Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File:                     BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier:          T7LfTxkOEO107Ne2lQ/zC/KN08c0D/H6eVCmBR7IUVg=
Subject key identifier:   18:03:5D:2D:4B:E9:A4:7A:28:42:2A:70:5F:3A:49:D0:7C:8C:D6:6A
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer:       /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial:       019FA9AC2C0A22F2D9B10B1A0F3F0872AF54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 17:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:00 +0000
Files and hashes:         1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: oxZ2gpJQoRbrQrn/id6UYBzFZFvj2SgYXFWgUiZaXBE=)
                          2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:2c:0a:22:f2:d9:b1:0b:1a:0f:3f:08:72:af:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
        Validity
            Not Before: Jul 28 17:01:00 2026 GMT
            Not After : Jul 29 17:01:00 2026 GMT
        Subject: CN=18035d2d4be9a47a28422a705f3a49d07c8cd66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:39:b9:ba:f0:e9:9b:ac:a6:0f:f4:98:28:
                    cc:57:1f:8c:24:70:96:59:92:28:71:9a:5a:f0:28:
                    88:71:ee:85:80:03:92:6c:bd:2a:5e:86:14:43:25:
                    32:78:1b:ff:e4:53:88:a6:21:21:6c:4b:51:c4:df:
                    04:23:51:38:75:33:c9:ab:46:3e:02:d3:66:e8:7d:
                    06:67:99:53:d2:d0:fa:ad:3e:bd:7d:3d:0d:8e:0f:
                    a8:05:21:29:41:9a:bb:4e:35:c4:76:4f:30:44:8e:
                    f0:00:c5:3f:11:2b:d3:9c:a2:10:1c:bd:a6:99:41:
                    ed:28:7e:ab:d8:d2:e2:d8:69:5a:c2:d5:26:8b:e9:
                    2c:39:f9:c0:fe:44:40:a6:1b:c7:e5:b4:65:b9:50:
                    52:77:2f:80:2d:a9:19:92:66:c6:02:a6:56:6a:0e:
                    35:04:80:24:4f:d1:ee:b9:34:a6:8d:ee:29:24:e1:
                    a6:fc:ca:22:ca:3b:23:e7:82:53:14:01:78:e2:d4:
                    03:7e:bb:d5:d0:58:36:de:2c:fc:8c:33:3e:38:02:
                    53:8b:02:99:56:f5:ea:f9:50:79:ca:d2:fa:60:a2:
                    5f:2c:3c:22:3c:4c:21:0b:2e:a8:02:66:95:9a:c0:
                    b8:a8:c5:b9:45:44:26:6a:5b:75:00:3a:22:f3:68:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:03:5D:2D:4B:E9:A4:7A:28:42:2A:70:5F:3A:49:D0:7C:8C:D6:6A
            X509v3 Authority Key Identifier:
                keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b9:b6:b2:fa:f5:b4:9d:c4:e9:3f:bc:a4:8a:14:2f:02:d8:
         5f:6b:dd:6f:63:0f:d4:89:ee:f6:85:40:fb:5c:90:85:08:08:
         15:6c:b9:07:cd:cb:73:a4:92:91:7f:33:15:9b:9d:3d:99:5f:
         40:02:14:f0:07:ef:65:13:d9:2f:49:20:66:8e:11:83:da:7e:
         63:6d:c3:4a:d2:c6:07:6d:13:48:6b:c8:9a:62:be:4d:03:e5:
         50:ad:22:c9:a3:08:ea:11:1f:b8:8d:33:70:c9:e7:2d:8f:5a:
         19:06:b5:43:1d:a8:f3:06:02:12:95:2c:2b:7c:a9:90:01:7d:
         28:35:4c:f6:f5:a0:b9:19:2f:2a:89:4b:f1:98:b0:bd:5b:fe:
         c5:51:12:a6:eb:c4:65:2f:30:b3:20:db:73:9c:a0:c1:6b:b3:
         d9:23:a0:1a:81:77:72:ac:2d:e2:41:1a:db:3a:5b:8f:e4:37:
         56:f8:75:56:c1:73:c2:65:08:6b:b8:e2:18:ab:e0:5d:b6:f1:
         29:07:06:5c:6a:5a:9b:8f:a8:3d:65:09:1e:33:e2:f8:62:e8:
         37:da:4c:b5:f5:ab:8a:dc:ef:a3:f8:24:4a:3f:ff:91:d1:b3:
         c1:d4:6e:c4:e4:98:e2:c4:e2:33:47:bb:37:2a:f6:ac:63:cd:
         52:ed:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:29 2026 by rpki-client