Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
File:                     Bniec33m9e44cJOhO7kg4vjru4c.mft (raw, json)
Hash identifier:          JR5lBXVaTPyxzHKyhgULzHEJNxzCe+CsUH1KeaKejSI=
Subject key identifier:   1A:E3:28:9E:38:84:2C:30:38:51:C1:02:95:21:63:C2:3D:80:E2:DA
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Certificate issuer:       /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial:       019FA89929FF87859CEDD550145F8AEB596B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:37 +0000
Files and hashes:         1: 6-mGNtFvVv4bRX0dlAATOAXlSn8.roa (hash: 0WO6bDFjJSymIjA6OXueaw2A6exvPupQPgHT+AxbCio=)
                          2: Bniec33m9e44cJOhO7kg4vjru4c.crl (hash: b9+B3GxCKU19cTBg4s0aY4RvBIjR/x7BL32wIkpVB4w=)
                          3: MV5wwFzOHyjDe6pu8ZqU7KIQJi8.asa (hash: 1pqiqkET+K5CP0VTo+0H37vmscq55TbWpuBZIelfTAU=)
                          4: SBa_meSA36HXFsjD_RIbWMn9xQI.roa (hash: EdE7JSBny/awWzg8i3vFdNMbdChaGR5jW5k8vNopIlk=)
                          5: XH3KP8p8M1TTHVBg2ttIxJywgAw.roa (hash: ULlHL0+lL/r/GnXR9N9w6rO0qtS6xwIEQqb9F70nBQA=)
                          6: XbveJAeqDDs106lGs99HsrZ_Fqg.roa (hash: A18dZoqdUcbIqo30HuYitMDack0pNdwoScuJ/CigWsw=)
                          7: Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa (hash: znZW9Q0y62rcsMH+6OqX4t80H0K8FKMbQa9zE+wyH0k=)
                          8: ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa (hash: klqqBPeOruXdOkHRPI1j3EwT9LC1T/WC+8cjVI4eguQ=)
                          9: o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa (hash: Ru9xVFn4F+xip63EFvMxQyrGr8GDfyz1+ruTaL9X4/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:29:ff:87:85:9c:ed:d5:50:14:5f:8a:eb:59:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
        Validity
            Not Before: Jul 28 12:00:37 2026 GMT
            Not After : Jul 29 12:00:37 2026 GMT
        Subject: CN=1ae3289e38842c303851c102952163c23d80e2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:a8:87:ba:4b:64:13:cb:02:92:36:9a:bc:
                    99:2f:d7:89:90:7f:9e:3e:37:84:d0:ec:bd:67:b4:
                    dc:4e:d1:d4:8c:6e:9b:12:5f:c6:99:12:78:09:55:
                    2c:e9:33:11:7c:89:14:ca:03:fb:aa:e4:91:08:00:
                    68:c7:95:63:a5:0b:4c:33:75:7d:75:d1:2a:e8:75:
                    6e:e8:48:d1:0e:ff:ac:26:12:6e:3e:5c:27:48:33:
                    1a:66:32:62:a6:af:51:00:91:3e:78:2b:d3:b7:27:
                    bb:42:14:e8:22:95:b1:9e:f6:d1:61:d3:ee:53:c5:
                    2a:2e:d7:af:1c:22:1c:91:d3:4d:ef:61:80:d4:74:
                    bd:ed:65:4e:5d:fc:6e:4d:5f:43:5e:7e:b6:d5:ee:
                    4e:44:98:45:4b:f3:04:09:41:84:b9:06:33:74:04:
                    a3:ed:d2:99:77:b5:85:84:c3:23:b7:a8:0e:4a:5f:
                    7a:41:aa:e8:7c:e0:51:25:ff:9e:37:ce:7c:21:7d:
                    0d:3d:1b:97:bb:67:ea:bc:9d:83:e9:04:ef:46:06:
                    a2:69:ce:fb:a4:2e:99:5c:96:93:5e:2a:44:2a:38:
                    09:f5:05:df:88:66:5f:34:7e:fe:11:ef:45:dd:c2:
                    1a:2c:c3:89:11:03:f7:42:0a:7b:1b:45:c7:07:b7:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:28:9E:38:84:2C:30:38:51:C1:02:95:21:63:C2:3D:80:E2:DA
            X509v3 Authority Key Identifier:
                keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9f:95:b8:31:36:30:75:d4:60:58:1d:9e:bc:c3:f0:bb:95:
         08:c6:c0:e4:05:05:a5:68:20:38:3a:e2:d2:fe:ac:2e:c6:a2:
         56:8a:9f:fa:70:6c:b9:db:00:8e:e6:51:b1:0e:10:9b:79:43:
         34:ee:0a:d3:78:5d:1e:27:27:54:99:c8:58:ba:9a:65:97:91:
         da:29:c5:0e:95:13:01:91:92:78:5c:3f:2e:86:af:f4:52:71:
         49:50:59:bc:f6:d4:ce:c6:a3:16:b5:bb:36:3e:3f:7d:0a:41:
         af:da:81:e5:c0:a7:1a:06:c7:a0:f5:eb:a4:39:a0:e3:dc:43:
         e7:57:a4:f3:3c:01:cf:71:54:87:74:c7:d2:40:f3:da:13:4d:
         2e:9e:84:10:64:91:73:af:39:77:c8:48:a7:50:c2:21:b5:35:
         16:fd:93:cf:16:c3:99:b5:10:01:f2:67:3b:b5:b3:e6:76:36:
         93:7a:30:68:5e:c8:aa:77:8b:07:bb:54:56:6f:04:83:95:bf:
         49:45:48:90:be:2a:99:e8:1b:75:fa:ec:25:85:30:9e:30:1d:
         b6:9d:07:91:dc:b5:e2:81:f0:e2:a9:04:71:83:ed:47:33:bb:
         e1:39:ff:24:ed:5b:b2:ad:9e:14:a7:f5:01:76:07:6c:dd:c9:
         eb:ba:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:06 2026 by rpki-client