Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          lHOARDk6ymkqPd18q1bCGkR2uGxQZi8a2tKhbGuKFXM=
Subject key identifier:   13:9B:05:3E:BF:CA:65:69:E0:F8:A4:52:85:6C:33:AE:91:67:E5:B8
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       019F9090D6AE250654D4C7E26A4BF7CA7D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          01C8
Signing time:             Thu 23 Jul 2026 20:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:39 +0000
Files and hashes:         1: 3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa (hash: wiSgmKaOMIcmWFd8GaxGj7Vm+74phyS4WrLi0VpoF/I=)
                          2: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: kFpYy7b4ALqtxe6eMqFDSIPKibpxnnQXejwLbdneFWQ=)
                          3: MnaK4RFMKFqvcy9LYy8dOLSmUhE.roa (hash: JFebODicpWznSO2Mn/DWAEOUW3TbJ4875G8KS9D1Pkw=)
                          4: k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa (hash: XnliqZzLSitAyY5Y0444OhQs0+7ZKErHlGbelno8vGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:d6:ae:25:06:54:d4:c7:e2:6a:4b:f7:ca:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Jul 23 20:00:39 2026 GMT
            Not After : Jul 24 20:00:39 2026 GMT
        Subject: CN=139b053ebfca6569e0f8a452856c33ae9167e5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:6c:68:ca:89:0f:48:c3:56:87:79:52:d0:
                    0a:1c:e3:2d:10:db:71:5f:6d:06:be:cc:3a:fd:1f:
                    47:67:43:f3:e2:32:02:f8:66:cf:f9:79:3c:4e:5f:
                    51:00:60:a6:c9:25:c1:e7:0f:04:bc:65:7d:c8:26:
                    c5:dd:37:03:a3:68:f6:38:2f:0a:fa:08:c6:bb:f3:
                    5b:c8:f3:47:35:2a:75:6c:49:dc:1f:77:46:78:45:
                    57:12:f6:71:06:cd:ca:90:c7:32:1c:b6:bf:4d:76:
                    a2:38:b4:fa:ca:bc:c3:bf:33:59:61:e9:17:ad:29:
                    42:56:0a:60:a5:e9:20:93:f8:4b:97:bb:5d:ab:bb:
                    ea:29:f7:d7:cd:0e:25:42:40:30:1c:45:ab:93:37:
                    77:63:96:e5:7e:4c:0f:7c:95:80:2b:de:0e:1e:a4:
                    86:27:33:0d:2a:64:ef:a9:1a:9f:4a:2b:84:8e:3f:
                    95:0e:6d:68:98:2c:a4:f2:f3:77:c0:b5:f8:dd:5f:
                    43:67:13:58:dc:b5:fe:93:dc:11:97:06:f9:81:b8:
                    d6:03:7d:7b:ae:3b:f9:95:0f:2e:83:92:68:78:28:
                    4d:95:cf:fd:bd:f4:93:db:bb:b9:5d:e5:67:f7:50:
                    fe:b2:73:a2:1d:cf:a6:9e:a4:87:5b:9b:8e:52:9e:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:05:3E:BF:CA:65:69:E0:F8:A4:52:85:6C:33:AE:91:67:E5:B8
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:5e:93:9b:09:e9:69:a7:d9:a0:87:f3:17:36:db:12:cf:
         06:b7:4f:db:86:c9:f1:fe:2b:db:74:d8:55:01:c1:0c:a5:ed:
         53:4e:9c:5e:b2:9c:03:42:57:e2:ad:48:ee:e4:9e:a8:eb:c5:
         56:d0:f4:e2:c8:6a:50:a0:46:2a:52:ca:0f:c7:f7:7b:da:fe:
         29:f1:9e:6c:0a:14:d4:36:9b:43:14:31:e4:cd:cf:d3:6f:4e:
         02:bb:9b:8d:03:38:75:42:50:ac:3c:91:f1:d3:0b:ec:7c:ca:
         fe:0d:f0:43:8e:3f:90:cc:b0:57:5e:0e:3c:b0:53:de:54:fc:
         ae:ef:2a:07:4d:e1:a2:00:3d:b0:11:c4:a9:84:74:81:ba:7c:
         95:79:3f:81:d7:98:b9:8b:c3:1b:ac:5c:dd:3d:47:ea:d2:6b:
         68:42:e6:37:3d:50:3e:ca:5c:47:33:8c:1b:a9:f8:a2:bd:2e:
         b6:bf:98:e2:0f:4a:61:13:b8:19:38:c8:59:0f:30:e7:30:13:
         44:44:ff:6d:12:11:a4:ac:57:56:ba:7e:e7:27:28:de:36:d6:
         29:db:2e:14:b8:b1:7b:34:02:f7:05:b7:55:c7:d7:76:cc:f9:
         c9:cc:ff:31:dd:64:ce:72:97:23:b5:57:fc:46:8a:b7:4b:0c:
         df:3b:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:33 2026 by rpki-client