Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File:                     Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier:          cwSHwk1dgATkG6MGIps+m6n2ReHkvJDTp48QUMJazfo=
Subject key identifier:   FA:AD:9F:F5:42:CB:1F:07:02:05:D0:60:C6:B5:CE:EC:63:75:07:A7
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer:       /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial:       019F91A3B7DECD17A41490E5755CED6D7D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number:          05EA
Signing time:             Fri 24 Jul 2026 01:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:53 +0000
Files and hashes:         1: 5OH9MU3n5jnbsFQihGMju6cfMP8.roa (hash: ebl8kR+bOvw+VlEIFx9Aju1goGA4RN7+C5LqHyAwZJ4=)
                          2: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: rKMtJeiEJ12MUKtdqIVxDwgIEALk5TukYdqBf/VtLT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:b7:de:cd:17:a4:14:90:e5:75:5c:ed:6d:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
        Validity
            Not Before: Jul 24 01:00:53 2026 GMT
            Not After : Jul 25 01:00:53 2026 GMT
        Subject: CN=faad9ff542cb1f070205d060c6b5ceec637507a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:43:14:a2:d0:ba:ac:d5:40:85:18:34:d0:
                    82:9e:67:62:14:f0:60:9b:1a:32:bf:19:88:d3:19:
                    4b:bb:99:c8:66:52:a3:0c:e2:b2:80:3c:f1:a1:23:
                    61:f8:8d:b2:77:7b:68:1b:05:8f:8c:a8:a3:b9:d8:
                    5f:8c:89:53:90:e6:be:2d:96:8f:98:fb:be:13:c4:
                    d3:88:9a:94:f6:9f:9e:dc:dd:7d:82:de:94:d9:89:
                    2a:f9:75:be:ec:51:43:8b:db:67:03:ba:21:a1:5d:
                    e8:e4:d3:e0:3e:f8:4f:0d:c5:b2:b0:31:39:10:a8:
                    98:6f:d9:fb:ea:4f:66:e0:60:31:fe:58:2d:ca:7d:
                    a8:aa:96:4e:ec:cd:71:7d:b5:fe:4d:80:39:4c:7f:
                    0d:7e:3b:ca:b6:42:42:60:01:81:f8:2c:4e:0f:90:
                    4b:55:da:00:61:0a:5a:02:52:21:1d:e6:44:40:f2:
                    11:4c:d4:7b:6b:2e:c5:c5:49:82:e2:30:25:16:31:
                    69:cf:5b:ee:ab:27:69:95:2a:9e:94:f5:f9:cf:d7:
                    44:f0:b4:8f:ac:f1:14:d6:05:2b:15:76:ce:1f:ec:
                    f7:83:42:81:9e:cf:42:a7:e2:e6:22:54:29:69:c2:
                    d8:cf:2d:1c:6e:1d:34:9e:d4:52:d5:cd:b8:67:43:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:9F:F5:42:CB:1F:07:02:05:D0:60:C6:B5:CE:EC:63:75:07:A7
            X509v3 Authority Key Identifier:
                keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:45:e8:be:c8:51:45:a8:ac:2b:96:c9:58:c5:a0:b6:b5:fb:
         d2:f2:83:c5:f1:db:30:33:74:42:39:b9:cc:bd:ee:ff:51:3d:
         d6:49:d5:1e:70:21:03:d0:94:6e:c1:3a:4a:48:6d:4b:fa:c9:
         5f:56:a5:64:f7:d0:26:d3:bf:d6:8d:61:bb:2b:43:08:70:e7:
         b9:1f:77:d7:45:3e:6c:49:96:af:f6:32:c8:ca:37:e9:0e:ff:
         38:2e:54:ea:db:af:de:80:50:c8:56:9a:4f:f2:8f:d2:b0:86:
         52:bb:43:f4:df:8b:3a:2b:3d:dd:04:92:d9:08:a4:32:c1:5a:
         86:40:ec:e7:19:15:4d:f7:b4:ce:bc:8b:92:ab:e0:b7:30:3b:
         a1:7b:4f:14:0c:79:3d:e5:6a:d3:e6:f1:9a:22:5b:a0:2c:9f:
         90:13:fc:8e:a4:30:3a:d6:b3:e6:0e:67:78:25:20:03:56:ac:
         fe:c8:03:fc:4e:5b:20:8b:18:53:a1:55:da:41:03:a3:25:cb:
         6b:ce:45:ca:b6:c6:66:05:2a:85:9b:d6:4b:ca:ca:ea:a4:f1:
         e6:71:e9:cd:e1:26:1a:d4:4e:38:bd:6f:72:ac:5b:f4:1d:9b:
         12:13:ac:96:bd:ba:10:65:c5:8a:1d:90:e1:0c:7d:a5:e4:89:
         93:66:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:07 2026 by rpki-client