Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File:                     BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier:          V+07CKKrc5RvSEQOq5JylzCF662aFdutnZAt+FW+wBQ=
Subject key identifier:   B7:B3:C1:51:6B:04:53:56:9E:D0:B2:59:F3:26:EB:E3:56:87:F0:96
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer:       /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial:       019F905A4E04C736759C1981FF659BBBF2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number:          16A0
Signing time:             Thu 23 Jul 2026 19:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:05 +0000
Files and hashes:         1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: nsfXhMG1CWVBikhC6iu8w0CBQ/xIZfyYZoHAuH1EVys=)
                          2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:4e:04:c7:36:75:9c:19:81:ff:65:9b:bb:f2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
        Validity
            Not Before: Jul 23 19:01:05 2026 GMT
            Not After : Jul 24 19:01:05 2026 GMT
        Subject: CN=b7b3c1516b0453569ed0b259f326ebe35687f096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:2d:e5:f8:de:6b:7a:3e:c0:70:c2:18:d6:
                    9c:96:16:b9:1c:33:82:5f:a1:11:51:1a:79:05:e2:
                    f2:4f:09:1d:fb:a9:24:12:80:bf:46:99:33:80:16:
                    a9:b6:e9:5c:9b:61:0b:b6:5c:32:c9:f0:03:33:db:
                    2f:37:49:c4:af:0b:69:53:d0:59:e6:99:51:eb:41:
                    5f:c7:8d:37:7e:ae:36:03:04:97:8e:db:ae:03:2e:
                    29:f5:69:02:97:34:a8:4c:02:ea:05:1e:90:ba:70:
                    29:e9:22:e1:35:5f:de:87:fe:96:12:dd:e8:73:45:
                    60:b1:fe:83:3b:e2:94:38:9d:48:6f:60:84:1b:f1:
                    61:7c:11:dc:a9:f3:ab:cf:88:e5:df:89:45:a1:96:
                    01:16:d2:7f:1f:c9:72:88:4a:e1:0c:33:20:6f:44:
                    b1:4e:7f:ff:8f:75:cb:3e:61:d7:b5:19:5e:23:00:
                    75:c5:2e:ac:95:1c:06:4b:84:32:df:be:c3:af:24:
                    08:b8:33:8c:96:e1:40:74:f3:ed:b4:77:31:87:63:
                    6f:27:6a:1e:8a:53:23:7b:83:14:56:41:c6:8f:76:
                    97:4b:2a:88:aa:bd:19:b5:e3:1a:30:5f:c1:4a:33:
                    15:41:b7:a2:2d:c9:bd:b0:ee:e7:d2:62:33:61:e0:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:C1:51:6B:04:53:56:9E:D0:B2:59:F3:26:EB:E3:56:87:F0:96
            X509v3 Authority Key Identifier:
                keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:71:35:0e:30:8b:58:40:78:50:df:5c:b9:4e:47:2e:8e:
         59:95:73:40:54:01:d4:1d:fe:19:08:1b:5b:7f:8b:c8:00:f2:
         23:d9:3f:86:27:bd:9a:85:5b:3c:cd:2e:7c:e8:01:75:d2:83:
         5d:f7:db:e4:7b:9d:d3:6a:b1:0b:7d:0f:7c:f6:90:9f:4c:a1:
         c4:e5:3e:2b:85:60:28:06:49:6e:f1:3c:d0:92:a9:51:fe:8b:
         01:9a:68:f8:69:6f:9a:ec:c3:21:80:08:a7:d9:bb:dd:65:38:
         a2:a0:3b:99:49:5e:95:38:60:e6:37:8d:2f:55:ba:fc:b2:f8:
         2a:e7:35:96:31:ea:12:aa:90:8b:5f:b0:87:66:69:4e:a1:f4:
         4b:20:09:c3:ef:31:26:e1:f7:63:e2:8e:f9:61:6d:6b:4b:a7:
         7b:04:c1:50:53:70:54:8e:3d:f3:02:df:df:8b:a8:89:f8:69:
         89:df:64:1a:7f:0c:d0:8a:6c:3a:33:74:be:4d:e3:b8:ac:29:
         2b:21:5e:c2:29:27:d1:9c:03:2f:cb:67:35:1e:36:41:50:b4:
         e9:49:18:e3:06:4e:fc:11:3e:e3:57:a2:15:ab:77:3d:0e:06:
         90:51:b3:30:a5:6f:80:80:8d:55:ff:90:b3:00:61:1e:05:18:
         72:e0:3a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWk4ExzZ1nBmB/2Wbu/LVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl
NzRjNzMwHhcNMjYwNzIzMTkwMTA1WhcNMjYwNzI0MTkwMTA1WjAzMTEwLwYDVQQD
EyhiN2IzYzE1MTZiMDQ1MzU2OWVkMGIyNTlmMzI2ZWJlMzU2ODdmMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyot5fjea3o+wHDCGNaclha5HDOC
X6ERURp5BeLyTwkd+6kkEoC/RpkzgBaptulcm2ELtlwyyfADM9svN0nErwtpU9BZ
5plR60Ffx403fq42AwSXjtuuAy4p9WkClzSoTALqBR6QunAp6SLhNV/eh/6WEt3o
c0Vgsf6DO+KUOJ1Ib2CEG/FhfBHcqfOrz4jl34lFoZYBFtJ/H8lyiErhDDMgb0Sx
Tn//j3XLPmHXtRleIwB1xS6slRwGS4Qy377DryQIuDOMluFAdPPttHcxh2NvJ2oe
ilMje4MUVkHGj3aXSyqIqr0ZteMaMF/BSjMVQbeiLcm9sO7n0mIzYeB8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLezwVFrBFNWntCyWfMm6+NWh/CWMB8GA1UdIwQY
MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt
YzNmNGQxMTI3NGQ0LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0
LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMdxNQ4w
i1hAeFDfXLlORy6OWZVzQFQB1B3+GQgbW3+LyADyI9k/hie9moVbPM0ufOgBddKD
Xffb5Hud02qxC30PfPaQn0yhxOU+K4VgKAZJbvE80JKpUf6LAZpo+GlvmuzDIYAI
p9m73WU4oqA7mUlelThg5jeNL1W6/LL4Kuc1ljHqEqqQi1+wh2ZpTqH0SyAJw+8x
JuH3Y+KO+WFta0unewTBUFNwVI498wLf34uoifhpid9kGn8M0IpsOjN0vk3juKwp
KyFewikn0ZwDL8tnNR42QVC06UkY4wZO/BE+41eiFat3PQ4GkFGzMKVvgICNVf+Q
swBhHgUYcuA6lA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:10 2026 by rpki-client