Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
File:                     BNhWAsroYaFGaoWobO-1rLA4qxI.mft (raw, json)
Hash identifier:          X0NGuUDXrFOrKZZaeIxYi+RKLxt3sPBMy4KB5Pwg9mw=
Subject key identifier:   92:CA:EA:59:83:72:E9:BB:2A:25:56:EF:C6:7C:59:E6:19:DB:25:9C
Authority key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Certificate issuer:       /CN=04d85602cae861a1466a85a86cefb5acb038ab12
Certificate serial:       019F905A7C161039231DE32274E3B2A6CBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
Manifest number:          C6
Signing time:             Thu 23 Jul 2026 19:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:16 +0000
Files and hashes:         1: BNhWAsroYaFGaoWobO-1rLA4qxI.crl (hash: 7Y8qkh59Vo7Qa75JImd01iMbHe/RoCBu+bFVCicylyA=)
                          2: W4Jd97wklYPbtC1yRMX3CKRKmZA.roa (hash: 1Sm8Xnqv2nrDhx2KEVkLvXTxHHoxXzQJhfn447Uj43I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:7c:16:10:39:23:1d:e3:22:74:e3:b2:a6:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d85602cae861a1466a85a86cefb5acb038ab12
        Validity
            Not Before: Jul 23 19:01:16 2026 GMT
            Not After : Jul 24 19:01:16 2026 GMT
        Subject: CN=92caea598372e9bb2a2556efc67c59e619db259c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:26:d7:c4:77:88:0e:90:b5:fb:a1:c2:ca:
                    07:7a:ec:79:b9:c0:cd:27:00:e9:61:70:7b:6e:0a:
                    88:5a:45:fe:0a:d6:f5:ca:b5:9a:05:1c:6c:bd:12:
                    80:55:cd:da:f2:f7:da:c4:54:fa:02:c2:c8:1a:dd:
                    d8:25:01:e1:46:6a:35:f7:74:84:a4:01:dc:07:a2:
                    07:c0:a8:4a:0d:97:fd:39:2e:bd:de:48:40:d5:4f:
                    e5:e7:3d:f2:90:8d:27:57:0e:68:51:c2:10:da:1f:
                    b8:cb:9b:e2:f3:88:8b:ba:65:fe:bf:7a:43:32:9c:
                    ed:6f:29:a6:5c:2a:e7:66:e9:f7:33:a2:79:d0:37:
                    de:a4:2d:ab:a9:3c:86:a3:fa:f6:6d:26:41:18:66:
                    87:87:ab:f4:d4:2e:4e:4e:47:7b:70:62:4d:c7:84:
                    5e:4d:18:56:de:64:27:89:09:16:6e:0c:8f:45:cb:
                    3a:01:a4:eb:b6:e4:af:87:d9:13:21:36:15:f3:f6:
                    06:cf:ab:46:ff:57:bf:cb:71:73:14:cc:47:a1:6c:
                    5f:cf:ab:d5:66:76:c5:54:12:0f:5d:1c:0a:45:b1:
                    de:f5:ec:74:eb:e5:53:be:16:a3:d2:8a:5e:a5:c7:
                    94:53:c5:b8:40:48:e3:b3:bb:63:46:a8:70:0f:83:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:EA:59:83:72:E9:BB:2A:25:56:EF:C6:7C:59:E6:19:DB:25:9C
            X509v3 Authority Key Identifier:
                keyid:04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:f7:cf:11:34:68:8a:8c:af:fd:3f:77:c1:47:6c:4c:ff:
         b0:a2:33:a9:7b:d6:e1:2e:e9:29:ac:e4:ff:8c:da:90:84:6d:
         8f:bf:50:a8:bb:25:a3:37:aa:5b:d9:a6:53:33:48:04:c1:75:
         b3:85:2b:88:6a:de:8d:53:e0:7b:b0:6b:dd:e3:fb:7f:e8:b0:
         95:d0:2d:b4:08:93:34:5e:84:d7:30:69:8e:75:50:5e:8c:a3:
         9a:39:ab:d6:66:25:13:57:08:14:5e:3c:20:29:73:2a:3c:77:
         36:33:76:e7:eb:a3:ce:49:28:de:92:75:c6:98:ea:36:15:05:
         9b:39:44:cb:54:01:5b:82:2e:a8:1b:19:38:e4:8b:3d:03:ae:
         f4:3e:e1:99:5b:2f:e4:96:89:34:3f:27:a5:26:12:b2:f0:1c:
         f4:f4:ef:1c:ae:5c:59:f2:10:5e:74:b5:03:d4:20:e2:58:fc:
         7a:86:a2:17:9a:2c:ba:fa:4c:2a:ca:dd:99:6e:03:6b:d2:53:
         85:21:cd:fd:3c:2c:7d:5b:f0:0e:d6:c7:b0:d0:c4:c2:30:04:
         fa:a6:ea:ac:f0:ef:bd:27:b7:56:4a:94:5f:c3:bf:4e:62:82:
         93:e1:49:0c:3f:99:4b:41:74:7c:cd:6e:55:54:c7:28:05:ce:
         cf:3b:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:37 2026 by rpki-client