Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File:                     BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier:          uwpOSGA2zEDVtKeu+yd3iNTEHAa51yGC3OyXjtwtWbE=
Subject key identifier:   CD:9D:9E:D0:8C:7C:FA:FF:72:55:A7:5B:69:A0:B1:A6:05:E5:19:B6
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer:       /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial:       019F921157B645F24CE4CB4F7EF4A38BA43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 03:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:37 +0000
Files and hashes:         1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: QHY/mUCaAHAY60l5gbl8xuVdIxbmv7ix/TtWue0F0NE=)
                          2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:57:b6:45:f2:4c:e4:cb:4f:7e:f4:a3:8b:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
        Validity
            Not Before: Jul 24 03:00:37 2026 GMT
            Not After : Jul 25 03:00:37 2026 GMT
        Subject: CN=cd9d9ed08c7cfaff7255a75b69a0b1a605e519b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:1e:94:32:f3:1d:32:1a:fa:08:66:ce:9c:
                    42:90:a0:47:3f:08:4f:74:44:0c:8c:ef:1c:e7:1d:
                    0b:d9:2b:73:82:19:97:31:f6:40:c6:c0:93:c1:d5:
                    9a:e4:3f:3d:c8:a4:63:9e:d1:2a:1d:b3:24:d1:f7:
                    4c:b6:dd:2f:e4:84:0a:f1:ee:ff:3b:ce:4c:bf:9a:
                    e4:88:b3:9c:28:a8:6a:c2:71:cc:ec:59:b1:c9:12:
                    a3:34:b6:e1:de:30:1f:dd:fa:c0:e3:bb:5e:d4:8e:
                    4c:e8:a8:4a:ec:57:75:4d:32:4f:24:84:7d:3f:c3:
                    bb:6a:9a:8a:d3:b8:55:01:37:c6:fa:11:07:8e:5d:
                    47:43:45:a2:d0:c0:5a:ba:3e:65:9c:38:3c:ba:07:
                    ea:36:3c:a9:44:99:a6:cb:ba:5e:81:f5:dd:46:80:
                    cb:d2:eb:91:97:ee:f7:1f:c3:b6:55:9e:8a:d0:6b:
                    af:9a:79:06:35:ea:7b:58:cf:9f:d1:a6:96:b4:05:
                    2e:b0:d1:20:7d:b7:6c:fe:24:3c:3c:8c:2f:b2:68:
                    20:a9:ef:ab:93:88:2e:72:6a:98:e7:82:50:51:b1:
                    ec:8d:b6:75:fe:cb:6d:54:a4:3b:0d:67:8e:a7:21:
                    28:de:c4:9b:16:d8:4d:0f:30:5d:de:3a:ab:98:f5:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9D:9E:D0:8C:7C:FA:FF:72:55:A7:5B:69:A0:B1:A6:05:E5:19:B6
            X509v3 Authority Key Identifier:
                keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:ec:48:e3:d7:67:ca:15:21:62:d6:dc:af:2d:12:0d:d3:
         b4:9b:4e:d8:19:93:07:60:8c:61:59:9f:b0:ae:d0:70:a7:35:
         59:e4:7f:a5:e1:2e:e3:d0:57:cc:5a:70:31:44:0a:a4:15:3e:
         b4:b9:fa:fc:46:60:ef:5d:5c:68:c0:40:48:be:99:80:ff:f1:
         36:59:31:ae:22:05:a0:a5:22:a1:48:0d:81:d4:74:49:94:0a:
         52:d8:3c:fc:60:c8:4c:b4:f8:97:e5:02:82:a5:ae:ac:00:68:
         a6:49:28:57:03:74:22:0b:76:38:8b:16:82:d7:f0:23:32:83:
         83:25:bc:35:2a:80:ab:ca:fa:62:3f:67:a8:f4:8d:c3:75:67:
         83:67:56:ac:a5:1a:21:d4:fe:54:af:44:2a:e4:5d:0e:89:bb:
         b1:56:0c:cf:84:23:f3:4e:39:8d:76:18:46:49:8c:ec:2d:17:
         16:b1:4c:52:54:8f:56:62:96:4c:66:51:5d:43:d6:90:bd:50:
         33:f7:8a:3c:cd:36:e6:dc:9a:83:41:d8:24:a9:85:28:e1:66:
         a9:d0:8d:32:a2:73:e6:bd:28:01:25:37:d4:cc:ec:df:18:ea:
         7c:81:2d:d8:bb:e3:15:67:b1:a0:33:ec:b2:33:5f:8b:ef:f3:
         01:5b:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:11 2026 by rpki-client