Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          UEyw90Wohi/63kVhmwpJ5zKYZZszzN6yFkZIveT6aNY=
Subject key identifier:   58:FB:58:7A:C9:9D:FD:3B:2E:C6:CC:88:FF:D5:95:50:D8:CD:FE:16
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       019F91A41CB83E4D745966CCE007737F9B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          094B
Signing time:             Fri 24 Jul 2026 01:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:19 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: lKvyUizCmhmRUp9BjgSYnuo8XtHIncXwheIObRWOOcM=)
                          2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:1c:b8:3e:4d:74:59:66:cc:e0:07:73:7f:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Jul 24 01:01:19 2026 GMT
            Not After : Jul 25 01:01:19 2026 GMT
        Subject: CN=58fb587ac99dfd3b2ec6cc88ffd59550d8cdfe16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:4a:af:5c:bb:72:69:1f:88:5a:21:dd:11:
                    e8:58:ac:50:86:a4:bb:fa:93:f1:47:0e:f5:56:ec:
                    33:e3:d0:ec:95:e5:e2:0c:72:63:a6:ec:3a:43:6f:
                    d8:e8:b8:c1:f8:1b:eb:f4:a2:ce:7b:19:6d:ac:8a:
                    39:b6:0b:23:66:2a:8f:3b:f6:14:9c:59:96:62:9c:
                    16:d3:e0:02:25:82:16:a1:3a:b0:61:1f:86:43:09:
                    30:9b:53:ea:bb:e8:38:b7:2d:87:27:1b:16:19:d1:
                    d1:84:02:d9:5c:8b:90:24:41:ec:26:db:b6:f8:37:
                    09:f4:3f:d6:d5:26:2b:dc:f2:31:c6:12:b7:6c:57:
                    7c:aa:84:86:59:53:75:b5:17:68:be:a3:06:de:61:
                    9d:7b:f5:d5:d9:34:19:8a:5a:8d:da:97:0b:92:42:
                    7b:54:d2:f5:64:6d:23:15:3e:c5:c3:c8:5e:65:51:
                    83:ce:5d:46:17:5c:75:cc:86:4d:d1:12:b0:f2:c9:
                    92:ff:97:b8:92:73:d1:b7:79:b3:9b:1e:c3:33:a1:
                    f7:18:44:a7:07:b4:bf:7d:1c:ff:df:be:c9:14:af:
                    21:ac:cf:16:7d:29:a1:17:8b:91:68:d3:b0:19:a9:
                    6e:87:8a:7a:69:5f:cc:d9:25:12:98:4d:82:f1:2c:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FB:58:7A:C9:9D:FD:3B:2E:C6:CC:88:FF:D5:95:50:D8:CD:FE:16
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:bd:89:c8:fd:e2:a4:0c:c2:67:00:14:24:4d:08:36:09:
         82:dd:d3:14:58:9a:b6:02:01:74:6f:6f:7b:46:3d:96:5c:3d:
         cc:69:61:25:8b:95:27:ec:a2:83:61:8a:90:89:69:b2:8a:bc:
         9b:19:b9:bb:04:8d:46:5e:a4:6b:fc:5a:f4:38:68:f9:77:42:
         4e:d0:55:1e:27:8b:1d:9a:58:51:f8:0d:1a:14:a9:09:47:43:
         1b:51:20:21:10:62:e7:96:31:27:c0:87:80:63:4a:f0:11:f7:
         1b:a6:39:23:32:c1:91:48:b3:24:f5:de:0d:89:ed:2b:e7:b0:
         b2:fd:8a:1f:de:f0:1c:01:12:de:2a:19:a0:42:3b:46:5e:59:
         86:86:12:c2:6b:fc:52:aa:10:57:bf:0b:4e:d2:44:61:cb:d5:
         5f:f7:92:b9:e5:56:29:7a:58:fd:96:92:0f:7b:fd:c7:c2:79:
         d1:40:34:5e:ec:c7:64:d0:02:3c:6f:cb:38:09:a2:7a:2e:f9:
         38:1a:68:bf:e7:a8:55:80:c5:09:75:d4:eb:26:ce:35:48:fb:
         ff:41:4d:8d:99:66:a4:f6:82:4f:17:07:32:c5:0e:df:43:73:
         04:73:47:c3:bb:f6:33:cb:70:b8:c1:18:85:c1:21:2f:22:96:
         bc:24:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:40 2026 by rpki-client