Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File:                     tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier:          D9yJu+tV+jq0MliEHnMYYsjt/DH0tjor2a9hoLKs2Ro=
Subject key identifier:   16:82:8C:5F:86:8A:68:01:48:AB:35:6F:81:4F:F7:4D:61:44:C3:8D
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer:       /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial:       019F92B5E3129DF64A29165CABCF167F2CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number:          0699
Signing time:             Fri 24 Jul 2026 06:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:21 +0000
Files and hashes:         1: 2bWalxPeCQJ8hBsQRSAPBex2fq0.roa (hash: cNxILQXB6Mynw64tQNRAKKJy7J8sm0Mm5cAcElFdefE=)
                          2: EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa (hash: MlUbpIDVvfA4UHQUJSKo2vmPPZS7Hen8jUTVtn35kQ8=)
                          3: HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa (hash: EOzdMc3GskmF40wiE+yrzgPDbCivBZJb96Tu2M3IGvc=)
                          4: kpqcS9iGD3Rpk_iaEfzT0Q1dgkM.roa (hash: tIu+noXL+FL6T6WamJRVDXq32TLBt1UuchPxTpkYd9s=)
                          5: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: lCDjUyxomIzVauIrZm0F5qk0uVkIDRhFkmX38uovKEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:e3:12:9d:f6:4a:29:16:5c:ab:cf:16:7f:2c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
        Validity
            Not Before: Jul 24 06:00:21 2026 GMT
            Not After : Jul 25 06:00:21 2026 GMT
        Subject: CN=16828c5f868a680148ab356f814ff74d6144c38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7f:b1:c9:6e:28:d6:4b:ef:b7:36:35:ce:95:
                    3c:97:2e:f1:4c:97:ae:c0:97:16:52:73:c1:c0:de:
                    27:96:03:84:3e:bf:1d:e5:54:7d:42:62:49:c6:46:
                    28:6f:d8:2c:71:9b:e2:7d:0a:c7:31:0d:03:cb:ce:
                    a7:9c:bd:b6:ad:8d:2d:b7:26:1f:9e:a5:e4:c4:d2:
                    88:0a:01:15:02:f3:c2:49:c8:ab:67:89:df:d5:1d:
                    b7:c9:16:ae:4a:a7:56:91:db:ba:15:e5:ad:15:53:
                    12:d8:ba:1b:98:d7:69:1b:52:a7:93:39:98:92:19:
                    a8:d4:37:22:73:71:1e:12:2d:59:c5:fd:88:72:4f:
                    25:d8:47:08:cb:00:b7:9b:5c:23:7a:82:00:bf:53:
                    90:74:f5:ee:db:10:be:29:97:e9:31:b0:d3:b5:ab:
                    35:21:b4:9e:b2:22:0b:6d:bf:80:51:f5:68:4c:a3:
                    9e:87:96:17:05:a4:fb:5f:2d:20:82:af:0a:13:31:
                    14:7c:28:3b:c3:09:4b:fa:02:15:9d:4c:fe:6c:51:
                    35:0e:bd:ab:fe:fc:19:bf:0c:6d:b6:f5:8f:de:20:
                    d4:9c:97:f8:ce:cb:d5:32:fb:ff:04:66:86:66:af:
                    24:b0:26:f2:a8:d2:fd:c9:49:c3:8c:36:ef:f4:69:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:82:8C:5F:86:8A:68:01:48:AB:35:6F:81:4F:F7:4D:61:44:C3:8D
            X509v3 Authority Key Identifier:
                keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:97:dd:27:d3:69:85:f4:df:4e:86:bd:d7:be:bc:e7:2c:0e:
         54:f6:57:db:a6:89:69:c7:49:d5:61:71:53:3c:c7:48:22:65:
         9d:6f:9b:4e:bf:d5:5b:b1:b3:dc:60:24:b2:6f:b4:11:d0:20:
         27:0d:cc:31:7b:46:50:bb:27:2d:10:2a:e7:dc:a4:49:63:e9:
         7d:de:6a:ff:a2:92:d1:4a:a8:c9:c2:95:e3:5f:3c:31:84:8c:
         2c:24:78:e4:71:ff:6f:6c:41:f6:10:bd:35:0a:f0:f6:be:0c:
         e8:42:b8:26:79:24:91:bc:df:a3:db:f6:89:ec:31:2a:e6:c9:
         b9:93:9b:ac:fc:60:4e:99:51:f3:18:d2:7a:2e:c0:3b:a8:4f:
         64:2f:41:d8:21:4f:04:8f:86:16:44:e2:aa:83:11:b7:59:b2:
         0e:74:cb:42:d4:d6:18:7f:74:20:f4:7e:00:1a:a7:6c:76:bb:
         3b:7d:5f:80:f9:07:1a:df:3e:f1:e0:56:85:4c:e1:b1:c4:1d:
         80:e0:01:15:28:75:9c:62:68:31:da:b1:c6:8b:45:77:d3:5d:
         51:d7:d1:67:a8:65:bf:f6:0a:37:e0:65:63:fe:d4:de:ca:d3:
         64:c9:15:5e:f9:57:69:96:ec:75:6d:53:1f:12:39:a4:18:52:
         be:78:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:40 2026 by rpki-client