Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File:                     BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier:          5j12kxk6Z+nX89G7dTnDOF4BN3MEn4H9OR8bG5/0RcU=
Subject key identifier:   32:56:27:95:65:9C:48:D5:31:7F:29:01:E3:B8:A2:13:4B:A8:74:92
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer:       /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial:       019F92ECF95E8BDF7E80B2AB9F097AD6020C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number:          101F
Signing time:             Fri 24 Jul 2026 07:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:31 +0000
Files and hashes:         1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: XHNTs/0Xo2eJT9GzOa+0XvnQ7ctg/m6qaya1QIMT2G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:f9:5e:8b:df:7e:80:b2:ab:9f:09:7a:d6:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
        Validity
            Not Before: Jul 24 07:00:31 2026 GMT
            Not After : Jul 25 07:00:31 2026 GMT
        Subject: CN=32562795659c48d5317f2901e3b8a2134ba87492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:e6:7a:eb:28:52:fe:12:75:6e:53:30:90:
                    f3:1d:66:cb:cf:ce:30:71:21:f3:12:29:19:3b:ed:
                    35:aa:67:e2:2d:94:ab:76:be:25:69:b3:c1:7d:81:
                    0b:92:46:65:4f:d1:8c:79:08:ab:38:3f:cb:76:4f:
                    86:98:0f:54:2c:14:42:78:62:4f:c9:1e:a4:50:de:
                    73:7f:45:a7:7f:8e:ba:de:75:37:4d:cd:6e:32:36:
                    80:9f:14:2e:83:76:dc:72:eb:c2:d3:29:dc:75:35:
                    96:f7:22:f2:e7:f2:61:f0:e5:64:5c:64:ec:f7:2b:
                    39:19:03:27:8f:5f:e1:e5:94:c2:cd:89:3a:5d:f8:
                    d7:a3:f9:4e:49:b8:8f:e2:93:4c:77:5d:af:47:ae:
                    19:39:27:bd:78:00:86:cf:57:f1:c6:bf:2c:c2:72:
                    25:7e:dc:08:c5:88:b7:eb:c6:58:34:e2:b2:2b:6a:
                    18:c6:e1:dc:d5:9d:96:5a:5c:c8:2c:86:02:aa:b1:
                    c0:4b:d7:34:02:ba:22:99:2b:68:19:a6:1b:a0:5a:
                    61:dc:21:81:52:89:6f:a2:85:05:5f:46:17:40:b5:
                    cf:23:6c:35:df:d9:29:a6:6b:f7:d8:e9:3a:4f:04:
                    63:6f:8f:8c:c6:85:00:5b:57:46:33:33:42:bf:a5:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:27:95:65:9C:48:D5:31:7F:29:01:E3:B8:A2:13:4B:A8:74:92
            X509v3 Authority Key Identifier:
                keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:46:6f:1f:e3:57:22:ec:41:8d:60:21:f3:65:a6:8d:5c:7e:
         39:68:1c:db:7d:0c:f0:17:ff:44:4b:9d:56:3a:c0:3d:80:2c:
         10:bd:7a:2f:d6:83:f7:fb:7c:2a:49:a7:c8:97:42:40:9b:fc:
         73:a0:88:de:73:fd:6a:49:d6:dc:84:b9:da:3f:6d:3f:e8:07:
         89:3d:d8:3c:9c:37:e6:98:20:b7:14:fd:50:28:49:f6:e9:71:
         4e:07:ee:00:2e:60:75:2b:0d:d2:d8:2d:8e:16:a9:e1:48:42:
         8e:c2:d2:49:36:76:df:a3:60:c7:c8:8d:4f:83:c4:0a:28:80:
         b4:b7:41:fb:1b:93:e1:99:ba:5d:22:2f:6d:d7:20:ae:84:6d:
         cc:32:cd:14:22:7f:76:dc:d1:d6:18:7b:a1:c5:6d:e2:a5:8b:
         ec:8a:f4:81:63:5a:00:68:45:2f:de:2b:61:2a:72:e0:6c:5a:
         3a:1c:36:46:ba:63:d1:03:ce:87:e4:d2:18:83:46:c2:28:7a:
         de:a2:73:fd:05:f8:83:fb:4c:58:0c:f0:5b:15:11:b4:2a:04:
         a7:36:47:7c:ce:00:52:2a:88:56:af:10:3e:ed:95:6f:69:d6:
         b7:5a:6f:7e:f8:62:ea:14:a2:73:9b:74:13:a9:b3:9f:19:0d:
         99:14:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:11 2026 by rpki-client