Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          2oOl9pkUdZeg/+75MmPML4PdGCq7zMeHu7EL7qb/KVM=
Subject key identifier:   6B:E9:87:0F:5F:70:E7:B1:7F:D6:5C:2F:57:AB:46:10:C9:C6:C5:E0
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019F91355ACEE0DCD7C42823962E8C1E8C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          04C7
Signing time:             Thu 23 Jul 2026 23:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:20 +0000
Files and hashes:         1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
                          2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
                          3: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: kA6uJFYXWp3vRn3TbwA8dqON2IwX0GjC508/OH+kZHM=)
                          4: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
                          5: RB6c02Y05ndL1tBmed3K3PYqOb8.roa (hash: HA3QTmLMd6DYrv7h2tvYadjPLlyjtL356EnCTt0Ef14=)
                          6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
                          7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
                          8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
                          9: xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa (hash: GdkhncA6Cz+FJ2IUdWjBXkrGRY/WRmJ/1R0l4xrrdNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:5a:ce:e0:dc:d7:c4:28:23:96:2e:8c:1e:8c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Jul 23 23:00:20 2026 GMT
            Not After : Jul 24 23:00:20 2026 GMT
        Subject: CN=6be9870f5f70e7b17fd65c2f57ab4610c9c6c5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:03:95:22:7f:66:5b:4e:5d:97:9e:b6:27:
                    f3:ec:0f:0f:2a:21:f0:d4:53:87:a1:2f:d3:60:8d:
                    f4:67:9e:cc:5d:7b:0c:f2:b2:80:cc:f3:eb:93:c9:
                    a7:88:9c:dc:26:16:c2:8b:c7:bf:1c:9d:32:cf:8f:
                    9d:37:2e:d1:3d:c7:b6:7f:d9:7d:9c:b1:44:e8:d7:
                    86:74:70:fa:5c:9d:3e:f9:40:a9:e2:0c:c6:85:a4:
                    f2:46:6d:80:6e:28:c0:2f:65:15:0c:5b:f3:2d:41:
                    9a:62:df:e8:02:8a:45:ef:ef:c6:1d:87:2c:c7:9b:
                    87:d8:f2:4a:d2:b3:3b:43:d9:ac:c9:68:1e:01:76:
                    cb:64:2f:bf:4a:4e:0b:f4:a4:90:97:87:97:8d:7d:
                    c2:aa:66:12:28:38:c0:23:af:dd:3d:fd:18:0a:3c:
                    91:98:cb:9f:ea:0b:b4:2b:b9:22:5a:70:77:07:94:
                    a6:6f:fa:0b:8c:88:fc:32:57:48:1a:38:5f:30:d3:
                    c0:17:66:d6:ae:80:09:39:76:83:f4:d3:d4:55:57:
                    d4:db:5a:8f:fd:dc:25:7f:99:3e:15:92:54:1a:65:
                    59:4f:80:69:a2:d2:9e:8c:39:de:72:ee:75:02:00:
                    68:a0:5e:18:04:6c:e3:97:f0:3a:71:f3:23:c4:1b:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E9:87:0F:5F:70:E7:B1:7F:D6:5C:2F:57:AB:46:10:C9:C6:C5:E0
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:07:16:ac:09:9a:ee:e9:10:43:f4:d5:2f:f8:0b:82:10:
         43:7d:ec:9f:62:3e:8c:a2:5e:64:b3:ac:aa:6f:bd:75:f7:31:
         af:3d:a5:b6:aa:f1:cb:da:55:0b:c5:95:5e:b0:6a:47:fc:e4:
         3d:38:e9:6e:db:85:b9:8f:8b:3b:05:64:a7:7f:18:9c:71:23:
         7c:7f:19:fe:6e:05:9a:c0:ec:38:69:c3:52:29:de:27:c4:9b:
         c4:b4:4d:17:44:73:ba:65:20:ad:86:1e:68:bb:df:48:82:3d:
         44:9e:55:f2:2f:5e:f8:75:0f:06:1b:20:5a:ee:12:79:ed:7b:
         49:f2:3d:c0:f1:0c:79:8d:ea:a0:30:2d:09:04:9e:9c:a2:59:
         fe:a9:55:4f:ac:19:8b:ac:ff:4f:64:06:44:1b:d1:7d:18:81:
         73:8d:17:d5:48:8c:26:79:45:56:e9:c9:f0:1a:cf:88:33:d1:
         ae:58:47:16:ec:4d:97:69:ec:99:03:66:9b:d0:fc:88:65:f1:
         a0:c9:54:4b:f4:33:cf:bf:7b:6a:74:ec:03:ed:29:42:ef:34:
         a8:03:9a:14:f8:de:4a:01:93:97:ab:ba:69:af:0d:a1:b1:65:
         3b:df:e8:98:56:68:d9:6e:e0:f2:e3:71:73:01:24:46:f9:ae:
         4f:7e:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:53 2026 by rpki-client