Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          oDMgFcSTos2wsxq3/R7YI/3Q6M+HFVBGEPEr2uH8Xlg=
Subject key identifier:   9B:04:19:1A:EC:53:17:A7:96:DD:17:46:41:95:01:2A:B5:31:AF:38
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019F916DACF6F5F9DD1C58D2E12C474D7D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          0499
Signing time:             Fri 24 Jul 2026 00:01:51 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:51 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:51 +0000
Files and hashes:         1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
                          2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: Qu/8jcxg+NarxGn81IzuASUJR0DhqNaLh+6Emw9US9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:ac:f6:f5:f9:dd:1c:58:d2:e1:2c:47:4d:7d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Jul 24 00:01:51 2026 GMT
            Not After : Jul 25 00:01:51 2026 GMT
        Subject: CN=9b04191aec5317a796dd17464195012ab531af38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:01:7b:23:fb:3e:00:1f:a2:57:7c:a5:a3:
                    19:19:8f:5c:d4:e9:ea:07:7d:55:ef:b6:f4:5c:ac:
                    56:f9:68:c4:1d:1c:be:b2:91:66:38:6d:e7:c6:51:
                    b1:49:33:75:8c:85:46:ef:8c:e4:03:5a:ab:21:9b:
                    76:83:2f:e4:30:d7:4d:a3:32:e4:64:d8:19:4d:8b:
                    fc:03:d3:d0:31:a9:e9:7a:0a:01:b6:35:45:7e:5d:
                    e0:92:b8:be:a3:55:19:12:35:70:41:9d:8a:2f:99:
                    24:d2:c7:37:61:ea:b2:1a:be:7e:37:87:b5:a8:31:
                    90:fc:bf:77:3e:fe:a7:91:f2:e5:0d:71:66:d1:61:
                    fd:16:d1:54:77:26:e6:e8:ac:31:4b:48:07:fa:d0:
                    3f:da:a1:b4:2e:36:a2:bb:54:a2:e9:3b:e1:bc:ea:
                    e5:2c:fe:57:4e:a2:4b:1e:fd:3d:9c:13:b6:90:6c:
                    e3:0a:1d:80:fe:23:21:df:01:44:43:cc:cc:c8:03:
                    2b:82:d9:15:73:f0:9d:3d:ff:6a:53:4f:f5:c7:23:
                    d4:2a:7f:a1:bb:2e:2f:b0:32:45:0b:a9:d6:eb:3d:
                    1b:dc:87:e3:da:4e:f7:cf:32:14:d0:a4:09:04:e7:
                    1f:93:03:de:ae:fe:fa:12:7a:1f:8f:83:a5:4b:93:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:19:1A:EC:53:17:A7:96:DD:17:46:41:95:01:2A:B5:31:AF:38
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:9b:10:f3:3a:95:26:0b:aa:9a:c2:65:14:5e:ce:81:7d:
         bb:e4:e3:86:06:f6:c7:e5:f6:4d:8d:f9:ee:44:59:a2:b4:22:
         d4:23:e5:56:e6:01:6c:9e:62:1e:19:4d:0b:5f:0f:63:af:d0:
         3a:e5:6a:e2:1e:02:03:d5:a0:c6:f0:d0:76:59:7e:60:43:19:
         13:22:cf:64:1f:62:e4:79:c6:c2:f5:a7:88:ef:f4:6b:da:49:
         33:9e:d8:7a:d6:8e:e3:dd:97:8d:3f:ab:36:01:59:58:fd:d9:
         52:3a:f7:b6:a5:05:98:32:c7:04:55:68:47:e3:e6:0c:9d:91:
         6a:89:df:61:33:50:c2:aa:ad:e4:1a:f5:7a:1c:cc:81:6f:0e:
         83:47:57:f3:89:a6:0f:43:ac:b9:45:9d:e4:c3:76:ff:f8:23:
         ec:63:81:78:1b:a3:37:f8:ef:f5:dd:a1:ca:a5:c1:09:97:06:
         f6:c0:20:8c:4e:b0:8c:10:66:4f:4a:8d:9b:52:54:f5:61:f3:
         13:8c:fb:98:7e:4e:88:ff:c1:17:e3:6c:9e:20:50:21:37:b2:
         0f:c0:f3:21:5d:8d:69:4c:ef:9e:61:3b:a6:d1:c7:e0:21:4a:
         c6:70:b6:9a:14:f3:5b:59:eb:16:c9:ed:e0:2d:a6:de:a7:15:
         4c:ec:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:00 2026 by rpki-client