Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File:                     BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier:          RAuz3dNCNgLCgpN6Jq+ZGGjDapr4yZCaWLLfnWrUE08=
Subject key identifier:   71:28:CD:2B:F3:B2:87:C1:E2:E2:63:97:5B:5E:00:72:81:5F:9D:B3
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer:       /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial:       019F8FEBE351B25CEB8A56777E3576B88C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number:          074D
Signing time:             Thu 23 Jul 2026 17:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:28 +0000
Files and hashes:         1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: hXRIBWAFLZN9rpSBTyTqkin4diezVDdZP3mhevgKflo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:e3:51:b2:5c:eb:8a:56:77:7e:35:76:b8:8c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
        Validity
            Not Before: Jul 23 17:00:28 2026 GMT
            Not After : Jul 24 17:00:28 2026 GMT
        Subject: CN=7128cd2bf3b287c1e2e263975b5e0072815f9db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:5c:81:a8:ad:c5:64:ad:67:2f:5e:c7:00:
                    d3:dc:0a:1e:69:e2:c9:17:df:85:92:96:37:37:55:
                    3a:79:e4:96:4c:8d:21:4c:72:6c:36:b4:60:ff:5e:
                    11:29:85:78:88:9b:b4:8c:85:fc:fb:8d:2f:52:04:
                    de:8c:7d:1b:7a:bb:c6:6c:22:f3:3e:b4:89:ba:37:
                    ac:91:b1:6a:41:41:92:00:2c:cb:52:7c:c5:e3:68:
                    c7:32:24:f8:03:98:50:96:34:f9:f0:1d:22:3a:6a:
                    4a:a5:af:7d:66:4c:9b:24:6b:37:1b:00:4f:d7:f4:
                    f8:dd:75:b0:b5:6f:ad:59:55:81:a1:3f:e1:33:3a:
                    ed:61:e5:ce:cf:25:05:80:0c:67:15:cc:30:a9:bd:
                    ec:29:89:48:45:8a:9f:f1:02:5a:fe:8b:a8:c5:90:
                    67:38:ab:e8:2a:a9:32:9b:04:bf:00:69:39:10:69:
                    9d:b6:15:48:a5:51:b5:a8:9d:48:c1:27:49:36:0d:
                    88:e3:ac:e9:f1:05:8f:cf:c0:26:a2:c9:ea:8a:de:
                    ad:cd:4d:63:d5:f2:d7:2a:1c:ee:70:93:34:db:40:
                    88:2e:68:80:ca:48:dc:d5:b7:5e:13:f9:74:58:27:
                    1d:0c:68:79:03:3c:a6:c3:0b:42:e8:c3:be:68:bc:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:28:CD:2B:F3:B2:87:C1:E2:E2:63:97:5B:5E:00:72:81:5F:9D:B3
            X509v3 Authority Key Identifier:
                keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0e:c5:31:8a:09:d2:ec:a0:c3:bb:1d:58:a1:19:5e:cf:f2:
         d4:54:5d:84:9d:95:65:82:db:4f:b7:e3:ce:d2:8b:64:8b:f2:
         0c:dc:62:fc:55:d0:34:a4:d6:6f:84:ab:a6:cb:41:e5:ab:3b:
         94:08:c3:f0:ce:0d:f9:5c:6c:5e:5c:34:e3:21:c0:64:4f:7f:
         e3:15:0e:a1:02:18:69:e4:bf:e0:f1:ac:a9:a5:97:9d:23:98:
         1d:a6:e3:3f:d2:5f:87:ab:2e:42:51:8e:91:75:11:4b:2e:5b:
         7a:65:d7:28:9a:ee:e8:b2:43:9f:60:af:99:fa:f8:79:09:01:
         7e:af:35:61:a0:1b:1b:31:14:b9:d1:07:d5:93:9a:d6:64:fb:
         11:c3:d0:91:18:53:3c:fe:19:cc:16:91:0f:b5:27:25:a7:4d:
         78:a6:99:17:74:02:67:5d:e1:d7:19:87:74:97:14:fd:bb:f8:
         0b:1a:4d:5d:18:48:26:60:7d:05:e1:88:4f:00:08:8f:a1:f3:
         fb:2c:c8:a8:cb:c9:28:72:ef:02:52:79:b9:e5:3a:b9:6f:a1:
         b0:1d:8a:3a:01:98:62:33:5b:f3:33:62:51:1d:29:43:64:7c:
         96:0f:4d:58:0b:e8:b3:a5:01:60:ca:e1:50:2a:dc:bc:f2:5e:
         7c:ec:76:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6+NRslzrilZ3fjV2uIw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl
MTE3MmUwHhcNMjYwNzIzMTcwMDI4WhcNMjYwNzI0MTcwMDI4WjAzMTEwLwYDVQQD
Eyg3MTI4Y2QyYmYzYjI4N2MxZTJlMjYzOTc1YjVlMDA3MjgxNWY5ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOhcgaitxWStZy9exwDT3AoeaeLJ
F9+FkpY3N1U6eeSWTI0hTHJsNrRg/14RKYV4iJu0jIX8+40vUgTejH0bervGbCLz
PrSJujeskbFqQUGSACzLUnzF42jHMiT4A5hQljT58B0iOmpKpa99ZkybJGs3GwBP
1/T43XWwtW+tWVWBoT/hMzrtYeXOzyUFgAxnFcwwqb3sKYlIRYqf8QJa/ouoxZBn
OKvoKqkymwS/AGk5EGmdthVIpVG1qJ1IwSdJNg2I46zp8QWPz8Amosnqit6tzU1j
1fLXKhzucJM020CILmiAykjc1bdeE/l0WCcdDGh5AzymwwtC6MO+aLyPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEozSvzsofB4uJjl1teAHKBX52zMB8GA1UdIwQY
MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt
NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi
LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ7FMYoJ
0uygw7sdWKEZXs/y1FRdhJ2VZYLbT7fjztKLZIvyDNxi/FXQNKTWb4SrpstB5as7
lAjD8M4N+VxsXlw04yHAZE9/4xUOoQIYaeS/4PGsqaWXnSOYHabjP9Jfh6suQlGO
kXURSy5bemXXKJru6LJDn2Cvmfr4eQkBfq81YaAbGzEUudEH1ZOa1mT7EcPQkRhT
PP4ZzBaRD7UnJadNeKaZF3QCZ13h1xmHdJcU/bv4CxpNXRhIJmB9BeGITwAIj6Hz
+yzIqMvJKHLvAlJ5ueU6uW+hsB2KOgGYYjNb8zNiUR0pQ2R8lg9NWAvos6UBYMrh
UCrcvPJefOx2WA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:32 2026 by rpki-client