Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          mm74Bf4kov7FPIhnOnCs61pw5N3NfdMx42k8lyGudx0=
Subject key identifier:   15:D8:5D:5B:54:2E:BE:EB:FC:41:79:D0:59:2F:0D:D6:8F:6F:AE:00
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       019F927F2C42BA62DB80003278893A30FF35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 05:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:35 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: 4i+CkDXcznzuQn8PzV8WAwnA7IXFcUJ8gQU+9ovLrAY=)
                          2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:2c:42:ba:62:db:80:00:32:78:89:3a:30:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: Jul 24 05:00:35 2026 GMT
            Not After : Jul 25 05:00:35 2026 GMT
        Subject: CN=15d85d5b542ebeebfc4179d0592f0dd68f6fae00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:50:14:f9:d2:26:a8:8f:db:92:c4:29:99:
                    dd:86:92:ce:52:72:8a:f6:0f:5e:f9:6d:05:ec:bd:
                    83:5a:35:1a:06:92:6e:42:24:2f:e0:ab:a9:cf:36:
                    f7:7e:4e:74:ab:22:57:1e:f6:b2:f4:1f:93:c6:41:
                    6e:ef:15:3e:b6:ef:b7:b2:a1:e5:13:63:48:26:b6:
                    03:44:db:aa:b7:f7:a5:32:e6:9f:73:ef:25:bd:9c:
                    a2:cd:97:e8:d0:ab:b5:a9:80:37:7b:cc:0a:71:a1:
                    fe:8c:cd:ae:ed:d4:f4:ae:6d:17:ab:f4:a7:06:b7:
                    38:28:d7:f3:64:7d:59:92:f7:97:c4:bc:a1:d0:db:
                    c6:cc:10:7c:f2:99:6c:bd:75:51:18:2a:14:3f:93:
                    0f:17:9b:f9:4f:a3:04:6b:1e:35:ca:88:f7:6c:9f:
                    a6:ea:86:4f:10:06:ce:6a:14:3a:31:fe:75:20:28:
                    ad:18:81:a6:13:8e:3e:13:07:8c:d9:d4:be:3f:95:
                    e4:e1:1f:b1:a0:2a:92:02:54:c1:65:f0:6d:ac:e6:
                    3d:10:ba:49:0f:fb:df:ef:9f:b8:a9:2b:2a:90:c8:
                    a7:d8:d4:5f:69:71:56:26:c4:89:1a:54:22:ba:66:
                    ad:9b:93:50:e5:0b:fe:b7:6a:f0:3e:a2:42:9a:87:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:5D:5B:54:2E:BE:EB:FC:41:79:D0:59:2F:0D:D6:8F:6F:AE:00
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:29:1c:a3:04:cc:3f:a6:3e:d6:35:4a:3c:76:ff:92:13:d9:
         bb:9b:76:b2:fe:ed:39:0c:45:24:6a:ec:53:ee:b5:35:ba:6c:
         bd:80:75:34:7e:43:71:52:47:ec:d0:77:d8:c7:c4:9f:80:3c:
         cc:1a:23:32:68:a7:87:91:1d:e0:cd:d0:d5:29:e5:0e:0d:fa:
         ef:62:7b:65:69:79:fb:a1:c4:a5:b1:72:d6:45:af:c6:c4:24:
         ea:00:0e:c9:f8:6b:2a:aa:e5:dd:08:6f:7f:9f:4f:25:10:0b:
         91:03:76:b9:52:c2:02:ef:0b:40:9a:07:9e:24:bc:53:a6:e2:
         c5:e5:ba:93:62:0f:7a:82:db:43:72:df:05:1a:c0:b5:61:6c:
         93:05:a4:3d:6d:60:f3:74:69:e0:95:9f:4e:ec:84:38:60:a0:
         8c:ec:cb:fb:67:8c:fd:d7:d4:35:61:47:f0:5a:8f:62:4f:c6:
         73:85:7a:80:d5:ca:25:65:84:9c:dd:51:92:3e:7f:0b:aa:47:
         e7:c0:5c:a7:5d:41:4c:a0:fe:81:2e:54:85:71:3a:0d:c5:bc:
         54:3f:98:ca:b1:34:82:4d:8b:0a:59:b7:77:c9:e4:70:87:1f:
         fe:59:13:3f:5d:ac:ce:03:59:08:0d:09:94:94:3b:23:5c:73:
         b8:a5:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:52 2026 by rpki-client