Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File:                     BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier:          UMgPnfyXS3TSDDRW+Q7SXuqNVm1g7vl0SwEnEZKas7Q=
Subject key identifier:   FC:1F:99:E1:95:D1:14:9F:BF:B8:2B:CE:BE:84:2F:2F:A0:44:1D:7B
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer:       /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial:       019FA9AB88C50E5EAFE2BA79C9B2CEE12B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number:          19E4
Signing time:             Tue 28 Jul 2026 17:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:18 +0000
Files and hashes:         1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
                          2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: 4oBYl8xXL5DnubbpxaziHp4lhaIrPyRL4X9Rev7IHtY=)
                          3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:88:c5:0e:5e:af:e2:ba:79:c9:b2:ce:e1:2b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
        Validity
            Not Before: Jul 28 17:00:18 2026 GMT
            Not After : Jul 29 17:00:18 2026 GMT
        Subject: CN=fc1f99e195d1149fbfb82bcebe842f2fa0441d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:4d:52:f5:8c:33:d5:3c:2f:81:79:bf:f3:
                    f2:e9:ef:1a:fc:8c:a4:9c:64:76:86:d5:16:35:70:
                    f2:d5:86:cb:6f:df:e4:c6:6f:b3:81:ef:12:10:38:
                    a4:7e:dc:7b:6c:aa:48:a1:d0:bc:92:d8:de:57:8f:
                    88:62:16:9b:25:c6:a3:54:a2:7c:4e:5f:d1:21:c7:
                    f3:17:d1:3f:e6:a0:89:43:c2:65:6c:83:0e:36:08:
                    35:29:e4:cc:a3:e3:3a:15:1f:d2:58:84:65:b5:04:
                    18:4e:cf:de:fa:37:2a:32:0f:21:63:1e:fb:dc:32:
                    49:d3:07:14:b0:87:b7:c2:f2:0d:a1:3f:87:55:b0:
                    64:d6:30:84:48:9d:67:fe:f3:5d:3f:96:d7:eb:dd:
                    de:d2:a0:26:96:2c:b5:0d:ec:f3:cc:c6:ac:d5:fe:
                    a1:0d:ac:38:ee:58:31:70:17:54:4a:01:6f:f4:8b:
                    65:aa:85:11:54:d6:74:83:82:2f:fe:3b:f2:d1:f2:
                    89:70:1f:df:3b:99:14:91:9b:57:2d:38:d2:6c:3b:
                    9a:a0:c4:72:1f:c7:89:8c:f5:1c:53:07:de:9b:89:
                    64:df:96:0c:4b:f4:da:84:b5:c4:3e:1f:8d:6b:1d:
                    76:28:d9:bf:cb:49:fc:c2:bc:9f:32:86:e2:bc:46:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:99:E1:95:D1:14:9F:BF:B8:2B:CE:BE:84:2F:2F:A0:44:1D:7B
            X509v3 Authority Key Identifier:
                keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:b9:b8:1e:72:19:6e:94:df:5d:9d:0d:14:ee:f8:22:2f:
         04:23:df:d9:f4:38:ab:6a:2b:cb:65:ca:54:3e:ef:52:07:a3:
         bb:0c:b0:38:d1:67:8b:44:26:57:41:a9:90:60:b2:a6:9d:fc:
         c1:c1:5b:dc:0d:4c:41:cb:b9:a0:07:f2:10:4a:7c:73:41:4d:
         5b:f0:7b:3a:30:a7:f5:c2:51:f8:2a:e9:e4:ce:6b:48:9d:35:
         e1:7b:ae:5f:48:06:90:fb:d5:c8:18:c6:88:86:c7:fd:27:34:
         fa:3b:a9:c6:e8:bc:b3:5b:af:c2:34:a1:cb:35:07:bf:f4:7b:
         bb:6c:fe:45:b8:9f:65:ac:d3:52:19:47:90:fb:bc:9b:ef:74:
         53:34:6e:7e:50:98:64:54:f7:9a:81:0b:97:0b:cc:f9:0b:c9:
         48:c3:39:c9:c3:92:e8:6c:37:f4:bd:44:63:4e:76:ae:6a:65:
         19:2f:16:59:a4:1e:f7:fc:cc:05:c1:05:63:ab:bb:98:d2:1a:
         a3:83:f4:55:99:c3:57:52:28:10:e4:51:8e:c6:c8:3c:69:09:
         58:e6:43:29:c9:87:90:f7:65:2c:17:72:47:4c:7a:75:08:db:
         e6:23:e0:ce:11:08:3d:b3:7a:be:d5:3c:09:f4:f1:e2:40:59:
         ee:99:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:32 2026 by rpki-client