Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File:                     bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier:          F2IKjzbK/P8S5ti2Fp7DbuMvMVrhhcOt+Sq+NYV+lSk=
Subject key identifier:   38:D3:78:31:E2:FE:1F:B8:AB:75:26:82:D5:D7:EA:E9:4F:5A:29:DB
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer:       /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial:       019F8FECAE8CA34858EA48811F5FA1C9E9B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number:          0274
Signing time:             Thu 23 Jul 2026 17:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:20 +0000
Files and hashes:         1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
                          2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: 34wbRup4R2JgZyVzDjCTANlWpPlQEQMgmWxGgixLjO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:ae:8c:a3:48:58:ea:48:81:1f:5f:a1:c9:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
        Validity
            Not Before: Jul 23 17:01:20 2026 GMT
            Not After : Jul 24 17:01:20 2026 GMT
        Subject: CN=38d37831e2fe1fb8ab752682d5d7eae94f5a29db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:c3:8a:17:91:d5:58:b0:a5:16:95:82:b1:
                    8e:c9:9e:f5:86:f8:2f:7b:81:34:3e:6c:d3:06:2f:
                    a3:34:fe:ce:26:43:3f:ef:11:90:22:6d:8f:be:5f:
                    9d:a4:23:d3:81:12:52:f5:cb:2e:06:38:6d:62:cd:
                    23:2f:a5:4e:2a:f7:a2:7b:f2:99:fb:5e:1a:a7:71:
                    73:0b:d8:da:5c:c4:92:19:ad:fe:39:4d:f4:7c:98:
                    ce:83:64:58:f0:e1:bd:3e:e7:d6:e9:1f:bb:0f:c6:
                    c4:2e:5e:35:89:21:50:e1:77:c3:c5:c8:6f:fb:cd:
                    d5:6e:9b:38:32:0d:89:97:9b:ca:91:1d:35:80:78:
                    1d:81:66:13:d7:a7:7f:d5:0a:61:2f:80:a2:1e:5f:
                    00:4b:c9:e8:15:02:49:22:6c:69:c5:42:63:db:a6:
                    25:e2:8b:0e:48:7e:7b:c2:39:2b:cb:70:6f:e2:f9:
                    6c:81:58:4e:5b:a1:3b:b8:58:36:dd:b2:ce:b7:d7:
                    97:4e:5a:80:54:af:b3:33:20:ee:8e:25:a0:34:6a:
                    f3:0f:3f:65:1c:1e:5d:6e:fd:fa:b1:9a:41:3a:69:
                    1f:dc:97:23:76:ca:3e:5f:8e:af:f5:92:95:ba:eb:
                    60:11:e6:9b:d1:02:ce:21:b1:eb:77:62:c0:9c:b9:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:78:31:E2:FE:1F:B8:AB:75:26:82:D5:D7:EA:E9:4F:5A:29:DB
            X509v3 Authority Key Identifier:
                keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:2e:65:c9:c9:17:35:be:9a:35:36:72:77:3e:33:27:01:
         1b:eb:23:ce:cf:c4:0a:89:b4:a1:a9:f3:7f:10:66:33:cc:a6:
         b4:08:62:32:89:14:93:b8:4b:84:7b:a0:ea:b2:94:c7:c3:fc:
         53:71:b3:6c:ca:9b:bc:6f:19:7e:4b:34:3a:37:2a:96:8d:f4:
         87:9b:a6:df:76:56:c3:eb:32:1e:f6:61:e6:0f:e7:e7:b6:2d:
         e0:de:a3:d7:94:57:4b:cc:db:5e:29:15:a8:1a:ef:55:c5:e1:
         93:c9:16:62:b4:8b:c2:b8:14:dd:fb:39:35:b1:59:2c:97:ee:
         22:94:3f:30:d8:9b:46:16:63:bc:d8:c9:ad:81:93:c9:84:d0:
         07:49:ff:da:cd:3f:28:97:60:c5:0d:f4:73:05:b2:f4:2f:d5:
         1b:c3:84:87:e5:91:7c:e7:84:9f:a5:0d:c2:dc:fc:f6:54:c3:
         cb:14:3c:8e:d2:57:ce:c2:38:56:49:02:44:e2:b0:b1:22:61:
         76:70:23:e6:28:db:62:6e:ed:ea:21:4f:9b:91:ba:eb:65:23:
         ad:77:c6:6e:4c:c9:5d:55:86:98:b1:d1:9f:de:68:fb:f7:9f:
         b7:9c:97:d3:9b:17:e4:74:46:20:6d:02:0a:e6:f2:8c:ce:b0:
         76:5d:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:35 2026 by rpki-client