Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          7hvJB3KOEWVpu2jUZgT9OaooDSE7j5ew/5hEmladaZ8=
Subject key identifier:   C7:F6:7C:F0:68:82:E9:9C:AA:BE:F3:9E:2D:F3:06:11:8D:99:14:12
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       019F9135D7829010A215174A462784E56C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          1543
Signing time:             Thu 23 Jul 2026 23:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:52 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: zbmYNqT+N+fyWWs2C5h6k+R6DkUUCos/cMRZ4Lkc61U=)
                          2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d7:82:90:10:a2:15:17:4a:46:27:84:e5:6c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Jul 23 23:00:52 2026 GMT
            Not After : Jul 24 23:00:52 2026 GMT
        Subject: CN=c7f67cf06882e99caabef39e2df306118d991412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:39:54:64:cb:62:89:91:01:a0:d2:f5:98:
                    c9:33:6c:70:07:ff:0a:e9:5a:8f:05:d2:91:3c:0f:
                    b8:14:72:f0:98:58:8b:11:a1:83:04:aa:a6:c5:0a:
                    10:09:54:a3:0e:7b:b2:0d:9f:79:d0:6e:77:4c:a9:
                    29:a7:c6:c7:90:55:70:e7:eb:59:c5:dc:63:1b:4e:
                    41:5c:ce:5e:e7:7a:13:f6:b2:72:00:e8:23:75:fd:
                    ef:a8:5f:14:66:57:5e:1d:ef:59:bf:1c:a3:b9:78:
                    9b:06:f8:60:60:09:0b:13:fe:08:db:d8:6f:e5:c9:
                    76:c6:47:23:f4:42:a7:4e:28:80:9a:cc:f1:6f:c7:
                    98:30:3f:6a:76:7c:21:7b:37:83:05:21:d6:34:6f:
                    db:e4:52:3a:f8:5e:3f:a2:51:f9:3e:a4:b7:be:15:
                    69:a2:a9:47:21:07:39:30:91:9f:ff:e8:55:22:c5:
                    4a:66:89:b6:a2:b7:53:4c:43:5f:7b:80:41:5f:de:
                    b3:0e:85:c2:cc:db:70:28:60:93:d9:e2:35:f8:a6:
                    70:21:f2:32:38:7d:4e:8c:29:f6:ab:ab:d2:20:30:
                    7a:4f:f7:fe:65:74:f5:03:63:a3:91:f8:2f:23:88:
                    d5:73:40:28:c7:05:b6:9a:27:2a:32:87:a0:e3:6e:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:7C:F0:68:82:E9:9C:AA:BE:F3:9E:2D:F3:06:11:8D:99:14:12
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:81:16:fd:05:fe:12:62:ae:01:70:ad:1c:4d:47:0a:b4:
         9b:7e:26:94:37:67:91:cf:f6:45:f0:b0:02:60:1b:77:c9:09:
         7f:9e:85:01:bd:94:bf:10:22:aa:f7:f0:eb:f3:b5:de:42:b3:
         1f:36:64:28:12:f7:99:02:41:1f:54:68:83:6a:19:95:fb:9b:
         dd:cc:8e:45:2b:fc:56:80:87:f9:7e:95:38:83:a4:62:11:5a:
         62:58:ff:f6:99:94:4b:2a:d1:09:40:57:4f:99:7f:53:a6:f4:
         b8:30:d7:e9:ee:29:0b:ce:97:fd:84:92:73:d5:25:9a:65:95:
         1a:d5:80:89:4b:26:56:57:ff:7b:6d:74:d2:99:40:8c:06:d3:
         39:86:20:53:37:9e:62:b5:b6:97:70:73:a6:14:d7:9f:c7:1b:
         53:d7:ba:33:b8:5b:3b:55:c9:35:3b:cf:e2:7b:e9:bc:1a:ed:
         f3:89:3d:a5:96:32:10:79:3a:2a:57:36:84:a7:45:02:e6:bd:
         11:50:52:a3:92:7d:3e:fb:85:46:8f:18:32:06:1f:90:38:6d:
         4f:7e:a4:1f:87:d1:ef:4d:4b:92:c1:89:15:a5:cb:64:b5:80:
         68:ad:44:4e:2e:4a:dc:29:38:47:33:36:62:cf:40:bf:1d:b6:
         6b:b7:7c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNdeCkBCiFRdKRieE5WwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjYwNzIzMjMwMDUyWhcNMjYwNzI0MjMwMDUyWjAzMTEwLwYDVQQD
EyhjN2Y2N2NmMDY4ODJlOTljYWFiZWYzOWUyZGYzMDYxMThkOTkxNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gM5VGTLYomRAaDS9ZjJM2xwB/8K
6VqPBdKRPA+4FHLwmFiLEaGDBKqmxQoQCVSjDnuyDZ950G53TKkpp8bHkFVw5+tZ
xdxjG05BXM5e53oT9rJyAOgjdf3vqF8UZldeHe9ZvxyjuXibBvhgYAkLE/4I29hv
5cl2xkcj9EKnTiiAmszxb8eYMD9qdnwhezeDBSHWNG/b5FI6+F4/olH5PqS3vhVp
oqlHIQc5MJGf/+hVIsVKZom2ordTTENfe4BBX96zDoXCzNtwKGCT2eI1+KZwIfIy
OH1OjCn2q6vSIDB6T/f+ZXT1A2OjkfgvI4jVc0AoxwW2micqMoeg424pjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf2fPBogumcqr7zni3zBhGNmRQSMB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA6BFv0F
/hJirgFwrRxNRwq0m34mlDdnkc/2RfCwAmAbd8kJf56FAb2UvxAiqvfw6/O13kKz
HzZkKBL3mQJBH1Rog2oZlfub3cyORSv8VoCH+X6VOIOkYhFaYlj/9pmUSyrRCUBX
T5l/U6b0uDDX6e4pC86X/YSSc9UlmmWVGtWAiUsmVlf/e2100plAjAbTOYYgUzee
YrW2l3BzphTXn8cbU9e6M7hbO1XJNTvP4nvpvBrt84k9pZYyEHk6Klc2hKdFAua9
EVBSo5J9PvuFRo8YMgYfkDhtT36kH4fR701LksGJFaXLZLWAaK1ETi5K3Ck4RzM2
Ys9Avx22a7d82A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:17 2026 by rpki-client