Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          yih1yZvNNiWeqAsTSLY4BY0HH2J8/man4oZ1Ym6EpfI=
Subject key identifier:   D2:86:B0:21:E6:60:65:1B:94:76:D9:EC:A6:D7:40:62:71:3B:1B:18
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       019F90C7BA97E01B42E43445CB46578D36D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 21:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:36 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: IbVZ9lzBye+e4n3U9MAR5lRGXr8ZJ2ldrSjb0Bhg0PQ=)
                          2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:ba:97:e0:1b:42:e4:34:45:cb:46:57:8d:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Jul 23 21:00:36 2026 GMT
            Not After : Jul 24 21:00:36 2026 GMT
        Subject: CN=d286b021e660651b9476d9eca6d74062713b1b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:59:c0:0b:a8:c2:d3:29:88:eb:5c:47:a0:
                    93:b8:6e:b9:cd:68:cc:5d:8f:5a:c3:a9:c1:b2:64:
                    01:b2:82:64:ab:a7:3e:b4:68:48:ad:bb:64:34:18:
                    cb:da:48:e6:23:0f:ff:64:04:6e:43:98:95:8c:e6:
                    a6:51:a4:4b:a5:2a:bf:b7:f2:29:43:d8:1f:7d:8f:
                    a5:65:8d:76:29:0a:18:a8:47:64:3d:eb:ff:4a:67:
                    82:c1:b8:5b:ce:53:b8:d8:f7:82:55:0a:a9:40:4a:
                    52:0f:0e:11:b5:b3:d6:9c:4d:02:44:db:7e:3f:39:
                    d3:34:f8:9b:55:75:33:9c:ba:7d:01:02:7c:78:e4:
                    ec:d1:25:fb:65:b7:af:b2:79:c6:38:dc:74:c4:b2:
                    50:3a:bb:c2:26:16:23:1d:5a:f9:13:6b:1a:3e:66:
                    c1:ad:d1:56:5a:70:05:3c:91:ca:4a:57:97:74:55:
                    fa:6c:f4:62:77:47:77:6f:82:35:53:11:1c:f5:96:
                    11:7a:e6:b4:c2:9e:97:10:cc:47:11:8f:9e:59:5b:
                    65:4b:4c:41:ea:bc:19:4a:2a:70:5d:0d:83:e1:c3:
                    3d:8d:8a:14:73:77:58:fd:da:b7:94:e1:35:86:7a:
                    a4:8d:69:4a:2a:c9:f9:a9:fb:7b:aa:f4:c2:8a:ef:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:B0:21:E6:60:65:1B:94:76:D9:EC:A6:D7:40:62:71:3B:1B:18
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:1e:9a:1e:ae:b4:aa:6f:53:05:43:d8:d2:77:21:80:b7:
         65:6b:74:27:59:60:e9:c4:17:c8:c4:13:7c:bc:99:2b:7d:43:
         5c:a0:9e:6e:8b:0c:9b:10:38:de:92:cc:63:ab:cc:cf:12:ae:
         e6:0d:ba:32:77:45:3f:85:29:d3:2d:e6:6e:1c:03:fe:53:25:
         df:19:fd:95:e0:4e:d1:02:db:dc:df:91:d8:c0:01:b3:b1:85:
         89:ff:cd:44:e5:3d:0e:91:7d:47:ae:bb:6f:bc:50:ac:8f:4e:
         4e:1d:18:f5:c7:54:25:4a:0f:e2:84:76:c8:38:03:77:eb:09:
         e8:ed:27:c0:8f:6e:37:f7:2f:40:b3:ef:f0:c1:b1:4a:45:c2:
         76:2e:60:1e:62:99:98:8a:cc:57:ee:a5:66:ab:6f:76:4b:11:
         4f:fe:a1:bd:34:9e:97:da:7a:16:ac:41:0b:6c:73:cd:9d:44:
         48:6e:63:19:18:fa:fc:d6:0d:d5:f3:82:32:75:44:42:8a:f4:
         c5:31:c9:26:6b:50:04:ad:17:f4:ab:4f:0f:65:0a:58:af:5a:
         6c:4d:c9:90:3a:9a:b6:3f:c2:95:de:2e:29:e4:08:ff:26:8a:
         2a:1c:b5:de:44:e9:46:10:ea:d2:e8:9a:ee:1e:cd:b7:d3:89:
         6e:d4:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:11 2026 by rpki-client