Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
File:                     bbMKQaam8hqbLdflhWog1bXv_hw.mft (raw, json)
Hash identifier:          PKL2pEpprkSKTJVc0FLrkYmRgVGXp9QgJ1oF7FG2TwU=
Subject key identifier:   F8:19:46:C9:E9:A7:F7:F0:DB:FC:CA:21:21:1C:D7:28:0B:50:8F:B7
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Certificate issuer:       /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial:       019F905A05B84D13B706F769A789AE51FB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
Manifest number:          0237
Signing time:             Thu 23 Jul 2026 19:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:46 +0000
Files and hashes:         1: HxyJ0VIuo-5QCdby3h9utQPfqr0.roa (hash: y5QqmXh4WKxc3YfWMLRJZuc5ufgudUqOp7HmDc/F9MU=)
                          2: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (hash: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU=)
                          3: bbMKQaam8hqbLdflhWog1bXv_hw.crl (hash: 0DET5Ao2DRKf4n36adIOcr6RgAnexFXSusLerCryppo=)
                          4: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (hash: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ=)
                          5: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (hash: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:05:b8:4d:13:b7:06:f7:69:a7:89:ae:51:fb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
        Validity
            Not Before: Jul 23 19:00:46 2026 GMT
            Not After : Jul 24 19:00:46 2026 GMT
        Subject: CN=f81946c9e9a7f7f0dbfcca21211cd7280b508fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:d6:ed:af:83:c8:c4:c0:08:eb:69:eb:ea:
                    f4:6e:32:0b:2e:52:49:b3:7c:35:7c:0d:c1:54:94:
                    88:01:d7:e7:81:a0:3e:f6:24:37:2b:78:74:27:21:
                    b1:48:0e:4d:0a:be:68:51:29:d5:f6:4b:37:3a:49:
                    9b:cd:e6:a8:fb:dd:e6:17:4f:60:37:88:a7:35:7c:
                    1b:ae:f5:10:46:26:53:cb:cd:77:0e:f7:10:11:9d:
                    dc:a2:d0:ff:0e:24:75:53:03:01:18:88:1f:f9:f2:
                    c6:11:e2:0d:b8:2f:00:c1:b5:99:d5:da:85:29:3b:
                    d5:0c:e7:cf:1a:34:51:a9:03:f0:a5:57:11:40:10:
                    20:3a:d6:c9:b0:d8:43:ed:89:f7:a7:6f:94:2b:1a:
                    69:7e:c9:61:26:bb:fe:c9:08:01:cc:19:cc:59:d4:
                    da:e0:b3:4d:3d:21:7f:0f:cb:60:1a:e6:52:ad:6b:
                    a7:48:88:38:7d:63:73:d2:c1:d9:7a:fc:98:68:39:
                    5e:e9:d1:f9:75:de:1f:db:ad:82:5f:79:df:71:08:
                    af:e5:43:a0:f5:33:47:1a:80:48:76:1c:25:91:b4:
                    1c:af:75:3d:2b:7f:ac:27:b1:ee:e5:c7:0b:e3:c9:
                    d3:f0:92:56:3c:00:09:7c:d5:34:37:00:11:e3:ce:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:46:C9:E9:A7:F7:F0:DB:FC:CA:21:21:1C:D7:28:0B:50:8F:B7
            X509v3 Authority Key Identifier:
                keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:31:a1:86:dc:9b:5a:33:fa:90:3c:92:a4:56:bc:69:7d:1c:
         1d:d3:d6:db:fb:92:a1:46:3d:9e:67:e5:aa:61:e8:87:27:ac:
         1f:85:39:95:97:7e:c9:82:43:8e:17:df:89:d8:04:da:44:0d:
         ea:5b:33:e9:36:d2:8a:a4:4d:4f:92:3a:5b:57:4f:d3:5f:ea:
         31:18:b7:88:22:7e:99:c7:77:01:ee:40:4a:98:95:e4:ad:25:
         a9:16:7e:14:17:27:bc:de:58:95:c6:c6:1b:e3:b3:3a:f4:a1:
         90:35:cb:5f:56:4d:97:50:af:36:1c:06:55:ac:40:f5:bf:30:
         18:bd:04:9e:29:8b:63:d2:bc:68:4b:13:7b:6a:4d:bc:51:c9:
         f8:e7:62:5e:3f:36:32:3e:53:b9:41:be:42:71:cc:48:5d:b1:
         42:94:0d:f3:9a:54:62:93:d9:23:54:a7:d6:b2:7d:ad:40:5f:
         38:cd:00:bd:a2:a4:33:ab:bb:4b:22:a5:3e:60:e8:bf:01:e4:
         c1:a0:4c:65:f3:aa:26:f1:90:f4:31:53:dc:77:5c:37:ac:0e:
         56:3f:80:95:26:bc:b2:2a:fe:18:84:dd:9a:0f:b1:5d:ad:7b:
         75:bf:af:64:d9:67:cd:63:f1:4f:32:fc:5f:e6:43:74:a0:08:
         f0:31:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:04 2026 by rpki-client