Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          /rCEs9VIFyrFFLiFvapQ6HJH4pyvWTfBhLyiOPN92TU=
Subject key identifier:   06:89:CA:1F:15:0B:A7:B7:EB:8A:A2:82:0C:33:11:C7:32:55:1B:27
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       019F92489DBA50BD9631666B8A571023E570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          04CE
Signing time:             Fri 24 Jul 2026 04:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:00 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: XFk0RIjL9m6qOW+ofyYyNp2KryEP30hrbmcl6SjfRHI=)
                          2: gZN0ubYqOfKHhkHWa3AckTvwRLw.roa (hash: tkY9Znd59Usph4Tm3soVWPi523DI015PBAn20gIz7Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:9d:ba:50:bd:96:31:66:6b:8a:57:10:23:e5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Jul 24 04:01:00 2026 GMT
            Not After : Jul 25 04:01:00 2026 GMT
        Subject: CN=0689ca1f150ba7b7eb8aa2820c3311c732551b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:ca:83:c3:70:25:f7:10:c7:37:da:82:d6:
                    ba:28:04:61:77:ec:36:7d:5b:97:88:2d:7d:dd:1f:
                    49:65:5d:4e:c1:6a:92:31:90:d4:a1:9f:6f:dd:47:
                    bb:18:dd:fe:c2:c8:6a:09:77:c1:54:8b:d3:49:6b:
                    70:97:13:72:fe:c1:bc:e8:66:48:21:7b:31:4c:19:
                    11:ad:2d:d0:1b:7c:9c:fd:49:66:c1:15:0f:3f:56:
                    4e:ee:70:4e:40:bc:b6:99:32:e6:af:57:0c:5f:b7:
                    9e:81:5d:39:e2:ed:e3:c6:8d:c8:f4:17:44:bf:4f:
                    fb:d4:4c:b9:2d:45:12:6b:dc:b8:c8:43:ee:62:64:
                    dd:ed:9d:e8:4b:87:ad:f7:1f:d3:fb:d7:ac:4d:53:
                    4b:89:a5:13:54:2e:08:1f:1e:a4:f9:d3:40:0c:59:
                    e5:55:35:87:d4:3a:21:82:0d:e3:a6:f1:87:93:ce:
                    d3:92:19:78:28:a7:93:3a:fa:f1:39:c6:1a:13:aa:
                    45:1e:bf:15:e2:5e:79:6a:0e:c9:99:a4:e9:16:6a:
                    c1:82:62:ed:5c:24:24:95:a9:3c:73:0e:f4:14:b4:
                    a6:be:30:7d:a0:88:d5:9c:9f:22:e8:30:99:10:c4:
                    90:7b:2e:a8:45:71:20:b7:3e:4c:dd:ae:2e:98:f4:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:89:CA:1F:15:0B:A7:B7:EB:8A:A2:82:0C:33:11:C7:32:55:1B:27
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:49:4d:43:06:78:1b:fb:90:30:a0:7b:af:d7:a2:02:2e:7f:
         96:69:48:e4:b8:9e:69:45:fd:80:ef:b9:33:42:cb:55:d0:c7:
         41:26:7d:f3:57:39:87:8a:27:97:92:20:a2:3f:27:84:c9:fa:
         95:47:5d:93:77:ac:ac:c1:e5:03:fb:be:c7:63:da:c5:2a:38:
         4c:ff:26:a4:a4:dc:68:77:c6:46:c4:49:97:18:32:0e:64:59:
         8e:92:6c:a6:85:5e:f6:72:85:98:63:32:3a:cb:81:af:cc:13:
         47:2b:18:0a:f9:dd:90:4f:a2:7e:2c:6d:7e:ac:54:41:0d:2a:
         6d:fe:27:7b:7b:70:cd:5b:d4:a0:a4:a6:27:1c:9d:17:64:07:
         85:1e:80:73:6e:87:a4:29:0a:d9:35:77:1c:09:46:86:b0:0f:
         b1:a9:8f:7d:39:c3:fa:58:74:ab:b5:35:ac:95:9a:61:15:07:
         7b:b6:7c:89:e9:24:90:4d:46:0b:e1:38:2f:ad:84:ef:fc:56:
         39:ee:00:eb:a6:fc:b0:a2:63:fb:a0:55:8e:fb:ed:5a:67:98:
         cb:fd:fa:27:97:e9:6b:0f:c7:a6:90:64:7c:46:cc:cb:9e:77:
         8a:87:92:23:3e:3f:93:93:32:58:1e:32:b4:87:02:b0:b7:ce:
         50:e8:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:56 2026 by rpki-client