Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File:                     BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier:          1Uck/FU7lnFbvwySnOjkw6FV/qGsNY72Jg9yWpp5oNE=
Subject key identifier:   5C:87:D2:EA:90:39:93:93:C7:93:29:CF:22:08:EC:57:B2:F8:55:83
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer:       /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial:       019F8FB4D055EF50D9907E9FA5BDEFF9464E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number:          03CB
Signing time:             Thu 23 Jul 2026 16:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:19 +0000
Files and hashes:         1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: ANyT1CcisigO4wdb7T2zlJwa6pknEVsypPWlAiqsYX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:d0:55:ef:50:d9:90:7e:9f:a5:bd:ef:f9:46:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
        Validity
            Not Before: Jul 23 16:00:19 2026 GMT
            Not After : Jul 24 16:00:19 2026 GMT
        Subject: CN=5c87d2ea90399393c79329cf2208ec57b2f85583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:07:1c:9e:4d:ac:10:11:30:97:17:85:fe:
                    63:fd:29:f8:ac:5d:89:2e:a7:c1:bd:f1:14:3c:db:
                    08:2e:2a:b8:38:16:72:24:2a:93:40:42:6a:4a:66:
                    08:67:df:35:41:b9:36:ee:17:ba:cd:36:d8:d9:72:
                    ca:f0:4c:bc:f4:39:8b:6e:39:05:a4:2d:8b:4b:b4:
                    2c:9e:7d:28:e2:4a:9c:9e:95:57:0b:7d:75:a1:45:
                    fd:83:11:28:97:83:66:6c:25:d7:f8:1c:52:67:51:
                    15:18:34:70:b8:d0:e5:c5:a8:9c:fb:34:bb:57:a7:
                    77:4b:74:29:5d:5d:e2:4c:b4:b1:cf:9d:34:3e:6c:
                    2d:e3:d5:05:35:42:0a:2c:37:2b:36:80:56:bf:d8:
                    12:14:7f:9b:49:29:5a:95:69:f8:87:a3:b3:3a:1b:
                    53:c9:97:c0:8d:a1:98:a4:c3:e4:92:c1:05:47:28:
                    15:97:b0:1b:8e:ee:10:75:82:6b:16:da:c0:92:e2:
                    21:21:a4:b0:f9:d5:c4:48:4f:ea:28:ad:60:1a:c0:
                    19:73:6c:9a:53:1e:3c:e3:d3:46:6f:45:ed:55:68:
                    c0:ff:1b:60:e0:09:2c:4f:80:17:91:9b:42:64:b4:
                    42:fc:76:a9:e8:5b:48:9a:f3:d2:6d:63:9b:6d:0a:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:D2:EA:90:39:93:93:C7:93:29:CF:22:08:EC:57:B2:F8:55:83
            X509v3 Authority Key Identifier:
                keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:c7:62:c8:75:e3:17:b7:c7:0e:75:54:d6:8b:ed:3b:cd:
         78:7b:91:84:09:d2:5a:4b:bd:72:81:b2:d5:98:0b:ad:8d:65:
         69:0f:c5:f0:50:bd:83:df:e2:a4:ce:8a:04:6d:ad:93:3a:3d:
         c6:7e:f0:56:6f:fd:bb:36:a5:2a:71:60:41:c2:1a:a4:7f:75:
         12:4b:65:95:c0:af:df:85:b2:18:6a:ad:69:aa:d7:60:4d:70:
         9d:42:39:63:a7:c2:d8:85:f0:94:56:11:08:2e:8c:05:22:d5:
         92:b4:03:83:6e:33:5b:d8:9e:c3:02:51:51:ab:7e:6e:49:b6:
         f7:98:d5:86:ee:e7:7a:23:95:14:1e:ff:91:43:8a:a6:91:3d:
         8a:94:3b:ba:f4:17:c6:a4:43:a4:df:d4:74:cf:e9:6b:4c:30:
         ed:b1:29:0e:61:f8:91:4f:18:ea:e9:a2:06:de:1c:9e:20:38:
         9d:09:4d:1c:ba:b6:78:3b:9a:96:d6:28:30:77:e2:e1:f3:2a:
         f1:f5:ba:30:db:e8:68:3c:d4:25:44:0e:27:f0:23:05:d3:d2:
         f4:2b:03:44:33:73:ca:b8:66:60:14:dc:73:bd:19:ca:fa:37:
         55:c0:ef:6e:1e:ba:35:26:b0:3f:a3:5d:55:af:60:b5:72:3a:
         b8:8d:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:46 2026 by rpki-client