Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File:                     bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier:          JbrM1zmCDbL3Z0U4Hwcy1ijDjJMg4s6EAffMg+db/FE=
Subject key identifier:   05:B4:A1:E5:5C:E5:1D:CA:10:6E:C8:49:AF:E2:BB:D9:7E:9D:7E:15
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer:       /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial:       019F8F7ECD968A2EB1A4C33C2A9BCF06B2A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:19 +0000
Files and hashes:         1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
                          2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
                          3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: VGWB/v4MPYWKQwtQdhhOwM7KrC/SVYdMDbL0V7ldqYA=)
                          4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
                          5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:cd:96:8a:2e:b1:a4:c3:3c:2a:9b:cf:06:b2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
        Validity
            Not Before: Jul 23 15:01:19 2026 GMT
            Not After : Jul 24 15:01:19 2026 GMT
        Subject: CN=05b4a1e55ce51dca106ec849afe2bbd97e9d7e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:46:2f:22:f0:8d:17:00:67:3f:75:c8:fd:
                    aa:66:7a:b1:d3:c9:c0:17:01:20:d0:f0:9c:6f:73:
                    93:3f:36:8b:f1:cd:13:2d:5b:92:03:b8:cc:61:06:
                    97:8b:66:c2:eb:39:87:33:60:b6:49:67:4b:96:06:
                    77:b1:20:15:ea:d6:ca:ce:02:e2:a4:19:41:c7:ce:
                    ec:3e:fd:58:af:40:52:e3:c4:b8:48:48:98:d5:97:
                    20:9c:5f:45:a9:7f:60:fc:b0:da:41:38:04:6f:be:
                    42:58:20:15:ba:52:b0:6c:8d:98:5c:72:9e:bb:24:
                    49:0d:eb:3f:85:1d:81:61:9c:1c:86:61:21:21:2b:
                    25:ee:94:34:42:42:ba:e0:dc:4c:3d:70:ab:e5:96:
                    d8:ec:71:b4:67:44:9e:6c:9a:1f:11:12:c9:1c:15:
                    c6:dd:91:98:ae:03:3c:8f:60:f6:ff:0e:8f:05:39:
                    f7:bd:b5:0d:13:8e:e4:ad:7e:7f:38:6d:06:47:31:
                    ea:30:9d:ea:f7:8e:e0:f9:72:86:6c:66:c7:13:89:
                    61:55:1e:4f:65:fc:a9:3c:65:ea:cb:4b:e6:4f:65:
                    62:9b:7a:b7:f8:93:6c:64:61:d0:05:df:8a:4e:67:
                    c8:b4:0c:e6:58:80:16:7c:25:be:93:3c:fa:38:0a:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B4:A1:E5:5C:E5:1D:CA:10:6E:C8:49:AF:E2:BB:D9:7E:9D:7E:15
            X509v3 Authority Key Identifier:
                keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:55:50:a2:f4:a7:9d:1a:d3:ed:45:03:13:0b:18:fc:ea:8e:
         33:2a:c2:e0:0a:5e:2c:de:46:33:26:b3:b4:e4:21:9d:d9:4a:
         e8:b0:83:07:cb:58:33:ff:05:91:c0:b6:0d:a5:e2:34:b8:82:
         ac:66:9a:fd:25:4f:cf:05:62:ad:59:d2:c0:38:7b:09:96:c3:
         1f:28:97:c9:b9:db:df:33:51:f3:85:de:f4:cf:f9:5c:4d:63:
         e3:0e:b9:cc:5b:ab:a5:37:6d:ac:0e:3d:4a:e8:7a:f7:e7:ae:
         39:b8:4e:a1:65:d3:7a:15:bd:c7:67:78:54:17:1d:c8:af:af:
         6d:3c:5e:c7:0e:18:e9:f2:43:2f:f6:6f:e4:02:8e:be:49:05:
         a5:ca:d3:ff:15:43:44:28:29:d8:e8:4a:39:ea:8f:f6:b4:9b:
         e5:2a:0f:b3:28:59:8c:d9:be:46:4c:51:83:86:05:88:a6:2a:
         16:a2:96:f4:53:f1:3e:77:00:82:53:8c:6b:f7:e6:99:1a:f5:
         48:31:3f:8b:fd:ee:4f:98:e4:3e:bf:72:23:2b:bb:b8:1f:64:
         4e:40:0c:1d:02:1e:8b:e4:6a:d5:12:22:a6:5b:e4:ac:b7:ef:
         2d:e4:f2:29:8c:e4:c1:9d:fc:b6:39:b3:8c:e3:a4:fb:51:c4:
         9b:31:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:27 2026 by rpki-client