Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File:                     bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier:          OJxjKKon1FR8mg7phnKf2pLBEpQQ5jmNyAgrE4k3Rwk=
Subject key identifier:   1A:CB:1C:B9:21:40:9D:00:DF:7F:1D:54:C4:C1:B4:F1:50:E1:D4:AE
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer:       /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial:       019F8FEC15CCEF9498116CAE712E1F9755BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number:          0D24
Signing time:             Thu 23 Jul 2026 17:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:41 +0000
Files and hashes:         1: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (hash: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM=)
                          2: TsdNQD-ii_AJJKvRxzoA6e18eOY.asa (hash: MN5JLEUCVUn9RZ966N3nhNhFms77tb7Wz1RFZB7pjz0=)
                          3: _WOzrOOEaw0M1QQC2qKDkPSA1xg.asa (hash: YHkFhzYhWSquY7kwqlUWNVc4nw7ZgDDix9HeI13BrFs=)
                          4: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: 6NoYLn+iU4tz1f0jJKICc49CGjHr/p02N3NrF/G06wY=)
                          5: mUzfsxNnbwnbzrFO6bbwJeRdqc8.roa (hash: WPhw5sZ8yc7m47awa7yiemQPPC2O/BN9I1sjAnPg0uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:15:cc:ef:94:98:11:6c:ae:71:2e:1f:97:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
        Validity
            Not Before: Jul 23 17:00:41 2026 GMT
            Not After : Jul 24 17:00:41 2026 GMT
        Subject: CN=1acb1cb921409d00df7f1d54c4c1b4f150e1d4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:d2:0e:6e:00:37:d3:41:38:69:b5:0a:26:
                    f0:e1:65:e3:fa:ac:81:44:80:e7:fe:a3:7a:d2:ca:
                    89:f8:f0:0f:92:5d:0a:42:2e:67:de:da:87:91:dd:
                    21:2b:5f:88:4d:c7:93:5a:73:11:83:15:25:df:6c:
                    c6:29:e9:be:3e:25:92:c3:fd:c7:b9:cb:dc:b0:29:
                    b8:05:94:11:51:08:3a:fb:00:25:10:ed:9b:56:19:
                    af:1d:c6:1c:e5:58:c5:42:d0:12:d7:4b:ca:5d:7a:
                    18:e0:7d:82:ad:47:48:3e:35:79:96:95:a1:57:9a:
                    65:39:2e:53:43:4e:5a:dc:db:ed:a2:fa:01:51:68:
                    68:f2:4e:47:4f:8f:ed:56:62:18:d7:82:0d:fc:84:
                    8c:fd:b5:24:c6:46:da:3a:dd:5f:a9:18:00:d6:00:
                    ae:76:92:16:a4:7d:0f:9e:36:48:7f:68:58:9f:f4:
                    17:ba:7a:3a:4b:ff:11:da:d5:d9:b5:8c:ff:e9:b5:
                    8d:e7:42:07:4f:c3:a7:88:31:1d:d6:ab:ca:69:5e:
                    fc:77:cc:d8:6f:b0:4e:0a:98:17:da:f7:b2:d3:3c:
                    f3:74:0e:76:8e:cd:fa:08:45:b7:da:4b:70:3a:3e:
                    4a:0e:fe:1a:d2:69:cc:e2:0f:5e:e7:75:95:28:9a:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:1C:B9:21:40:9D:00:DF:7F:1D:54:C4:C1:B4:F1:50:E1:D4:AE
            X509v3 Authority Key Identifier:
                keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:37:4b:3e:1b:43:86:cb:4a:74:e4:d9:5c:b9:fd:b5:95:56:
         96:3d:7e:ca:d7:76:23:25:54:f2:49:76:97:05:ef:b8:62:f6:
         4c:05:4c:fd:8e:8f:4d:ef:35:a5:cb:52:f8:f2:e6:6f:59:e0:
         22:b8:a8:39:1f:16:e9:bf:70:b6:0e:c3:e5:b4:43:d6:7c:fa:
         10:45:d3:47:44:c5:a6:0c:53:cd:d2:ab:ad:79:f8:19:a6:00:
         80:ff:50:0c:ca:4c:7d:b1:66:de:fb:f0:85:eb:79:1f:5a:11:
         13:67:2c:83:10:35:04:b7:2f:a7:f6:f8:11:25:fa:2a:c7:8e:
         f4:6f:64:93:68:c5:d6:e1:b0:37:05:4d:6b:bf:47:12:d4:40:
         8d:bf:d1:df:a1:ab:09:1c:61:c1:67:39:fa:c5:ef:aa:92:36:
         8d:a9:76:15:90:28:72:0c:c0:b7:52:6f:18:ca:30:ba:42:d9:
         42:ac:71:57:ac:59:59:63:92:e1:7f:b9:13:e3:67:9d:46:10:
         37:a6:cb:d2:39:d3:7a:c8:5d:81:86:bf:8f:b1:95:03:1c:0d:
         5f:bf:e7:a1:d4:0b:67:72:07:d6:b6:0e:cf:5c:f4:de:19:61:
         34:4a:5c:cf:e8:ab:32:50:b6:a2:e7:e7:4d:64:01:27:e5:6e:
         73:75:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:49 2026 by rpki-client