Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File:                     CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier:          XbhO1v70Y6Yx3DX+hvXGcNf4r5LUGDvtQVwWQIix1HM=
Subject key identifier:   EA:E8:3D:EC:90:DC:13:15:A5:F1:B4:FA:FC:8E:65:42:C3:5A:57:5C
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer:       /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial:       019F90C777E3A1AA907DAE45DB23817AD5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number:          1865
Signing time:             Thu 23 Jul 2026 21:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:19 +0000
Files and hashes:         1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: LDnmB0xZW6DE6LjYTb7GscfffZGWEO/zxtAKfox7F9U=)
                          2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:77:e3:a1:aa:90:7d:ae:45:db:23:81:7a:d5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
        Validity
            Not Before: Jul 23 21:00:19 2026 GMT
            Not After : Jul 24 21:00:19 2026 GMT
        Subject: CN=eae83dec90dc1315a5f1b4fafc8e6542c35a575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:e6:38:fc:5b:06:4b:af:12:d0:ee:57:e1:
                    f1:58:31:11:17:c5:fd:4c:e5:2b:cd:af:1a:40:d8:
                    15:ba:dc:b7:83:7a:71:a1:83:a6:66:c7:e1:b1:61:
                    b0:65:3d:18:95:91:cc:d6:38:d1:5e:19:af:82:58:
                    26:ab:19:f2:1a:c5:35:28:d0:9b:be:f0:1e:45:ae:
                    0a:5e:b8:1a:ca:6b:ff:15:b8:a1:9d:d9:31:ab:82:
                    39:9a:8b:7e:ae:a5:01:ac:bb:ef:eb:7d:08:09:16:
                    1a:75:68:83:89:a0:4f:48:27:2d:d9:e0:0c:d3:84:
                    3f:c1:4b:c0:3b:94:8d:2d:0c:29:ae:67:6f:da:ee:
                    a6:51:71:cf:73:8c:1a:11:e5:29:bb:1e:d3:20:a3:
                    ec:ab:0c:da:57:d5:b3:fd:3b:7d:79:da:e2:22:0f:
                    d1:0f:cc:87:b2:67:50:6d:bd:3e:8c:ea:68:0a:b9:
                    f9:a0:45:d4:08:5d:2b:73:61:73:18:1e:3a:d5:dd:
                    1d:1a:ee:62:4d:44:29:6f:fd:fe:2a:5a:1f:b3:80:
                    6b:af:24:72:b1:ab:e6:69:27:b4:d4:ab:5d:de:40:
                    fd:24:bb:54:db:48:d5:a4:32:62:44:f9:99:cd:ea:
                    be:12:d5:b9:fd:9a:7c:fa:ae:e5:8a:80:81:6f:01:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:3D:EC:90:DC:13:15:A5:F1:B4:FA:FC:8E:65:42:C3:5A:57:5C
            X509v3 Authority Key Identifier:
                keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:50:73:12:96:1d:f5:00:ca:f3:b9:2d:bd:32:ee:87:10:
         0c:81:89:7b:2f:f1:79:db:aa:e5:35:ba:13:62:e2:91:cc:da:
         da:be:94:85:af:8d:2e:03:d9:ff:6d:6d:57:e3:03:6d:ef:c2:
         3c:8d:09:e3:4c:20:c8:dc:6b:b8:0b:0f:b5:d3:3c:10:5b:1f:
         d5:86:cf:de:8f:96:93:d6:dd:94:0f:65:9d:97:d5:30:ef:b9:
         0a:6d:a2:51:7a:79:a3:bb:7e:f9:0e:69:1a:86:69:b8:34:4a:
         e0:87:20:76:81:00:cc:ba:ee:79:b1:71:b4:97:01:b7:60:7e:
         00:8f:31:c2:96:a7:9d:6c:aa:b5:d3:48:52:fa:fa:ad:0d:9b:
         ac:88:b4:5d:1a:12:f5:9a:17:d4:72:49:3f:1b:2a:d6:08:94:
         9f:be:3e:54:fd:4d:09:bd:3a:fb:18:38:4c:83:60:cb:0b:59:
         26:aa:ed:e3:f2:bc:3c:b6:5b:3c:1d:41:e6:57:c3:95:04:7e:
         c7:6f:ee:f7:da:bd:c3:0c:4b:51:b1:78:2d:86:07:ad:d3:9a:
         63:26:2b:e1:4b:b3:46:dc:1c:f2:4f:15:b1:cb:ab:42:e5:cd:
         4c:7b:35:de:54:31:4c:c1:20:43:c7:2f:ee:e7:85:df:d8:be:
         b8:3e:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:56 2026 by rpki-client