Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File:                     BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier:          nTrVIBogEqN3+lHXdL6BEFZWCFdGySCMGkaGUW4usy4=
Subject key identifier:   06:5C:F2:18:54:23:76:A2:91:B7:44:E5:F6:8B:2F:0C:1A:5D:83:56
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       019F91DA92019CE32B486985DA3C69ADE5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 02:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:48 +0000
Files and hashes:         1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: nADe/Wiax5BMFwgA+OUnyc2bFqBTJYNBDP+5J7uwNG8=)
                          2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:92:01:9c:e3:2b:48:69:85:da:3c:69:ad:e5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: Jul 24 02:00:48 2026 GMT
            Not After : Jul 25 02:00:48 2026 GMT
        Subject: CN=065cf218542376a291b744e5f68b2f0c1a5d8356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:4b:e9:dd:b5:d2:af:e9:f1:df:ed:7c:33:
                    27:45:ac:76:5b:e1:65:6c:1c:3e:02:46:9b:75:9b:
                    4c:83:9b:37:f9:bf:c3:cd:59:e5:8c:45:49:ed:b7:
                    0b:f6:a3:ed:b0:9b:b0:f7:83:14:31:a9:cf:89:fc:
                    3f:af:b5:ea:8f:c5:85:65:cb:2f:6d:44:cf:9e:87:
                    b8:7b:1c:8c:40:d2:76:52:fd:3e:02:e4:d1:10:71:
                    ea:3e:99:2a:cd:f2:0f:36:53:b8:58:b5:e5:a6:36:
                    b9:75:2d:d2:6d:e9:b4:ba:ac:c1:c3:67:45:b5:33:
                    be:bd:18:e5:f6:74:c7:2c:a1:21:d6:72:cd:f7:7f:
                    51:d4:a0:cb:3f:a4:3c:c7:64:68:0c:28:49:55:38:
                    f3:f6:3c:ee:62:c0:78:1f:96:17:9a:54:d2:7d:b4:
                    93:2d:57:1c:0e:b8:37:fb:5c:17:48:40:03:a6:e4:
                    2d:17:f2:31:a5:dd:8c:ab:99:03:46:da:94:94:da:
                    e0:e8:32:6e:e3:83:14:b7:12:28:17:c6:02:0f:a8:
                    ec:54:04:d6:17:67:72:cf:fc:87:ab:10:4f:98:ca:
                    2a:9d:19:6a:c1:1a:30:21:00:cb:28:8f:b8:2a:38:
                    a4:1c:07:72:a4:f6:9c:70:fb:78:83:69:f0:ff:4d:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:F2:18:54:23:76:A2:91:B7:44:E5:F6:8B:2F:0C:1A:5D:83:56
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:09:23:aa:89:16:21:80:12:08:45:c7:81:11:00:3a:07:0d:
         ad:7c:24:a0:a7:b8:91:8e:27:1c:78:b6:39:17:3f:bc:04:66:
         ed:fd:24:4a:31:d3:63:01:42:9b:cd:63:d4:01:d6:09:58:31:
         3d:13:8f:c3:52:f7:10:9d:91:b6:a5:b4:38:c3:ec:0f:f5:92:
         24:46:dc:c3:a1:aa:72:49:bf:e5:36:0b:5f:21:80:b9:e5:42:
         1d:52:3c:c2:0b:80:f8:05:30:dd:12:e5:1e:8f:6f:35:5e:4f:
         d2:09:11:6f:3c:0f:68:13:26:b5:03:a6:ce:93:d3:38:5d:38:
         36:68:92:33:f6:98:03:cc:67:6b:e9:39:5a:26:a3:c7:2b:82:
         57:97:98:92:e4:d4:eb:ce:66:48:8e:92:d4:fb:63:1d:1c:f2:
         34:c8:b4:d1:0a:5d:83:52:38:a7:36:3a:a1:09:20:b4:11:f0:
         44:9c:2c:f9:65:1a:28:c0:07:ba:60:c9:8f:97:33:6a:f7:32:
         5f:c4:4a:dd:fd:97:26:34:78:1d:c1:5a:14:08:be:c9:67:9d:
         66:e9:64:1e:b5:85:07:08:f0:7d:4f:28:3a:88:fd:45:37:b9:
         02:19:07:98:a9:7a:5e:80:e0:56:c5:c7:39:4d:0e:09:1a:c9:
         cc:c0:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:30 2026 by rpki-client