:c3:26:33:6d:73:11:24:9e:5b:
                    5d:3d:8b:9a:a6:06:32:8a:cd:a4:77:cb:b5:df:88:
                    2d:8b:ac:df:81:43:59:8a:07:8b:4d:39:3f:bf:bb:
                    8e:a8:18:43:47:84:1d:1c:27:b0:f5:91:c6:c2:cd:
                    c0:85:d8:68:45:4f:c1:12:8f:83:f2:1f:04:c1:ad:
                    8b:da:60:8e:c6:23:5d:48:98:d3:84:88:69:e9:00:
                    81:29:9f:58:51:50:3b:de:ef:29:bc:15:81:39:76:
                    03:47:5f:b8:33:46:a7:b9:77:36:3d:94:6d:7a:66:
                    9c:c3:e4:86:ea:f2:9e:99:ef:f6:82:c7:af:01:bf:
                    98:7d:90:97:9f:40:d6:27:92:a2:f5:bd:4f:29:98:
                    ed:a1:e4:72:7c:59:65:5c:f5:ab:6c:c6:5a:4b:74:
                    c1:4c:fa:6d:12:1b:af:f7:e9:1b:5e:35:83:4f:13:
                    da:8d:4b:82:57:62:0d:66:74:43:11:e8:d7:ea:3d:
                    cc:24:1e:72:b0:27:dd:82:35:ae:b4:00:10:13:09:
                    12:64:05:70:a6:ba:b5:d1:12:39:95:72:67:b9:7c:
                    f9:bf:f7:ec:40:f3:be:c4:f1:29:1b:dd:71:ca:c4:
                    f8:75:73:88:9d:bd:6b:a7:7b:55:cb:76:e6:a1:51:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:16:EA:23:79:FB:36:36:42:B6:69:5D:0E:BC:B3:F1:77:4F:B1
            X509v3 Authority Key Identifier:
                keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:8d:4c:fd:26:57:42:56:2d:b4:ba:f4:fe:f8:ed:79:92:
         97:a6:77:6a:51:15:40:5c:66:bb:db:54:34:9f:3e:00:32:be:
         3b:0f:62:e9:55:b4:3f:56:e4:09:b4:b0:01:2f:ec:5a:a5:05:
         d6:0f:5a:5d:34:a5:16:f9:2a:17:57:20:a9:8d:39:5b:f0:0c:
         82:31:95:f5:92:7f:46:a9:83:8e:b2:a7:a7:8c:73:cd:fa:77:
         83:95:6a:26:49:f3:94:30:b7:8a:08:90:ff:b8:e7:59:aa:ec:
         63:d8:32:04:0c:71:2c:15:b0:d1:94:d3:6d:e0:c7:d0:73:85:
         b7:b9:f9:eb:6c:27:7b:96:16:90:20:70:04:c6:a7:f8:5f:25:
         d1:2a:2e:21:d5:01:fb:9e:e2:b9:a2:9a:08:3a:be:67:c6:7e:
         43:de:9a:cd:9a:e3:fd:ea:ab:c7:ca:be:a0:d9:b4:70:0e:26:
         c4:40:a4:b1:2f:09:19:ae:4b:31:3d:36:37:32:51:81:57:d0:
         66:5c:76:17:69:7c:47:03:7c:e6:7b:72:e3:71:af:95:70:60:
         8b:82:13:4c:90:95:bb:4b:15:30:8d:93:ba:e9:1a:a6:0c:ef:
         90:15:23:89:a6:e0:cd:df:98:a0:ef:80:f6:24:97:0a:5f:b1:
         fe:53:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:54 2026 by rpki-client