Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File:                     At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier:          wOrBTNBLDb8UBZVoDB3ukBrxIz8yNGStigejjqa83m4=
Subject key identifier:   9E:D8:54:DA:00:51:4C:31:00:D6:E4:93:06:C6:A3:91:1C:5F:03:BE
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer:       /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial:       019F90FE9F121AF6C7316D7F12E99000E8A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 22:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:33 +0000
Files and hashes:         1: 7iEg611J16f4IwtY1Bg8M_Iq9WY.roa (hash: FHpub4verjY1xRKEEG446sUVBziKt0oMgxlHwjNCz7E=)
                          2: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: kuG1tyxu3bmEDY4AgVZrJGKXo5aod3WVv/9vyO2zcVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:9f:12:1a:f6:c7:31:6d:7f:12:e9:90:00:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
        Validity
            Not Before: Jul 23 22:00:33 2026 GMT
            Not After : Jul 24 22:00:33 2026 GMT
        Subject: CN=9ed854da00514c3100d6e49306c6a3911c5f03be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:a9:fd:26:71:0b:b0:18:41:a8:bc:81:fd:
                    c0:ee:9e:20:22:92:da:8f:6c:c0:8f:31:ad:9e:81:
                    c0:a4:05:16:fe:42:fb:77:41:dc:86:71:09:30:6d:
                    ba:7f:f6:b9:cc:f0:3f:4e:92:23:5f:6a:d0:ab:aa:
                    7e:6c:be:ef:26:71:89:3d:b4:c1:de:a6:e5:11:98:
                    6e:1b:5f:04:47:b5:20:bd:03:f4:14:02:19:40:65:
                    f9:c2:93:db:5a:91:e7:99:47:c6:9d:4b:c5:8a:b6:
                    b2:3a:ad:75:5b:64:eb:ca:9b:ad:85:77:b1:1a:a9:
                    46:19:07:70:6e:a1:01:b0:66:2a:28:8f:ed:dd:74:
                    3b:88:9f:8a:c7:6b:d6:50:36:9f:a1:58:2d:1e:80:
                    b8:0e:ee:2a:ca:13:79:68:d7:a0:09:94:7d:f4:64:
                    55:c6:a8:5a:76:91:f5:f6:25:46:b6:49:d3:08:cc:
                    15:4c:ac:4e:a1:0a:0b:3c:b7:0e:72:c7:fa:cf:bd:
                    6f:4e:34:4b:e7:f7:09:bb:12:d2:af:92:41:9d:ad:
                    ed:f7:40:3e:21:e1:ef:c7:3f:f5:5e:78:71:ce:23:
                    25:c1:c5:55:30:85:0d:98:23:47:a1:d0:b6:d5:f4:
                    59:62:a5:32:63:88:cf:5e:70:f2:a4:62:68:e7:d0:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:54:DA:00:51:4C:31:00:D6:E4:93:06:C6:A3:91:1C:5F:03:BE
            X509v3 Authority Key Identifier:
                keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:2e:08:90:da:92:5f:4c:fa:0c:a3:92:df:9c:8e:3c:be:
         90:a9:65:f6:d8:1d:13:3c:1d:1a:0c:da:3c:7d:7b:82:a5:8b:
         e1:c0:47:41:a5:76:5f:f6:d0:08:5c:8e:38:05:1c:89:73:ad:
         c2:85:ef:8b:d6:e0:d4:2c:87:dc:eb:41:0d:ea:df:7d:e4:c3:
         b0:ed:3f:94:1f:be:bb:19:7d:d8:b8:a6:6b:20:89:46:77:ec:
         64:c0:99:97:f1:b1:8e:fc:7c:b4:73:47:57:cd:70:99:5b:4c:
         27:32:27:c2:76:46:22:ed:4c:32:9d:e0:bc:58:ea:03:86:f7:
         f7:a4:dc:fa:78:a8:df:7a:1c:39:f7:8d:91:6e:3d:f8:54:8d:
         3c:0c:8b:06:db:34:49:94:d0:f0:21:7a:77:e8:36:c0:26:d0:
         42:94:a5:03:f4:3f:1d:8b:eb:83:01:f5:4b:23:08:a7:5c:e2:
         61:a1:6d:15:f4:94:b9:d3:3d:55:92:b0:3f:c8:8f:33:b4:f0:
         99:c2:89:c5:4a:e9:d8:8c:6d:9e:55:09:20:87:cc:f6:ba:e2:
         45:b4:f5:14:79:46:b7:4f:0f:f5:81:b3:2a:1c:74:b0:23:bc:
         94:e8:66:3e:c1:f9:f0:f0:bb:bb:08:19:4c:a6:cb:83:46:2c:
         78:af:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:24 2026 by rpki-client