Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File:                     B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier:          gqM/DJsYpstv4Ga/kVEYKN+7BZCo6cqWRwxs6xUme2c=
Subject key identifier:   49:50:08:13:DC:EB:7D:A1:54:06:DB:0C:45:E2:F9:89:2D:91:14:CC
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer:       /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial:       019F90FEB6A94D8FEA062FF7478EE5052828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 22:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:39 +0000
Files and hashes:         1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: nbXI7jdoqTfFctT9yHt00EHCqg0Qbe9l8WZ2jHTJzOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:b6:a9:4d:8f:ea:06:2f:f7:47:8e:e5:05:28:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c610b2a06db1831854b6726c33090336287415
        Validity
            Not Before: Jul 23 22:00:39 2026 GMT
            Not After : Jul 24 22:00:39 2026 GMT
        Subject: CN=49500813dceb7da15406db0c45e2f9892d9114cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:84:35:2e:50:47:7e:68:52:b1:41:7f:22:
                    7e:87:d9:4e:14:e0:3b:ec:97:d2:b2:c9:c5:32:3f:
                    25:0c:b6:00:ed:2c:7c:21:00:75:c2:35:70:9c:39:
                    5a:78:05:e6:67:6c:2c:f6:16:cf:33:88:0f:0f:2e:
                    09:d0:56:0d:77:3d:b3:0b:3a:52:0f:2b:ff:4b:0a:
                    19:0f:cf:d7:b0:8c:47:6e:99:67:47:fa:89:24:f9:
                    c7:d8:b0:48:78:4d:b1:79:7b:79:49:89:9c:22:6a:
                    9a:de:63:c4:82:2f:9f:fc:82:30:be:05:a6:e6:9c:
                    8c:71:53:c7:8d:29:8f:a8:9c:6b:3b:17:28:15:fa:
                    1b:ab:15:36:99:41:03:38:31:e4:a3:2a:ea:4e:0e:
                    e9:cb:dd:38:c5:68:e3:26:eb:0f:80:00:a2:d9:a3:
                    34:d7:3c:68:23:3e:01:1f:fb:df:8b:75:83:c5:70:
                    89:98:de:7b:53:b2:4b:9f:68:f5:6b:7f:32:65:e3:
                    75:3c:3e:7e:1c:3f:bf:c4:57:5d:4c:b5:55:42:ef:
                    14:f4:52:00:11:a1:27:41:63:a3:ef:08:5c:13:25:
                    13:fa:d4:c1:29:59:76:06:8f:c7:90:86:b7:51:86:
                    f4:1a:ea:e5:22:d0:97:b3:1d:30:d9:58:01:48:fb:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:08:13:DC:EB:7D:A1:54:06:DB:0C:45:E2:F9:89:2D:91:14:CC
            X509v3 Authority Key Identifier:
                keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:1b:53:85:15:ea:d4:93:b5:57:68:40:f3:43:e6:15:34:
         ae:f1:5b:82:a0:78:70:fe:54:31:92:97:5d:b2:0f:e9:4d:b1:
         1b:d9:cc:1b:b6:3f:aa:88:cd:6b:5f:3c:7b:57:5d:37:45:7f:
         78:8a:50:8d:2c:29:4d:d8:20:7f:20:46:2f:c9:b3:e9:2d:9a:
         33:38:08:bd:45:d6:b9:07:e0:ec:c6:ef:98:5e:2b:d1:f3:42:
         47:71:0d:a3:91:f6:1f:f4:df:84:aa:00:06:bd:d9:f4:fb:27:
         a9:bd:93:1e:e6:74:07:bb:15:c7:d0:41:a5:af:32:4d:2c:56:
         ab:bc:1d:6a:22:2c:eb:58:8f:09:6f:70:e9:e8:a1:25:02:3e:
         c0:b6:e6:01:a8:c7:af:c8:3b:85:75:0b:5e:69:44:dc:25:2a:
         29:b9:ed:76:74:e5:54:66:d1:ec:7f:84:ba:cb:22:78:fc:d4:
         a8:d8:1d:22:92:9e:23:c6:38:c0:7f:59:1c:ca:ec:c0:56:ba:
         74:91:ac:d9:a5:3e:0b:57:6e:a5:9b:bd:48:fb:c1:e9:5b:ae:
         f9:e5:f7:53:91:12:5e:7b:aa:77:f5:ad:08:9c:4c:ea:b0:24:
         a3:17:bf:0d:62:a0:e0:a9:60:49:ac:62:44:62:16:47:52:fc:
         f9:60:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:21 2026 by rpki-client