Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File:                     BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier:          mnyhwgMw1Lwo7eCnNPLuTrlPkaPjf1zzxwqKYKsceIE=
Subject key identifier:   68:F1:EB:92:5B:56:C3:89:E5:1E:D7:71:9F:F8:67:5C:84:CB:E7:A4
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer:       /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial:       019F9059CC176501573AE583B772D1975E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number:          09CA
Signing time:             Thu 23 Jul 2026 19:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:31 +0000
Files and hashes:         1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
                          2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: e2dCzgQ+0J5cS4p+O7Ja+vbxkNtgGGIWhzu8Gfw/yt0=)
                          3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
                          4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
                          5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
                          6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
                          7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
                          8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
                          9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:cc:17:65:01:57:3a:e5:83:b7:72:d1:97:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
        Validity
            Not Before: Jul 23 19:00:31 2026 GMT
            Not After : Jul 24 19:00:31 2026 GMT
        Subject: CN=68f1eb925b56c389e51ed7719ff8675c84cbe7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:96:db:4d:0e:20:39:4a:41:0e:95:59:10:
                    eb:56:61:2f:0f:62:9f:7c:88:3f:d2:53:9c:3e:7d:
                    67:94:2e:29:54:fa:6e:0c:05:16:be:21:ad:c5:a7:
                    3b:ff:ed:df:12:b3:a0:58:ca:7d:cc:3f:5a:22:5a:
                    60:ec:30:0f:ef:1c:87:fe:f2:2e:b3:83:21:24:fb:
                    ed:95:ab:5a:ee:2c:71:0e:dc:e8:db:cc:f6:3a:16:
                    6b:1c:9f:ce:b0:8b:57:a2:ef:03:1a:42:4f:59:92:
                    c2:a4:d8:43:3f:5e:b9:ad:46:b7:8e:1d:5f:59:f0:
                    1c:1f:65:ec:15:58:a8:96:61:fb:28:d8:75:61:de:
                    c0:06:02:a8:b3:b1:e8:ff:75:1a:04:1e:fa:a0:14:
                    4c:5d:a5:30:24:4b:ca:a4:7c:70:70:e8:df:f7:3a:
                    96:d1:16:78:d0:0f:db:a6:5a:f1:65:83:a5:35:bc:
                    67:41:29:75:d0:4f:c9:5a:6b:27:2e:ea:a0:d5:2c:
                    cd:21:a9:ab:64:23:68:73:df:2a:61:5a:ab:e8:70:
                    69:89:fc:70:4d:ee:0b:44:07:92:93:15:43:46:0b:
                    ea:a1:6e:7c:e9:d1:a1:fa:0a:42:07:99:bc:a0:4f:
                    02:2f:4e:fd:ca:dc:67:26:ef:3b:b4:8b:38:ef:b4:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:EB:92:5B:56:C3:89:E5:1E:D7:71:9F:F8:67:5C:84:CB:E7:A4
            X509v3 Authority Key Identifier:
                keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:f6:a4:e7:81:90:8b:e0:4b:aa:75:cb:3a:af:38:01:7f:
         fb:b6:3a:a7:fd:d5:07:b0:b4:23:3e:a1:23:2f:95:f3:fe:62:
         84:3e:9a:50:37:dd:c0:60:93:95:75:c1:46:c9:85:54:32:c0:
         8b:85:63:e7:b0:ae:41:08:ef:44:6e:cf:d2:a7:5d:e0:19:46:
         6f:6e:24:d3:1d:31:96:3d:e0:3a:fc:4f:34:88:48:2d:80:3e:
         37:55:b4:e6:d9:2d:0a:39:e7:83:da:a4:a6:40:8d:9e:b5:3e:
         21:2d:cc:fd:b8:1a:fd:03:70:10:08:70:73:57:3f:36:6d:11:
         34:e2:cb:21:58:89:7d:c8:6b:3d:d2:c0:f5:9f:99:2d:2c:33:
         60:73:43:c2:5b:30:7c:d2:20:ab:99:d0:3c:79:9c:9b:88:b9:
         cc:30:d6:04:af:e4:a2:fa:a7:bb:dd:aa:6a:b8:e2:00:05:86:
         1c:72:fc:5b:5e:6a:ea:ef:31:47:17:4e:72:85:fa:8e:68:9a:
         f5:dd:1e:94:67:48:62:d4:68:2a:48:09:18:6c:ed:5c:1d:73:
         a8:09:b9:a6:d1:a5:65:07:7e:3d:78:e5:16:27:27:f9:1e:c0:
         4f:35:1b:f9:b6:33:12:95:21:24:2d:7c:07:43:93:f1:9c:b2:
         ac:f6:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:37 2026 by rpki-client