Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          xglH8nf5zxDPf0TfP9UCSlGbLXNd32oF2v7fgAZ4xpM=
Subject key identifier:   FD:35:CD:85:E7:A3:63:3A:17:AA:8A:6C:CE:76:88:B7:DA:9E:0B:9B
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019FA9AC72DD161C40FB6CF76F8CDFAAAD56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 17:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:18 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: tTM6VteGOgzCkaflh/GmU0r1CqtBz9Uskh/zML9yNx4=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:72:dd:16:1c:40:fb:6c:f7:6f:8c:df:aa:ad:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jul 28 17:01:18 2026 GMT
            Not After : Jul 29 17:01:18 2026 GMT
        Subject: CN=fd35cd85e7a3633a17aa8a6cce7688b7da9e0b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:c7:b6:10:6d:0e:9e:93:29:28:14:75:8e:
                    89:9a:12:89:ad:f9:58:26:d0:74:27:6c:86:fa:36:
                    34:44:e5:b5:14:a3:a1:c2:b5:30:c4:27:88:41:0c:
                    31:1b:c2:27:bd:8f:dd:44:d1:d9:7e:62:6f:1d:9d:
                    a8:30:cb:da:e9:1d:46:9c:51:3a:88:a4:10:79:04:
                    78:7a:72:3d:3e:66:27:2f:85:44:c9:06:32:e9:f1:
                    cc:4b:90:dc:32:f6:c2:29:6d:2c:e4:2d:87:4f:e6:
                    b6:1f:bf:4b:61:68:8e:84:9b:df:38:62:bf:8f:a6:
                    5f:20:a9:65:98:46:05:72:7a:ec:29:12:85:df:af:
                    2e:a1:7d:9f:cd:0d:97:64:7b:5a:88:51:c2:63:df:
                    59:f0:58:c1:92:8a:c9:ce:82:0b:1d:ca:41:4c:d4:
                    67:8d:a0:1a:55:08:36:ac:b8:a7:ea:fa:cb:37:f2:
                    09:6c:ba:b0:31:d8:6b:14:5b:e5:ec:5b:a0:dd:8a:
                    8a:2f:00:ab:2d:e0:ad:fb:a5:d5:f0:f0:1b:0f:fa:
                    02:59:75:69:f9:d1:1f:1f:42:9a:34:2a:a8:87:f9:
                    f4:e6:e4:01:ee:7a:bf:2e:37:cb:c4:5c:76:85:10:
                    9f:d4:c5:ae:58:ee:70:ab:7a:1a:9c:d6:5d:41:b8:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:35:CD:85:E7:A3:63:3A:17:AA:8A:6C:CE:76:88:B7:DA:9E:0B:9B
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:d5:1f:7c:f5:97:4f:f7:52:9a:db:d1:0b:59:53:d8:a3:
         10:60:36:cf:bd:15:0e:ed:94:3b:0a:db:f6:da:84:0d:46:60:
         95:77:e5:9b:3b:7f:e0:1e:23:8f:31:bc:df:09:c0:44:ea:19:
         5c:36:8d:de:03:4c:ae:8c:3e:93:17:c4:33:3a:e9:e9:41:d9:
         9a:33:30:21:2b:53:c2:3d:0c:56:a9:28:c0:92:6c:16:ad:6d:
         cb:6f:c4:d8:00:39:46:6c:e8:18:0f:83:d0:b8:25:14:5a:ec:
         bc:9d:27:b5:7f:41:60:7d:d6:e9:57:24:d2:cc:6a:74:ba:be:
         06:fc:b0:ea:37:8e:15:70:4a:1a:7f:fa:fa:47:c8:51:cd:48:
         c2:20:83:75:d5:4c:41:75:fa:4e:18:ad:57:c2:48:c3:4e:3c:
         a9:1a:c4:0b:c8:db:d5:6c:c5:3a:b6:61:40:91:cd:48:a3:3a:
         ed:a3:69:09:cf:14:22:79:95:0a:fd:7c:35:e1:e8:63:90:d6:
         0f:da:e5:f9:48:eb:fe:73:60:69:a0:6b:2b:20:2a:f2:d2:03:
         ae:30:57:31:36:5e:42:82:12:3a:59:7e:90:3c:1f:a5:ca:1f:
         60:74:79:d1:0d:fa:6a:a3:8c:72:c9:7c:23:3c:57:b3:a5:81:
         63:c0:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:47 2026 by rpki-client