Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File:                     bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier:          uIqRVXwaGiwYO7GN5fCYIpjQeA4Ewxipe/AdS3+I1nA=
Subject key identifier:   09:4C:EC:C4:E6:93:95:0F:22:9A:27:2E:8F:69:D7:A0:06:FF:81:8B
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer:       /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial:       019F9391BD9FA53C7C17FDB92BECFD885CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number:          0193
Signing time:             Fri 24 Jul 2026 10:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:29 +0000
Files and hashes:         1: 4GwizHDiJW34eVbsS1zqAhW5bAA.asa (hash: tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=)
                          2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: p3NHhrlt3zB7hD3ur8fSxMZrKrjZpXkbFqrUbzt4eiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:bd:9f:a5:3c:7c:17:fd:b9:2b:ec:fd:88:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
        Validity
            Not Before: Jul 24 10:00:29 2026 GMT
            Not After : Jul 25 10:00:29 2026 GMT
        Subject: CN=094cecc4e693950f229a272e8f69d7a006ff818b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:f1:6d:e6:48:aa:5e:b5:57:53:95:d9:75:
                    f2:ba:8c:d5:b8:08:0a:77:05:47:ae:de:e6:c1:fa:
                    4c:a2:c4:ca:d9:76:fb:f2:26:fd:4a:38:d3:b0:da:
                    e2:19:4f:43:96:5a:33:a7:6f:2d:f3:47:8b:3a:be:
                    35:4a:b7:77:1b:13:af:32:f6:93:ea:1a:c5:3f:00:
                    05:c2:ce:27:90:1d:ba:eb:53:c1:cb:fc:14:22:b1:
                    e7:92:4a:c7:85:7f:82:e1:b0:54:6c:fe:96:84:a6:
                    9c:c1:f0:4a:06:24:d8:ad:b7:d1:59:de:2d:a5:b7:
                    9b:4f:b4:9d:e9:1b:93:51:37:a7:3d:15:00:3a:15:
                    89:22:67:c8:00:0e:97:8d:65:c1:6a:67:17:11:c2:
                    7b:8c:f7:67:e2:d4:a5:05:f7:2e:40:29:e6:9d:c9:
                    e5:45:8c:29:84:cb:5d:cc:4c:1c:5c:29:48:75:f4:
                    8b:bd:cd:9b:fc:e1:64:ee:c0:d2:33:0d:59:87:96:
                    3f:0a:1d:18:a1:b9:08:a6:b7:96:9d:77:be:5f:d2:
                    75:2b:33:e6:ff:8d:fd:da:70:34:5c:0e:90:d4:90:
                    23:47:d3:28:6f:58:6e:0d:50:a8:be:fe:1a:01:9c:
                    88:e2:0d:3b:43:a5:80:26:ea:9a:f2:e2:df:5a:7a:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:EC:C4:E6:93:95:0F:22:9A:27:2E:8F:69:D7:A0:06:FF:81:8B
            X509v3 Authority Key Identifier:
                keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:37:b2:5d:2f:e7:83:95:9f:ae:dc:30:f7:31:93:7a:ce:c2:
         70:22:3c:71:ac:84:93:da:00:03:72:de:43:1e:6a:18:72:df:
         3f:fd:1d:ff:a9:cf:08:64:6e:73:b3:ac:ad:2a:f8:ca:0a:c4:
         55:4a:68:69:4b:f8:30:11:0d:f3:41:11:e7:89:30:11:89:bc:
         91:36:7a:7c:c5:a6:3c:31:b6:09:28:a2:0d:df:96:e2:78:05:
         ee:94:00:a4:99:68:41:8e:b1:2a:e6:fa:cd:12:eb:8b:63:bc:
         b6:56:b6:29:c9:88:a7:ef:47:4f:e2:4f:0f:15:fb:66:34:ff:
         f4:69:69:30:7c:dd:5b:43:e3:88:b1:e6:ca:f5:92:f5:f6:06:
         e4:c3:59:c9:5e:31:eb:e2:d4:5a:fc:77:9c:22:e1:3d:b0:5b:
         78:51:a3:76:de:90:80:35:ee:62:ea:0d:9e:85:8b:47:bf:50:
         74:4a:29:a1:61:02:2a:dc:63:1a:9f:80:33:49:75:c0:e3:bd:
         f4:1f:2b:65:fb:fa:1e:86:2c:9c:8a:c1:13:18:96:85:d0:cd:
         d4:0e:29:75:34:0b:2b:3c:05:e1:5e:aa:6d:bc:42:18:f9:79:
         67:9d:dd:69:d2:41:64:a9:26:a9:44:34:55:05:d1:24:c0:4a:
         6f:16:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:17 2026 by rpki-client