Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File:                     BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier:          +M34/hlsXXIvN81njBphdzY9rg+EsFO+uYMtvFooiHs=
Subject key identifier:   0A:7C:0D:27:14:4D:9F:26:39:AF:74:29:4F:B9:E8:6C:B1:5F:09:8A
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer:       /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial:       019F8F7E28044D9EDBDEFB33F8BB961D4335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 15:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:37 +0000
Files and hashes:         1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: uFTB+B5zOAe/lHkqidfLdke4hxb4mpOwP8yH57CvTlU=)
                          2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:28:04:4d:9e:db:de:fb:33:f8:bb:96:1d:43:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
        Validity
            Not Before: Jul 23 15:00:37 2026 GMT
            Not After : Jul 24 15:00:37 2026 GMT
        Subject: CN=0a7c0d27144d9f2639af74294fb9e86cb15f098a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:18:15:9c:f8:ad:c2:ea:10:e4:63:27:a9:
                    6c:be:79:1d:eb:bb:ab:c8:c1:d8:a5:89:91:21:bc:
                    00:d3:51:5a:fc:03:b3:54:4f:4c:6f:c7:47:a2:8c:
                    8c:b4:71:1c:de:54:ef:80:9f:8c:04:e8:33:41:e7:
                    bb:02:d0:bd:36:0a:3f:4d:75:3c:dd:2d:c9:b1:1b:
                    bb:48:b8:5f:eb:c3:98:30:59:37:52:b9:23:ea:4e:
                    24:49:60:05:2d:e5:0f:ea:29:b9:cf:3e:a5:01:c1:
                    40:f3:d8:93:f8:67:14:00:81:42:75:0c:2e:72:fc:
                    f1:4b:f2:00:0e:91:91:3e:19:1f:4b:8a:54:9f:c3:
                    87:62:1b:df:f8:a1:55:a8:7c:ca:39:40:a5:cd:ef:
                    b2:eb:84:79:68:a4:74:23:52:20:8c:66:92:17:f4:
                    ff:55:ba:0c:92:cd:b7:d1:8e:41:70:48:23:e7:c7:
                    c6:b8:6a:02:05:98:95:fd:8e:3b:81:16:4e:0c:b4:
                    43:f8:59:e2:b8:c7:b3:b1:c9:6d:4d:e6:49:35:a4:
                    e1:6e:fe:04:4f:8e:a7:f0:2a:78:aa:48:b8:ec:f9:
                    ea:16:86:25:db:b4:8c:6a:06:8a:f6:76:b5:23:77:
                    93:44:a7:5d:85:7f:d8:4a:7f:72:11:01:d7:c7:11:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7C:0D:27:14:4D:9F:26:39:AF:74:29:4F:B9:E8:6C:B1:5F:09:8A
            X509v3 Authority Key Identifier:
                keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:80:a6:81:8c:0c:6e:f5:e9:68:22:e2:56:e9:a5:5f:b6:94:
         a6:73:c2:1c:9d:3f:9b:7d:01:2d:a2:92:8b:e2:76:4a:5b:09:
         55:5f:e3:89:85:1e:1f:55:82:2e:57:14:ac:32:64:87:ee:12:
         33:ac:c5:7b:92:91:3f:63:cd:7c:a8:5a:0e:4e:27:4f:73:e3:
         07:c9:ce:4c:18:10:34:e0:b9:ba:9d:5b:0a:fa:e8:a2:76:4f:
         60:85:da:5e:13:67:4e:54:3d:e4:54:52:cf:5d:1a:1a:43:08:
         d3:2e:8f:6a:88:e1:e3:65:9c:18:ee:18:bb:82:06:72:f2:4f:
         3e:94:74:aa:cf:f6:7f:a8:6f:62:a7:f0:0a:81:5b:d0:52:9b:
         b9:7e:10:47:3a:78:24:51:38:b0:8a:10:2c:5d:e7:92:a7:42:
         37:0f:8f:f5:2c:2c:e3:a1:c2:56:0a:97:0a:81:fb:e6:d4:68:
         fb:8a:96:ac:9f:33:23:10:be:48:5d:f2:ed:00:4f:d5:70:22:
         6d:9c:bc:0a:95:f2:7d:2a:3b:21:77:5c:f1:b9:ec:e5:92:13:
         9a:79:0f:8f:7f:f5:b2:36:e1:67:35:da:10:30:d0:4a:60:df:
         10:00:dc:de:90:d1:87:a6:ea:1d:cb:9f:a5:89:72:15:30:2a:
         bc:e4:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:32 2026 by rpki-client