Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          dMGc0KaCSn3AkLcFO6o4VpvD4sjAAv2Wv3DOW4QP3Qg=
Subject key identifier:   93:91:86:2A:0A:B5:64:CA:62:7C:CA:5D:9D:F0:51:CC:1C:62:B8:1B
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       019FAA1A2E983E571F13EEC8AEECE5200DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 19:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:10 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: kg6ErN1d/SAxya8d4nbrVb1DDaHIdmOJP2YMW5EMMgI=)
                          2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:2e:98:3e:57:1f:13:ee:c8:ae:ec:e5:20:0d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Jul 28 19:01:10 2026 GMT
            Not After : Jul 29 19:01:10 2026 GMT
        Subject: CN=9391862a0ab564ca627cca5d9df051cc1c62b81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:24:c5:bc:79:13:63:ed:bd:8d:87:d4:c8:
                    c4:25:c9:2b:f3:1b:75:30:4a:a1:55:f7:7f:57:34:
                    73:0f:fe:70:a8:3b:02:ba:dd:d0:34:31:7a:10:ad:
                    78:7c:f9:bc:45:e2:f0:28:a2:6d:62:51:b9:b5:33:
                    22:6d:bf:90:7e:49:8c:b0:6a:39:a5:74:4b:cf:0b:
                    ae:7c:7e:dd:4a:4a:1d:e9:c5:f9:25:65:1a:9e:90:
                    ba:79:32:28:e4:70:8c:36:08:30:ad:03:33:b5:f4:
                    1e:f1:8f:fa:17:1b:5c:9e:89:62:e2:0c:58:92:83:
                    3e:78:14:eb:56:03:1a:c0:ad:e6:76:43:6c:ab:c9:
                    de:a4:ea:8c:65:51:7c:67:31:fe:65:ff:fa:b2:fb:
                    e4:3d:76:0e:f0:be:11:e1:f8:d9:75:b5:38:ba:bf:
                    72:6b:00:b9:3a:b7:cf:e4:b8:68:ca:3b:e9:7f:da:
                    cd:e4:ad:ab:81:ce:72:18:f5:ba:5c:51:d5:a7:99:
                    af:dd:f7:2d:89:8f:31:ec:9f:47:b7:48:86:29:5b:
                    38:fa:1a:66:40:cd:32:e1:36:63:b2:25:0a:02:a2:
                    55:8d:9f:66:57:a6:bd:83:05:7b:66:f7:05:c7:f8:
                    60:a4:5d:77:bf:26:b0:42:4d:74:31:9d:31:ad:bd:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:91:86:2A:0A:B5:64:CA:62:7C:CA:5D:9D:F0:51:CC:1C:62:B8:1B
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:54:4d:f5:23:a2:0c:e3:24:0f:b4:d7:26:a2:6c:c6:91:30:
         11:f3:6d:4f:ce:19:c5:44:3c:65:fb:df:18:36:67:56:ee:1f:
         d3:78:eb:02:58:cb:e2:e4:2a:f1:2a:6f:0a:c9:4f:4c:ed:bf:
         49:7d:67:1a:3e:85:ca:71:19:9c:3b:94:b4:d1:b5:61:ad:ae:
         3f:0f:2d:78:aa:c3:65:f0:36:27:27:86:37:6d:c2:0d:b5:d1:
         af:18:c9:08:48:e0:7c:74:8a:92:8d:d7:a4:98:1b:da:93:6d:
         f5:64:8e:46:f4:81:aa:62:d4:9c:86:14:8d:56:c6:72:b8:ac:
         2d:93:96:99:5e:da:db:e1:ea:39:04:d2:54:98:4c:e9:7a:08:
         1b:68:c2:f8:16:41:25:ed:52:f9:c9:c4:ec:44:2b:d9:37:e8:
         38:2a:63:8f:9f:ef:6e:50:4f:17:91:ab:51:95:2f:5a:7b:fd:
         37:8b:75:7f:4f:03:1c:bb:d7:e2:ab:9c:0f:4e:45:2d:13:3a:
         fd:32:61:2f:b8:e4:75:7a:55:be:99:10:4f:93:8f:40:9a:f2:
         fc:29:a3:29:ba:b8:1c:54:2f:af:fc:07:c7:d3:c5:66:2c:ea:
         32:b6:ac:0e:6d:11:da:36:ed:94:4d:d4:a3:45:ef:27:ae:20:
         a9:64:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:21 2026 by rpki-client