Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          kdEQBZpfBodE98dXG3IgkzOgOrLg0AwQJWaDjmjhhJY=
Subject key identifier:   D0:15:E6:E8:F1:BD:3C:96:3A:4E:59:DE:55:2F:03:4E:23:9A:C0:C0
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       019F92B5F9EB107361C628B3AE5D1FA3F01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          1713
Signing time:             Fri 24 Jul 2026 06:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:27 +0000
Files and hashes:         1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
                          2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
                          3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: QE5lRIbYvWVuKcwaeD/aP5dV6WXmdqePRvxuSnvlH4c=)
                          4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f9:eb:10:73:61:c6:28:b3:ae:5d:1f:a3:f0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Jul 24 06:00:27 2026 GMT
            Not After : Jul 25 06:00:27 2026 GMT
        Subject: CN=d015e6e8f1bd3c963a4e59de552f034e239ac0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:ab:be:5d:54:51:47:25:71:bd:25:ac:65:
                    43:0b:07:dc:0a:c0:7b:f4:7e:0d:b2:e4:56:01:1e:
                    1b:de:31:17:6d:d4:17:5d:d7:a2:9e:0a:4b:db:c5:
                    cc:e3:32:f7:5d:14:3b:e9:06:2f:b6:9f:d1:fa:88:
                    cc:99:c3:15:25:e9:52:62:d1:91:e4:a2:e8:34:f3:
                    53:0f:2c:35:6e:02:3a:40:66:26:13:6b:83:65:ce:
                    d0:1e:05:a4:f0:3d:51:6e:f7:3c:4b:e1:91:fd:16:
                    b0:cd:0e:30:04:bc:85:e2:3f:d5:b4:e2:74:d0:c1:
                    f1:d4:cf:ac:48:4a:44:c3:d2:a5:f6:c4:06:03:2b:
                    56:b7:97:d0:68:b4:53:58:74:d1:27:0c:7a:0b:b4:
                    cc:a9:fd:18:c7:24:41:f0:48:f7:1c:c8:21:07:15:
                    02:df:d4:dc:8f:91:3a:7a:37:25:59:67:79:a3:fa:
                    de:d1:fd:5c:7c:92:46:7b:b5:72:5d:e7:fd:30:61:
                    c7:58:53:b7:f8:44:14:e3:9d:19:10:c7:a5:35:ba:
                    25:d2:03:f3:46:1c:ed:e7:c1:eb:72:8d:16:d7:c8:
                    0d:44:a8:98:c7:04:59:4a:f7:fd:e6:60:36:e3:38:
                    15:37:2a:2b:b8:64:53:51:c6:93:2a:30:59:58:fd:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:E6:E8:F1:BD:3C:96:3A:4E:59:DE:55:2F:03:4E:23:9A:C0:C0
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:74:39:09:a5:57:a1:b5:41:39:1e:fc:18:df:75:1d:0a:9f:
         be:7f:80:8a:c9:36:b1:6f:f9:e7:fa:f9:5c:03:f5:49:a8:23:
         0a:ea:78:3a:f2:01:05:0a:b1:eb:42:4e:2b:72:60:46:aa:5b:
         37:2c:be:24:cb:40:ff:ea:39:e1:7c:97:d7:6e:1b:9e:af:1c:
         a8:d0:89:f2:6d:5c:20:6f:5a:05:8d:01:aa:97:37:f6:a9:b1:
         9c:f0:fd:af:b0:49:39:46:2a:bc:95:26:de:3a:73:9e:4f:86:
         0f:d2:75:3e:d3:18:2f:c9:f6:aa:86:e6:4d:52:fb:e2:b7:f0:
         a5:a5:ca:b1:bd:f5:74:e8:a6:75:d6:8b:72:d3:af:7d:45:da:
         da:c8:e9:57:9e:7a:db:6a:50:60:4b:cd:f4:1d:2a:58:dc:c9:
         60:b4:ab:1c:89:41:2c:f5:d6:32:0a:26:4f:81:61:7d:1f:7f:
         b9:b8:12:4b:1d:1d:b5:0f:68:7c:1c:93:b9:72:c1:05:dd:d8:
         46:e8:41:4a:b0:a5:09:86:f5:50:43:10:7d:8a:02:f7:cf:32:
         0f:3e:68:3c:35:b7:34:a6:96:89:eb:84:7c:b0:e1:19:cb:51:
         59:52:a9:6e:70:0e:b1:14:77:ff:c2:08:68:a5:ee:a1:20:82:
         51:93:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:35 2026 by rpki-client