Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File:                     BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier:          6cZwjRyv5F4aWzLx/1aVLlxRBDJs5+VBC+qHoZ/sVlI=
Subject key identifier:   F7:C0:FA:1D:96:7E:DD:1D:3F:26:B3:A7:4F:B3:69:95:8B:E4:8D:FA
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer:       /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial:       019F9022EF41F9C8F595D10C52CB78DF8C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 18:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:36 +0000
Files and hashes:         1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: AKRCh1DsAZnTResVcsbNSK3ZRCN6Zc1vhqSVRpVM/RI=)
                          2: sA4kl7o5kbctohYhMH3tb8jEvIM.roa (hash: yvgE8Ar+rDnZHHbM7lyidYb1LqwSWRPZgw35u9TtMhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:ef:41:f9:c8:f5:95:d1:0c:52:cb:78:df:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
        Validity
            Not Before: Jul 23 18:00:36 2026 GMT
            Not After : Jul 24 18:00:36 2026 GMT
        Subject: CN=f7c0fa1d967edd1d3f26b3a74fb369958be48dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:02:ad:70:63:db:d7:c0:fc:61:ff:2b:d3:
                    4d:c6:cb:94:47:5b:28:77:5f:69:3b:ac:94:ce:bd:
                    e0:fe:54:33:fb:78:15:44:b6:b7:95:23:66:fc:da:
                    9b:50:93:25:a5:17:5b:f2:af:99:75:34:9d:22:e4:
                    a0:16:05:02:a4:4d:86:58:45:6a:e9:31:43:9c:70:
                    f4:40:b4:c1:9f:88:96:1b:d6:52:9f:f7:2a:02:a8:
                    07:29:db:0f:ed:b0:f2:fb:51:c4:b7:18:e9:48:b8:
                    04:10:91:88:89:61:a4:51:e8:29:25:df:f5:8f:ee:
                    b0:fe:d5:3b:2a:29:7f:b1:4e:9e:0a:b5:f9:5f:cc:
                    2a:75:06:b8:e8:bd:84:c0:e2:6a:a0:76:3f:da:77:
                    50:2e:65:27:46:65:9c:dd:bc:a6:71:67:2a:bc:9a:
                    77:8b:99:23:50:e4:f6:ed:92:b2:8e:5f:69:99:a9:
                    74:87:22:e9:73:44:ea:2c:9a:cb:b8:00:a2:af:9c:
                    1a:da:f8:36:f2:ac:6c:4e:4c:c8:7b:2b:6e:c6:81:
                    02:e9:0b:d8:58:62:f0:34:ff:77:33:19:24:82:b6:
                    d3:15:c0:f3:be:ff:b4:f1:cb:27:17:54:99:0c:ca:
                    5c:d8:ed:8d:35:de:ef:aa:26:76:8f:52:ba:a7:69:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:FA:1D:96:7E:DD:1D:3F:26:B3:A7:4F:B3:69:95:8B:E4:8D:FA
            X509v3 Authority Key Identifier:
                keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:b4:39:e2:cd:f0:1d:7b:36:0f:fc:14:1e:13:e4:02:05:
         56:40:32:9a:be:75:fa:19:ac:f8:9f:86:8c:6b:c5:cd:ed:27:
         5e:34:f2:ad:a2:8e:40:7d:36:4e:61:a1:87:df:1a:ef:1b:02:
         4b:2a:5a:33:9a:e1:60:ca:60:9e:a3:29:51:25:6e:57:ef:49:
         e6:df:64:fe:72:84:b8:ca:b9:99:f1:e4:c5:bf:11:3e:cd:23:
         9f:44:f4:3d:9d:88:b5:ff:9b:aa:8b:17:ff:e3:29:a4:53:81:
         3f:11:c7:5b:d4:1b:6c:f2:0b:b6:3b:21:4d:a3:e4:e9:79:8c:
         03:2b:60:d2:e6:61:fc:d2:a9:7f:92:4f:e2:0d:a7:82:76:54:
         3f:97:71:15:1f:00:ec:a8:98:a5:ad:55:47:7d:1e:f7:74:02:
         bd:21:a7:c7:ea:53:7d:e8:f0:25:de:b6:d2:ed:f8:15:42:fb:
         7a:94:ea:8e:02:68:9c:cf:57:3c:e7:09:23:9c:27:ef:59:46:
         cc:37:f3:1a:1b:d6:9c:a2:fb:6e:1c:ee:a9:02:5a:fe:11:de:
         09:8c:cc:54:f3:c8:b6:d5:24:11:45:6f:59:fc:a2:e1:73:a0:
         5a:de:75:8b:7e:0d:6c:59:37:bb:fb:d4:b0:53:bc:f5:19:93:
         7a:aa:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:51 2026 by rpki-client