Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          GhwX9MsDtEJht666Z0iHzVv9tvNmzWWJEG8Q3D66lP4=
Subject key identifier:   5A:C0:BC:FF:EF:A1:F5:B3:6D:08:3A:0C:0C:41:0E:B2:B7:BF:4F:01
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019F8FB5872CCA80DD0E83FC8A919087DD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: 7dkT52jF+1QufUIC7jVMd+jfwEdlKVe4JpWxAxmLaEE=)
                          2: tcbkNHlV278WuPIHWR3nno0tNIU.roa (hash: 06lnHiwHQVCyQQPbik2oG2DAxVKNgLZC3M/2kyqLgGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:87:2c:ca:80:dd:0e:83:fc:8a:91:90:87:dd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=5ac0bcffefa1f5b36d083a0c0c410eb2b7bf4f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:c6:1d:43:08:8a:aa:93:96:61:97:0e:2a:
                    7c:84:77:c1:7b:72:f9:54:c5:37:fa:70:60:55:1a:
                    8b:b2:52:72:90:28:1f:ee:b1:50:b6:84:58:ec:32:
                    48:cb:94:7a:c0:40:4a:66:08:7b:52:52:de:9a:ba:
                    bf:bd:f4:e6:7f:c1:7e:e5:27:10:45:d9:d7:ba:a7:
                    65:98:5a:6e:92:5b:9b:41:89:dd:e0:85:d0:5f:06:
                    0d:51:04:d7:d1:2b:d7:97:94:06:17:dc:f1:2c:5b:
                    c3:de:6d:9f:84:3c:ed:eb:90:ba:2a:c1:56:8d:8b:
                    2f:c8:11:c5:1d:d6:8d:26:b1:18:14:e4:0e:16:fc:
                    79:7a:81:e9:68:b6:ca:7a:21:7c:b7:17:b6:c6:4f:
                    b9:f8:d5:ab:42:55:05:18:92:64:0e:17:b0:eb:59:
                    31:65:26:9c:e4:05:85:0c:10:1d:8f:88:e5:b1:50:
                    d7:21:38:00:de:ed:f3:2d:6a:23:a7:84:32:09:08:
                    1b:9b:ee:83:82:af:8f:69:fa:c5:20:9b:63:76:aa:
                    e9:30:d2:56:f0:c2:6e:8f:96:ad:86:11:d1:e1:fb:
                    73:3b:55:ca:8f:3a:97:e3:db:69:29:cc:16:87:bd:
                    af:57:9b:ce:e9:aa:e1:b9:06:8a:88:73:33:af:17:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C0:BC:FF:EF:A1:F5:B3:6D:08:3A:0C:0C:41:0E:B2:B7:BF:4F:01
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:d7:1f:75:2f:7a:6a:89:04:66:d1:04:70:26:1a:67:5e:
         58:f7:e3:77:27:56:c0:51:e4:30:44:de:f2:7b:8d:df:cc:e5:
         41:df:ee:2a:66:eb:3f:a7:db:1b:5c:52:81:9a:47:c2:4a:f4:
         b4:de:04:c5:04:54:bf:fe:f0:89:04:42:35:19:ff:d8:c5:00:
         aa:23:6d:31:fd:a1:08:01:54:61:13:42:7e:0a:31:21:af:0d:
         eb:65:ec:00:84:90:67:a6:a3:e1:57:e8:ae:c6:d6:05:83:e5:
         49:cb:c3:81:30:67:24:56:d1:5b:5e:59:97:6b:b4:79:d0:af:
         bd:9a:ab:99:36:4f:28:91:91:d9:6c:fc:7d:01:d0:ef:90:db:
         f7:1f:7a:46:4e:47:99:91:cf:b9:a5:2d:2d:f2:7a:b2:8a:cd:
         d9:cc:86:d0:e5:8f:00:34:9f:9d:fb:ed:0e:0b:4d:d3:06:4e:
         e3:e6:49:2a:e3:54:60:2b:17:09:a2:8c:c7:c0:39:e9:a9:ec:
         44:1d:91:67:4a:d7:02:70:63:90:8c:82:e9:ea:1c:4f:bd:c2:
         36:07:28:eb:d9:b0:9b:08:d1:fd:a8:99:05:68:7e:0c:17:82:
         f6:7a:ec:78:da:38:92:4e:dd:f9:63:5a:3b:f5:b9:59:a3:d6:
         fe:55:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:15 2026 by rpki-client