Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          4bCV37SNs2JfOdaSJnLqFF2F+VvNKd4nNKQtk5o0mzE=
Subject key identifier:   C0:E5:29:2B:77:ED:43:EA:34:9E:88:E3:DD:6F:30:3B:72:65:EC:C2
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       019F92B691519D659C6A1F487D7AC896D4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          185D
Signing time:             Fri 24 Jul 2026 06:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:05 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: Dk1p/jJnUmeGckOk9yB/AOk90Ouf54Ic1pJnA+gQlaU=)
                          2: n9REwkhfEAGVBPXu1NeU8ckSw0Y.roa (hash: /LBumHatcMFGiSJpi+D4CNDkH6MVAePa519MRpuWiWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:91:51:9d:65:9c:6a:1f:48:7d:7a:c8:96:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Jul 24 06:01:05 2026 GMT
            Not After : Jul 25 06:01:05 2026 GMT
        Subject: CN=c0e5292b77ed43ea349e88e3dd6f303b7265ecc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:32:96:f7:a9:c1:94:4a:75:60:f0:16:ef:
                    50:10:97:76:41:cb:6b:e1:7e:88:e3:84:a3:e8:69:
                    3b:b0:b3:b4:78:8b:fd:c5:b9:bf:6e:4a:7e:67:71:
                    d4:03:7f:7f:d3:1d:1d:b9:ff:9a:75:2a:e9:1a:1a:
                    48:3b:e3:92:fc:e2:67:e2:85:a4:65:d1:7d:55:88:
                    2b:3b:1c:2e:b4:d5:86:37:61:bd:6c:33:c3:8c:45:
                    1a:ce:dd:aa:40:cf:21:30:8c:0c:fa:ed:71:f4:62:
                    4b:85:94:2b:99:8e:35:58:54:c0:bd:3b:b0:48:93:
                    9c:02:46:ce:3c:c5:13:7b:02:22:65:65:86:2e:f1:
                    a9:d2:0c:41:82:4e:27:28:9a:dc:c2:f2:73:1e:53:
                    1a:19:13:b9:34:6a:32:d4:a8:fa:87:f1:1a:5e:2b:
                    0e:3f:18:4f:0f:7a:3a:5b:64:c6:34:bf:67:51:95:
                    35:02:b8:13:30:65:a8:03:60:02:df:60:11:ea:48:
                    b6:06:07:bc:d6:c8:11:e0:a7:c4:38:79:5d:75:da:
                    d7:cb:3c:8c:08:c3:69:e4:ba:f2:c4:5c:20:8b:15:
                    93:ee:4a:cf:cf:f7:4a:09:10:63:b6:4b:75:1f:4f:
                    45:63:cd:61:ed:de:cf:11:4a:97:83:3f:51:15:14:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:29:2B:77:ED:43:EA:34:9E:88:E3:DD:6F:30:3B:72:65:EC:C2
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:69:7d:4c:28:01:a3:cb:4d:41:73:62:0e:5f:4d:cf:e5:
         67:9d:2d:17:eb:10:a3:bc:20:59:0b:ce:75:0c:9e:99:d4:b3:
         19:46:06:c6:9e:cc:97:ed:c2:b8:9a:f7:9c:02:59:8e:02:59:
         6f:b1:8c:fd:46:cd:c1:f1:b7:0e:ad:28:d5:7b:b9:82:75:19:
         e7:2d:8c:9e:25:bc:a1:79:3d:cf:44:85:58:4c:6f:83:09:16:
         ca:57:57:ad:fb:25:cd:d5:3c:57:34:0b:64:00:bb:2c:96:35:
         c4:b3:35:cb:ec:8e:9a:a9:41:11:a0:9e:89:9b:fb:bd:cf:b3:
         f2:59:af:3f:9a:86:e9:e5:59:f6:ac:a9:88:d8:ba:80:e0:18:
         2a:27:63:d5:29:dc:c2:34:ea:f3:39:cf:7c:6a:f5:a9:68:24:
         da:c2:cd:d7:2b:cd:90:cf:4f:56:fd:9e:8e:ca:5f:e8:8f:0e:
         21:c4:df:b0:26:83:eb:ee:a8:b4:8f:6d:59:59:d7:26:48:b8:
         87:03:54:6c:1b:7b:f5:4c:3c:8e:6e:e1:41:f7:61:27:93:1d:
         a8:ae:0f:11:40:c3:1b:a6:72:2b:c6:01:3e:42:0b:93:88:dd:
         e7:b7:ab:e9:49:dc:ce:2a:60:2a:da:f7:13:1d:3a:25:72:eb:
         09:e9:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:56 2026 by rpki-client