Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          c4edvi2XGk7+s2DD3IRiftGdvo0bi+9HlYXHpaMvGkM=
Subject key identifier:   27:61:69:8B:18:D9:40:FF:76:D7:E4:A9:E9:27:A9:40:59:84:C1:0D
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019F8F104B44B9D613B6831687BBC101B96C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          08F9
Signing time:             Thu 23 Jul 2026 13:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:37 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: 7+BGH1a2vuaqO9VTpDaiKYuQNlkyeHD7vDj5HoAp/ys=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:4b:44:b9:d6:13:b6:83:16:87:bb:c1:01:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Jul 23 13:00:37 2026 GMT
            Not After : Jul 24 13:00:37 2026 GMT
        Subject: CN=2761698b18d940ff76d7e4a9e927a9405984c10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:2b:34:ca:a0:6e:0d:d0:9a:c2:92:69:70:
                    05:cb:ef:23:89:c2:55:da:21:15:f9:19:5f:b9:e6:
                    5d:95:4e:51:c9:22:f6:88:2d:6d:46:4e:81:d4:2a:
                    01:ba:f3:59:d6:01:e6:be:c3:ec:f2:80:27:cd:b9:
                    de:7b:f7:c0:db:ab:4f:e4:27:d4:33:8c:96:50:58:
                    bd:ae:88:95:98:8a:11:d4:2b:cf:2f:33:45:74:3d:
                    b7:56:af:6d:28:01:0b:69:60:06:d4:20:33:1c:86:
                    fa:52:dd:2e:59:fa:98:7d:e8:fc:54:6c:78:00:54:
                    1a:c8:4f:59:f8:24:7f:1c:7b:be:4a:11:6e:05:8a:
                    a2:15:bc:e5:32:43:3e:1e:61:e6:65:c1:1c:d2:31:
                    ba:a4:a8:bd:8b:15:86:23:ee:c2:16:fd:c0:e1:79:
                    67:06:f7:fa:06:49:a2:f0:7b:1f:2d:32:5a:51:15:
                    d1:a6:61:3a:65:9c:95:dd:65:b8:c8:78:b4:a3:e9:
                    13:b5:84:5a:31:41:2c:58:d9:4d:ac:93:c2:30:bc:
                    64:69:5c:46:a1:a1:83:be:7d:be:41:8b:aa:a8:71:
                    39:3f:ff:8e:e2:30:d4:98:de:f6:b1:75:49:8d:38:
                    7e:a8:30:fe:20:45:b0:6d:6e:e1:e7:86:ed:c4:02:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:69:8B:18:D9:40:FF:76:D7:E4:A9:E9:27:A9:40:59:84:C1:0D
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:44:5e:5d:0a:7e:cc:a8:75:6b:04:f9:ab:a0:7a:e6:4d:
         26:ac:d3:77:56:96:67:60:25:35:ab:46:e0:c2:b9:c9:8f:b6:
         71:3e:ac:87:9c:d6:fc:c4:c9:ce:ee:e0:80:1b:1c:d5:6a:6c:
         e0:53:a4:ac:b6:cc:93:46:24:bb:8d:da:b0:be:07:b0:af:4e:
         af:0b:39:ea:2a:78:73:1d:32:bd:f0:d5:04:9a:3f:1a:75:b2:
         65:07:91:a4:ca:1c:da:3b:9c:cb:9a:af:28:96:0a:3b:0b:e3:
         3f:1e:80:a9:63:63:59:92:8b:48:06:af:7e:9d:f8:51:35:28:
         46:3d:ba:a2:21:7c:61:82:93:81:ab:dd:2a:7f:8f:ab:83:49:
         1d:66:ff:e0:64:6f:fc:9c:dc:ab:85:74:f2:73:06:63:43:16:
         f7:cc:b0:1a:f0:07:ad:70:32:bf:b2:b1:5a:02:cb:30:d7:55:
         61:5a:0f:67:95:94:bf:d4:e6:e5:17:85:0b:d8:17:55:b3:8a:
         1f:00:22:f2:d3:62:d0:c3:06:1a:a4:f1:d5:f2:fd:17:6b:4d:
         8a:7b:05:3a:e9:4c:34:2a:1f:09:10:6e:4c:32:40:9d:a7:e7:
         2c:9a:a3:47:b8:44:02:4b:1b:80:c8:af:22:fc:01:da:d1:ec:
         f4:d1:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:55 2026 by rpki-client