Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          E+uAvQSvouLuClGD2oN/5yXoY61kamz1yWbD3YPLfb8=
Subject key identifier:   EE:9A:8D:54:C6:C2:88:3C:CC:62:54:39:EA:CF:81:4F:6B:40:C9:C2
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019F90234B391877D5D46B3B9723665AFA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          16A1
Signing time:             Thu 23 Jul 2026 18:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:59 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: rInQqrBIwvVEnAfqNwItljx+NI0mlXwbZSeKysGuTPE=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:4b:39:18:77:d5:d4:6b:3b:97:23:66:5a:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jul 23 18:00:59 2026 GMT
            Not After : Jul 24 18:00:59 2026 GMT
        Subject: CN=ee9a8d54c6c2883ccc625439eacf814f6b40c9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:80:ed:85:0d:21:c6:1e:bf:e9:32:1f:7b:
                    ea:ce:3e:ff:d9:0c:b9:83:15:86:5f:87:48:59:f2:
                    da:f1:ce:a6:0b:89:7c:0d:fa:d3:82:e9:a5:db:69:
                    63:e5:52:bb:82:13:1a:20:b5:8a:98:fd:a4:47:e1:
                    74:26:02:37:69:c5:e6:12:b0:9f:0f:99:c3:79:a0:
                    64:e3:86:21:0d:2c:9b:c1:29:91:e4:65:0b:b6:25:
                    1a:d8:1f:50:98:41:42:04:7a:f5:fb:9f:75:a0:09:
                    d4:99:24:83:b9:c3:eb:0e:14:84:94:db:37:82:0f:
                    5b:39:db:96:18:b1:65:d9:f4:57:e1:ae:2f:d6:b3:
                    c4:b2:0c:ec:50:87:ef:ae:2f:35:e2:34:8b:d7:73:
                    a0:bd:fe:2f:71:9a:ef:f6:c6:09:c0:01:92:b8:bc:
                    6a:dc:34:46:0d:b3:d5:d4:1f:bb:46:f8:3f:63:89:
                    2d:1c:f3:8a:cb:74:e8:ba:b9:55:4c:bd:d6:05:26:
                    2d:c4:42:7d:26:31:9a:fe:53:14:86:90:a1:e3:7d:
                    7f:e5:7e:40:d6:41:37:31:92:22:30:b6:ec:6a:fc:
                    ba:0c:fd:e9:12:63:f9:50:d8:e3:5b:f0:5a:7f:07:
                    44:af:28:63:0c:84:86:ea:88:0e:67:e5:d9:1d:4f:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:8D:54:C6:C2:88:3C:CC:62:54:39:EA:CF:81:4F:6B:40:C9:C2
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:27:fe:dc:4b:5c:8f:6e:d7:fb:c7:8a:3f:87:20:db:6f:34:
         59:70:e4:54:af:90:9e:e0:b6:a0:69:cb:ea:91:92:e6:78:20:
         8f:7d:58:38:56:26:02:69:b2:95:74:36:7f:9c:29:c5:b1:de:
         4a:94:c8:42:f6:72:62:8e:e2:ca:ca:3a:fa:ba:ec:bd:d7:8c:
         95:7b:a7:b4:78:2d:6f:e5:e7:d2:b2:20:99:63:c5:d3:66:39:
         ab:7d:8f:b2:c1:ff:5b:57:d3:08:a5:9c:61:4d:9c:92:f0:94:
         fd:7a:f7:91:d4:85:34:cb:cd:5f:c6:ad:10:98:33:cf:5c:24:
         f2:af:14:09:05:c4:42:3c:2f:ed:94:d8:a2:6c:07:c6:82:32:
         43:c3:12:b4:5e:94:5f:65:c8:02:12:15:00:b5:74:f3:8e:a3:
         af:1d:f5:31:14:69:16:bb:5a:bb:82:b9:b0:7c:76:bd:62:8b:
         ac:19:40:93:99:9e:28:8e:0f:7c:bd:a1:05:1b:79:3b:d6:57:
         84:ac:2c:3a:4b:11:f3:97:ae:d9:e7:00:b6:87:e7:35:81:e2:
         44:22:d1:76:ba:5a:54:84:7b:a8:0f:65:a8:77:64:7d:a2:30:
         e6:8c:fc:89:15:1d:10:10:0b:87:49:3e:4b:14:08:82:8a:37:
         4c:29:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:15 2026 by rpki-client