Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          jfDiOckYw0WaA9f/CwDUGE4uwjSPnXIGzQcVGKB1dLM=
Subject key identifier:   8A:30:EC:80:98:88:C9:53:99:8A:85:52:74:0B:06:49:38:E4:F1:69
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019F927EE458AF0D6F2612248A8A7EE33968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          1534
Signing time:             Fri 24 Jul 2026 05:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:17 +0000
Files and hashes:         1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: zchfAq5PU8uPYXptANDC3jRAGKgzmC+VB044cN1uRfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:e4:58:af:0d:6f:26:12:24:8a:8a:7e:e3:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Jul 24 05:00:17 2026 GMT
            Not After : Jul 25 05:00:17 2026 GMT
        Subject: CN=8a30ec809888c953998a8552740b064938e4f169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:97:5f:1a:a8:69:5d:c1:b1:0c:70:7b:39:
                    4f:5d:dc:ce:e2:be:5f:77:53:e8:cd:55:bc:a5:7f:
                    55:de:2f:65:91:ed:d6:2a:d8:42:44:79:b3:a1:82:
                    40:85:d5:e9:b1:23:dd:a8:ae:e5:7d:ae:9a:7e:3f:
                    e9:89:64:1f:a0:41:72:32:6b:eb:ea:7e:6f:20:7c:
                    27:6e:44:81:5c:76:55:4c:b3:2b:b5:8e:65:12:ad:
                    b2:41:45:91:be:ba:ec:ee:d8:22:30:4b:84:48:d6:
                    c2:3a:97:14:d5:1b:db:97:cd:10:e3:9a:4b:58:46:
                    d4:fb:d4:97:1b:54:5d:02:36:4d:59:56:61:3b:99:
                    81:ba:0c:e0:fd:5b:57:52:7d:7c:6e:4f:8f:f5:f2:
                    3f:1d:6a:74:9b:d0:e4:9f:d5:11:6b:21:ab:63:86:
                    d4:bd:4a:d2:d3:43:14:65:00:49:4b:46:e3:93:e3:
                    ba:de:1f:eb:58:df:d3:8e:09:08:3c:be:ba:02:d9:
                    d3:a1:bb:8c:59:1a:9e:56:8f:5b:e9:13:da:d6:9b:
                    f3:78:6c:a9:56:11:26:9f:f1:5f:db:08:7f:ae:cc:
                    ef:94:86:06:c8:4f:a4:0c:64:6f:7d:d1:09:39:f1:
                    c8:cd:c8:a3:a2:6c:4a:1f:62:78:d9:55:88:8e:77:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:30:EC:80:98:88:C9:53:99:8A:85:52:74:0B:06:49:38:E4:F1:69
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:af:74:ea:85:e8:1d:c9:f0:8b:8f:23:6f:2d:ed:a9:06:f9:
         d2:9c:80:1e:6e:e4:77:69:cd:40:2d:dd:e9:41:a5:6e:c9:ff:
         7f:60:df:d0:7b:cc:d0:68:5d:48:72:41:4a:31:bd:a8:89:b3:
         52:8d:c2:d3:09:07:62:72:85:a2:cb:56:d0:68:9d:c5:d5:ee:
         12:6c:1e:63:fd:74:55:60:d3:03:8a:9f:f4:9c:b1:41:62:b0:
         fa:a3:4d:41:91:79:bc:c7:55:65:8a:32:0b:c4:19:85:2b:d7:
         2f:df:c5:55:9b:77:45:d1:68:7f:80:38:a3:03:73:ea:b4:63:
         7c:01:c9:50:2f:68:3a:e6:c5:63:33:d5:51:52:6e:38:f3:bd:
         b1:60:6c:45:da:6c:f8:10:1e:24:a5:1b:85:39:b8:76:65:e8:
         db:7b:f7:a5:13:bd:94:47:f4:53:34:5b:9a:88:b1:53:e7:7e:
         3c:77:03:f1:49:50:6b:0e:2c:5d:3f:c0:2f:4f:6e:6d:e3:93:
         d5:6d:40:38:97:b1:ba:82:0a:2c:e1:dd:c2:bf:27:6b:2d:03:
         fc:00:b9:a3:e2:76:a2:be:4f:58:1a:ff:ab:d5:60:53:59:bc:
         c6:31:4d:b4:01:63:a6:ff:1d:da:bd:5c:9f:fa:eb:7f:8a:05:
         b7:78:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:00 2026 by rpki-client