Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File:                     bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier:          OX8nQT6x9nftZfs3CI8p8P95UWNy8eVQfDaOz21+SQU=
Subject key identifier:   70:EC:D5:5A:0F:3B:0A:93:AA:6D:50:1B:D8:E8:64:29:30:FF:9C:89
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer:       /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial:       019F90C7C1246459CD5376D69B8CB535FB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 21:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:37 +0000
Files and hashes:         1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
                          2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: dd9UOrYfmvdHzsefD1jXc+0ibSlxn0OJWHtSlz80vfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:c1:24:64:59:cd:53:76:d6:9b:8c:b5:35:fb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
        Validity
            Not Before: Jul 23 21:00:37 2026 GMT
            Not After : Jul 24 21:00:37 2026 GMT
        Subject: CN=70ecd55a0f3b0a93aa6d501bd8e8642930ff9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:4e:1d:16:9d:41:f5:cf:1f:09:52:7f:37:
                    7f:e6:52:2c:52:a8:2a:fe:a9:8e:e4:ad:18:bd:c4:
                    10:34:4f:4b:db:aa:44:81:28:b0:dc:3b:5b:ab:3a:
                    89:ad:49:d2:1b:da:5c:1d:66:67:9c:21:59:5b:3f:
                    44:ea:9f:de:ea:19:2d:b8:23:c4:e0:66:be:47:2f:
                    28:0e:6a:9f:4b:87:88:11:8b:a4:a0:53:70:8a:e6:
                    56:17:10:bf:6b:93:6b:55:2e:d3:8d:00:a8:ba:62:
                    1c:ab:9e:c2:55:d6:fc:2a:18:60:27:d5:87:ad:0e:
                    dd:9b:30:c3:c1:72:80:df:fb:88:82:7d:57:52:e9:
                    4f:51:63:30:94:5a:69:c6:3c:0c:d5:f3:74:30:3d:
                    d8:f4:24:71:8d:f3:78:36:0c:98:2a:f0:33:ae:89:
                    05:b3:d1:aa:26:b6:7f:c6:db:29:df:61:25:09:06:
                    a6:c9:b3:d8:bc:ed:91:5c:0f:36:ec:17:08:3f:eb:
                    2d:c4:a8:59:2f:84:5a:64:47:6a:75:67:93:3d:40:
                    1d:ef:00:f2:d3:c4:69:aa:3f:0d:5f:8c:5e:bc:b2:
                    27:0d:a4:22:8b:4b:79:10:ba:43:c6:13:50:0a:fd:
                    e7:b4:e5:08:36:83:51:65:c2:c4:eb:5e:b5:1d:21:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EC:D5:5A:0F:3B:0A:93:AA:6D:50:1B:D8:E8:64:29:30:FF:9C:89
            X509v3 Authority Key Identifier:
                keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:a1:c7:eb:31:ff:90:c7:48:6c:ef:9f:17:d2:9f:a4:88:
         3c:4e:86:67:9a:50:d3:7c:e8:ca:e3:ef:bb:00:fa:b5:8b:7d:
         f8:6b:52:1f:af:c0:e7:ba:d0:05:e8:de:3b:c2:7d:cd:24:3a:
         e5:86:65:44:df:8e:d9:16:14:c6:d9:37:11:1f:29:fb:01:3a:
         dd:49:d6:32:ba:ba:fc:d5:8c:3d:06:66:a6:13:1d:54:b3:e6:
         fc:71:13:52:b8:71:36:82:70:53:1d:c6:ad:95:24:f4:6f:b8:
         fa:56:dc:16:3d:6c:e7:07:a5:94:56:70:2d:65:ff:92:87:7b:
         83:57:bf:fb:c8:57:85:23:2a:0e:f2:fb:53:e1:a5:64:e6:27:
         7d:1b:dd:4a:5b:19:b4:8d:1e:ab:c2:5a:91:74:8a:5d:37:33:
         19:72:67:45:60:8a:13:d8:ce:20:72:e3:68:58:6b:93:8f:0f:
         f2:55:70:e7:6e:66:a5:98:94:84:10:e3:7b:94:bd:79:3d:1b:
         35:b4:41:60:05:2f:73:1d:63:5b:56:c0:7c:71:1c:34:6a:8d:
         d7:ed:74:8d:32:81:18:2d:7a:04:c2:e7:32:e9:76:3a:d7:64:
         90:cf:00:ef:2d:c5:48:77:7b:81:9b:83:a2:3c:a6:77:5a:5b:
         1d:bb:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:46 2026 by rpki-client