Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier:          W+NSBCbJAsik/2Jz3ALcPiWnxYFr56GLdJNi6yckBms=
Subject key identifier:   62:07:3E:D3:07:CD:72:19:43:19:F5:60:21:58:B7:56:DD:0D:32:BC
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer:       /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial:       019FA8CFF719DA7E8A3FB6C50C973D588626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:29 +0000
Files and hashes:         1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: LLOyzFMQBqZ0703N32K4oI0OP2qUsjjd9DdSBwvyUlc=)
                          2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:f7:19:da:7e:8a:3f:b6:c5:0c:97:3d:58:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Validity
            Not Before: Jul 28 13:00:29 2026 GMT
            Not After : Jul 29 13:00:29 2026 GMT
        Subject: CN=62073ed307cd72194319f5602158b756dd0d32bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:dd:af:1f:ea:2f:fc:5c:8d:41:06:33:68:
                    50:14:74:8b:62:e7:d6:cc:92:13:84:e0:eb:6a:35:
                    01:17:2b:ed:1b:91:73:1a:46:3a:7d:a5:91:3d:78:
                    17:ac:e2:b9:7d:27:40:fb:16:88:2b:09:a8:4d:d2:
                    82:da:72:bd:e2:06:76:14:d6:26:b8:03:49:bf:b4:
                    63:e2:73:ba:00:78:20:6f:52:7d:13:de:9a:09:39:
                    13:61:42:bd:05:43:5e:6d:09:f3:6d:f5:f1:ed:31:
                    1f:83:db:2b:86:6e:6d:cc:0f:8e:98:1a:c6:36:05:
                    a2:85:6f:34:29:0e:5c:11:db:e3:fe:a0:78:ee:f3:
                    4a:88:7c:82:28:8b:35:37:81:88:4a:2f:6f:60:06:
                    a0:6e:a4:54:bb:90:5d:5d:ed:e9:d2:71:07:3c:26:
                    7c:45:df:fb:b6:f2:7c:cc:7c:78:35:e3:69:4c:6c:
                    ea:3e:6c:1f:a6:5f:04:d8:c8:af:e0:be:6f:de:bc:
                    d8:aa:00:31:38:c2:a6:af:6d:cd:f2:d6:96:e1:3b:
                    78:75:66:7d:33:2f:3d:94:74:12:2d:09:41:5f:f8:
                    d3:5f:b0:b5:ac:a7:63:bb:70:d5:4a:d5:15:73:c9:
                    31:3f:79:17:c9:5d:3b:6f:82:29:9b:4e:a4:92:b6:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:3E:D3:07:CD:72:19:43:19:F5:60:21:58:B7:56:DD:0D:32:BC
            X509v3 Authority Key Identifier:
                keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:09:79:06:28:78:fc:f2:3e:7b:03:d7:bf:f5:c6:75:0d:
         89:27:bb:de:23:4c:64:72:c5:b2:86:41:eb:3d:e2:19:cf:da:
         77:39:de:10:87:81:f5:f4:29:13:84:c5:f4:d4:0c:32:11:fd:
         cf:ae:68:eb:f4:18:0c:50:46:57:36:2f:70:5e:0a:eb:80:b3:
         96:bc:c4:aa:ec:e8:14:0f:5a:96:4c:fe:f9:19:a7:f5:6f:e4:
         76:13:b4:0a:5b:0e:09:4e:6b:10:34:3c:b9:04:52:b8:e4:ff:
         d0:e7:04:24:41:6e:4f:3f:e3:98:5e:a7:ee:2b:b6:c1:d3:ac:
         76:18:2c:07:1c:c1:30:09:73:0a:54:df:9d:8b:5c:c4:3c:b6:
         06:de:b6:2d:a5:7f:cb:23:6a:29:92:93:f4:9a:a3:09:00:82:
         2b:e8:6e:60:78:54:d7:ee:d4:95:f1:70:3f:78:ee:b9:1f:1d:
         07:13:32:8c:1f:35:ad:91:f9:e4:b3:52:e0:47:fd:91:fd:5c:
         f1:d6:45:7c:d6:ae:de:d4:91:c1:ef:ed:e5:cf:71:13:d6:42:
         a8:ef:b9:0e:03:15:04:76:ee:67:f3:69:f4:6b:91:b0:d0:3d:
         78:25:ea:f0:58:8a:00:60:fc:92:f2:1f:41:1f:6a:3a:95:f2:
         a0:82:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:40 2026 by rpki-client