Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File:                     BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier:          HovotZ8n9SrJ24Yv3FRP4whirm8If8uQjL6cBLMbrJM=
Subject key identifier:   49:5F:70:A6:69:CC:47:5E:A8:72:39:A5:FE:B6:3D:B5:3B:5C:E8:A5
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer:       /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial:       019F8F7F037B0451781919EDEDFC469AEFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number:          0697
Signing time:             Thu 23 Jul 2026 15:01:33 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:33 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:33 +0000
Files and hashes:         1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: lnayww5x0Jledf6o6/0EZ5HIO3Gb2hNxQtKmou/kV0c=)
                          2: eWnjmZdVZzQxwueHSohjr14QwEg.roa (hash: me4MSACDMbD+fTLWxUGHKHi46Lg/tHn5Rzt2RQwNwCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:03:7b:04:51:78:19:19:ed:ed:fc:46:9a:ef:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
        Validity
            Not Before: Jul 23 15:01:33 2026 GMT
            Not After : Jul 24 15:01:33 2026 GMT
        Subject: CN=495f70a669cc475ea87239a5feb63db53b5ce8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:73:6f:d5:a0:16:65:bf:cc:bd:4a:3e:ef:
                    5b:ec:69:f1:11:41:33:a4:2e:23:03:a7:2a:ec:12:
                    55:51:88:d9:54:89:7b:56:09:64:95:c2:0e:8c:ed:
                    2b:16:7d:62:27:10:f1:ca:31:a8:7e:f9:91:f0:70:
                    76:49:71:d2:48:44:4b:96:0c:69:9f:25:cc:83:8d:
                    dd:1c:2a:15:40:fb:62:2d:10:03:db:11:f1:cf:26:
                    eb:ce:3c:fa:fd:5f:d7:93:6f:cd:cf:cf:7f:37:56:
                    8c:47:51:2f:94:5c:8f:0f:89:c2:cf:2c:f0:c3:2d:
                    b1:07:9e:3b:85:d5:06:50:97:cc:cf:97:3f:20:3f:
                    c8:42:0b:de:cb:3b:a7:b7:39:65:3f:7b:fd:f5:38:
                    fc:e4:14:aa:de:7d:b4:dd:19:18:38:7d:2a:c0:30:
                    1a:8c:98:d7:ec:b3:e5:79:4f:ef:42:fc:40:98:13:
                    32:27:27:3c:56:bf:43:52:51:2f:d1:c4:1e:83:ea:
                    4f:61:ef:b1:98:b5:49:79:22:b9:d1:45:72:a5:87:
                    28:dc:60:f4:ad:e0:22:92:c2:93:33:f2:cc:e2:a4:
                    73:38:e6:00:ad:ba:37:0f:93:49:12:cc:fb:7f:1b:
                    c4:f8:dc:fb:4a:d2:d8:ff:78:5c:a5:b8:84:7e:e5:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:70:A6:69:CC:47:5E:A8:72:39:A5:FE:B6:3D:B5:3B:5C:E8:A5
            X509v3 Authority Key Identifier:
                keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:19:18:b4:89:20:36:5b:4f:64:ea:59:26:43:79:3a:3b:
         4d:15:b8:d7:15:c1:05:d8:ab:ee:08:19:b8:bf:fb:c4:05:d0:
         67:b1:38:03:dd:5e:26:06:59:5f:88:6a:3a:1a:1f:56:6f:da:
         28:90:17:38:cb:b8:14:82:6d:e7:42:5f:44:b2:db:00:6c:10:
         53:9f:33:62:98:c2:29:51:a1:e1:77:f4:8f:4c:3c:44:25:49:
         d4:c0:65:98:b6:a0:0f:8a:d3:31:a2:b9:75:68:90:17:01:86:
         e8:e4:65:0e:0b:de:7d:fc:06:5e:fe:6b:3b:4f:c6:c5:f1:1c:
         70:34:2a:3d:e8:15:68:51:87:7e:d5:4a:d8:8f:99:32:3b:21:
         5c:d6:15:5a:3e:a8:eb:0b:f2:56:94:e5:ce:e5:e3:04:db:ef:
         42:34:a5:4e:a7:78:c6:34:e8:fb:35:f8:22:43:0e:d7:76:5a:
         67:0b:0b:d0:f1:21:07:95:b6:02:0b:4b:e6:6e:ab:1e:b1:d0:
         55:95:54:43:6f:33:16:a5:b3:1f:2b:87:7e:e3:ba:af:d5:7f:
         46:87:89:72:60:12:a6:2f:dc:65:87:47:c0:fe:15:ca:9b:a7:
         d7:89:a9:57:19:fe:43:dd:e3:99:b4:df:d6:63:bb:a6:0e:66:
         a9:e0:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:51 2026 by rpki-client