Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          Hh8X22rr9K/h8vqtgoboOlmOMJbe/a/DApgL7MNgkk0=
Subject key identifier:   83:CA:9B:4A:C4:D0:9F:E1:32:A8:95:42:57:A6:D5:3E:97:51:15:F5
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       019F91A424032C3E40E76F385B738B105156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          19E8
Signing time:             Fri 24 Jul 2026 01:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:20 +0000
Files and hashes:         1: 3wWxSXnn1AkR2FQz-cSLXCO25fE.roa (hash: 9Mau/Rvq7d0nRIpqNv+3vxuSV8Oxqjuu2vQqrrKBRSo=)
                          2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
                          3: P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa (hash: gL2/PVEx/BkWJ9c7qys5mfYr8ijPQCI4jEJ/mb5fIUI=)
                          4: WNIo6fh_J1JaSjunj1Z5Xu1CXJ0.roa (hash: I9y0xJA8TLrCiSo9CMmPRbQsrLPI2QdSmCxydXLI1h0=)
                          5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: gFDNrVFHHCwawBlXnWxdVJ0a8EjO6ohNjfUBrGgtzI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:24:03:2c:3e:40:e7:6f:38:5b:73:8b:10:51:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Jul 24 01:01:20 2026 GMT
            Not After : Jul 25 01:01:20 2026 GMT
        Subject: CN=83ca9b4ac4d09fe132a8954257a6d53e975115f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:0f:71:bf:f5:fd:3f:0e:15:e1:fa:50:41:
                    58:37:19:12:2a:4f:7a:78:04:db:5e:1b:8d:38:1a:
                    78:72:c6:68:54:a1:52:1e:0e:14:51:b3:77:ec:a7:
                    99:25:9c:a7:76:c4:fa:dc:1d:42:df:32:f9:64:e9:
                    ad:37:f0:22:58:c0:78:8c:2c:26:aa:e0:7f:bf:b3:
                    93:7d:0e:79:4b:b4:c2:d6:6c:67:dd:c8:85:3c:47:
                    9b:ee:e2:2a:6c:ae:01:5a:f4:8b:54:be:e8:90:ef:
                    34:a1:26:d5:59:ba:33:92:81:8b:b6:07:f0:2b:bf:
                    32:7c:25:47:34:6b:74:52:a8:dd:62:a2:b4:d7:62:
                    f5:df:a7:7f:25:31:e6:c6:b3:78:e1:29:0b:f8:7a:
                    45:60:d1:d7:91:73:fb:2e:20:ca:43:e5:81:41:34:
                    31:df:08:2b:88:82:db:6d:86:6a:81:7b:7f:de:87:
                    4a:41:b5:4d:11:67:3c:35:6d:99:bb:8b:3f:7b:03:
                    0e:58:e0:8c:4e:f9:c2:27:29:6f:ce:2f:d1:e0:e2:
                    15:78:11:ca:ef:7e:f2:7d:5a:8d:0f:33:a3:99:0d:
                    54:70:c8:32:76:5a:78:ba:fc:c9:a8:83:29:1a:67:
                    72:d2:88:7a:b4:d2:31:49:f2:b8:6c:d7:b8:9c:47:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CA:9B:4A:C4:D0:9F:E1:32:A8:95:42:57:A6:D5:3E:97:51:15:F5
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:40:f8:f4:83:32:bd:15:05:6f:dd:38:0f:3b:fb:7e:fc:24:
         e4:55:83:7b:d2:db:e8:d9:ee:7b:e5:85:db:d1:54:39:a1:37:
         df:f7:95:f8:9a:59:6c:fc:cd:99:f0:67:c7:93:11:63:2b:da:
         1b:da:3d:fd:26:0d:1c:7e:c7:52:49:70:78:d9:bf:9f:96:9d:
         98:0f:2c:b5:da:52:87:f4:66:51:d1:27:cd:13:fe:de:33:e7:
         c3:06:72:91:1a:c6:53:4f:cb:b7:b0:00:89:39:84:c6:b5:b7:
         4a:eb:82:12:9f:7a:b5:52:fd:26:52:77:18:00:57:af:5b:35:
         0e:b1:74:f7:f3:63:90:61:99:70:af:bd:be:76:0d:12:7f:af:
         c2:2c:7b:68:9a:7a:ab:0a:c0:2b:1d:de:b2:b7:39:71:3f:7f:
         6c:4e:60:08:62:10:8d:3b:25:42:ed:90:71:f6:cf:4d:3f:06:
         f8:49:a2:97:33:32:05:44:b1:f9:a5:e2:54:e4:c8:18:b9:90:
         84:04:3e:bf:a5:d4:be:79:d0:f2:ad:e4:4e:2a:c8:26:5a:d0:
         6f:49:9f:78:5c:fe:8b:70:9d:d1:cc:0c:22:05:d3:dc:c1:88:
         a2:17:e1:98:23:f1:f9:07:43:0e:cb:11:77:4b:3e:26:48:79:
         3a:f5:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:55 2026 by rpki-client