Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          ulmCLIuaERdkhDaJTLHlayhJdE1BJ/sJ51bePLz6TxE=
Subject key identifier:   DE:0F:1E:E2:15:78:A3:30:F5:3F:37:04:EF:D6:4C:CD:42:1B:F8:C2
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019FAB63761F962EBB217AE36587BB45F903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          19DD
Signing time:             Wed 29 Jul 2026 01:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:49 +0000
Files and hashes:         1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=)
                          2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: tSvXk0Lz8kppyhUdvm3nISf70YTLSqNs1QgBeRRWUfE=)
                          4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=)
                          5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:76:1f:96:2e:bb:21:7a:e3:65:87:bb:45:f9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Jul 29 01:00:49 2026 GMT
            Not After : Jul 30 01:00:49 2026 GMT
        Subject: CN=de0f1ee21578a330f53f3704efd64ccd421bf8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:e7:46:ea:14:e9:9f:fb:aa:fb:f8:f6:65:
                    37:07:a0:e2:78:93:5e:c2:83:8d:26:de:7c:43:09:
                    97:a3:7b:99:83:13:23:ff:28:e6:55:fd:e6:95:56:
                    b3:9c:a2:66:88:ec:61:a7:ce:52:2e:8a:ab:3b:41:
                    09:51:94:ae:7e:dd:3c:12:56:6c:d7:ae:50:46:ca:
                    3c:dd:97:23:e3:5a:c8:60:eb:66:a3:f7:a9:c4:3e:
                    5d:4c:bd:67:3a:cc:11:2a:1d:5b:e9:e6:9d:63:ec:
                    20:79:4e:df:9e:9f:e9:98:d7:0d:24:ca:16:44:fc:
                    44:2c:d0:ca:83:aa:51:23:35:f1:7b:43:a6:5e:55:
                    fd:c1:16:4d:18:95:90:e7:0a:36:d9:c7:eb:7f:a6:
                    d2:73:5e:89:5c:41:91:11:0b:f5:b4:f1:8c:e5:4d:
                    2a:6c:b2:db:a2:61:b8:c0:47:98:cc:7d:14:ee:06:
                    0b:8b:61:50:76:ee:14:93:1b:89:c1:fa:cb:63:3d:
                    28:24:5f:89:b6:bd:07:12:18:5d:96:5b:be:3b:6c:
                    08:9e:3b:63:89:50:da:b2:97:10:f8:1e:12:a6:89:
                    eb:2c:08:a9:63:9b:e6:b0:7f:0b:e1:74:41:61:50:
                    27:8c:1f:6b:bd:97:de:bc:d1:36:6d:f3:b7:f7:14:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:1E:E2:15:78:A3:30:F5:3F:37:04:EF:D6:4C:CD:42:1B:F8:C2
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:02:50:0d:41:93:00:92:4d:2b:dd:e6:11:f8:2a:d0:e9:44:
         cc:fd:3a:b8:6a:f0:81:91:d5:7c:c7:ea:1f:a1:0d:75:84:7e:
         41:d5:22:a6:88:ea:57:89:81:98:2c:e6:ce:54:6b:b2:b0:98:
         8c:c6:2f:2d:4a:66:dc:40:dd:4b:83:65:52:fc:e2:51:46:b1:
         dd:82:d5:05:f7:b9:c6:69:79:7d:33:66:36:8f:fa:62:69:62:
         23:8c:5b:96:af:8a:2c:57:04:9b:66:6c:77:d0:66:b7:55:6a:
         dd:43:0d:18:b1:b1:d6:21:78:fa:81:d0:02:52:86:80:43:87:
         fb:a9:76:e6:78:eb:3a:f5:60:9e:50:61:d0:ba:02:d3:e2:69:
         a0:cb:da:5f:40:86:48:75:a9:fd:6c:f4:26:42:e1:40:92:21:
         7a:8b:c9:b3:b8:3b:3e:fb:c3:86:da:82:94:d0:cc:49:a2:ac:
         a8:f5:bb:64:23:f0:26:79:c1:bb:31:5b:fb:98:4d:6b:59:5f:
         0b:ce:0f:a9:b0:b0:3f:a4:2c:9d:7c:a7:fb:cc:10:a1:b3:55:
         8c:2f:fb:7c:1b:c4:0d:a5:c1:02:b4:1f:95:73:dd:00:83:4c:
         de:e2:e1:a2:b7:51:ab:32:3c:ff:63:ef:ed:23:52:2d:98:09:
         c2:41:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:05 2026 by rpki-client