Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          Z78ljqKhUG87bcyUAnQPiYor6wI+qnkTcp5ZZ/1YjQE=
Subject key identifier:   CE:13:98:F6:B7:C8:EA:DA:98:AD:C5:EE:22:FA:36:0A:95:E0:C4:69
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       019F92116E567ED4A3BE08C1BD627C6B415B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 03:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:43 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: qye18C0+Rp2xGOQRO0maffGCpRbvQgytszgdh4hH9QQ=)
                          2: JKANABqd6E0fTlpYiraRYYJi5Is.roa (hash: kpgkNjTCyYCDSV5Bfn9GBPVaDYU8s9QPiJ/Y5QzbmG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:6e:56:7e:d4:a3:be:08:c1:bd:62:7c:6b:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: Jul 24 03:00:43 2026 GMT
            Not After : Jul 25 03:00:43 2026 GMT
        Subject: CN=ce1398f6b7c8eada98adc5ee22fa360a95e0c469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:02:e2:eb:bb:24:dc:f6:de:be:de:35:ae:
                    85:f9:83:b4:59:61:df:ac:0f:f2:f3:a6:68:b8:5d:
                    04:33:0b:a0:ba:79:42:14:83:ee:9e:ca:07:22:cb:
                    6d:35:ed:09:af:d9:b3:f4:17:c8:7a:7f:4d:d0:e1:
                    ba:a4:87:2e:01:2c:c7:f6:5c:58:c4:b9:34:b5:26:
                    63:8a:68:3b:e2:f7:c6:9c:c1:6f:91:13:4a:80:53:
                    cf:9c:ef:a0:37:d4:e0:86:d9:42:de:fc:e8:66:54:
                    7b:c5:ec:b9:85:6c:c7:e7:7d:2c:72:d0:a0:4f:82:
                    ed:0f:5e:27:3f:48:f0:f7:b7:9b:21:ad:01:55:20:
                    33:2f:33:b2:90:d3:49:e1:18:1a:06:60:09:f1:ea:
                    aa:3c:cd:97:f4:4d:bb:05:5a:59:77:03:ee:53:ac:
                    9e:00:a1:0a:83:0f:e5:db:ff:11:7f:52:ff:ec:bf:
                    83:7a:ab:06:e3:57:ff:84:2e:b7:99:6c:94:68:21:
                    01:86:17:2c:52:02:5e:94:d9:f3:6b:d2:ee:1c:b6:
                    9d:50:ae:9e:89:b4:a3:a6:32:47:d6:cf:9b:47:dd:
                    18:f7:98:b9:de:1c:8c:22:39:fa:af:6c:93:d3:4a:
                    df:20:c4:ba:88:3f:b9:fe:4e:fe:a5:e0:fe:10:b4:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:98:F6:B7:C8:EA:DA:98:AD:C5:EE:22:FA:36:0A:95:E0:C4:69
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c5:b8:7a:e9:31:7f:ac:c3:54:e2:d9:b0:f0:20:99:66:98:
         e8:d5:15:03:74:74:03:71:4e:57:2e:33:18:49:c8:a5:b7:a2:
         a8:34:79:24:63:7b:2f:d6:be:97:4e:42:6d:66:23:6e:2c:21:
         83:19:81:d4:19:eb:c1:69:33:03:b3:29:26:99:00:3d:f1:d4:
         41:22:6d:77:b1:fb:59:b1:7d:de:62:e9:6b:72:34:f9:33:cc:
         dc:ba:0c:48:53:c9:6e:0c:66:b9:f4:81:dd:85:69:a4:51:cc:
         50:47:6b:a6:95:bf:7a:78:b6:fe:17:e5:f3:af:01:82:36:27:
         7f:3e:18:74:a2:97:44:ae:81:f3:31:75:ed:65:b2:71:d5:e3:
         75:96:b3:06:e0:6c:fe:a5:97:ab:a2:19:8a:56:1e:08:8f:a8:
         f5:1c:a3:8d:5b:f3:90:44:ed:9f:5a:c9:01:72:a3:b8:5a:66:
         eb:e0:fe:57:a4:e0:42:c2:61:54:cd:92:b6:ac:5a:91:18:60:
         92:c4:5c:fd:83:e6:64:e3:13:95:6e:e6:95:0c:45:65:b7:28:
         22:88:49:d3:1d:7e:d8:bd:c6:f5:b2:12:0e:ee:02:73:f1:bf:
         92:ac:76:20:4b:c3:49:83:d2:48:ef:a6:5f:d8:90:52:84:61:
         52:1d:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:44 2026 by rpki-client