Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          gPOGJIbEcqhbzy6m0AqBvTeshmu5Di62ejNvxyzW05A=
Subject key identifier:   EF:65:40:27:9A:08:BB:85:87:7C:3A:AF:97:8C:86:95:74:0D:58:25
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019FAA1967059EE001C12595AE9542FFC479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          0907
Signing time:             Tue 28 Jul 2026 19:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:19 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: cF3ILp0LQZyNQAZralwZgnyNAl2VwjcabSRIQzsFH3s=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:67:05:9e:e0:01:c1:25:95:ae:95:42:ff:c4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Jul 28 19:00:19 2026 GMT
            Not After : Jul 29 19:00:19 2026 GMT
        Subject: CN=ef6540279a08bb85877c3aaf978c8695740d5825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:d3:4b:36:55:63:70:fe:cc:d9:8d:19:ea:
                    f5:e7:84:f1:fe:fd:22:f0:12:29:47:7c:79:58:09:
                    76:8c:3c:fe:49:75:05:56:f1:f1:61:cc:14:71:53:
                    81:86:93:4c:1e:84:02:8a:d9:77:7b:9a:9e:52:eb:
                    1a:c4:0d:71:29:54:b0:50:c9:ed:79:7d:2c:c8:b5:
                    a0:f1:da:d8:cc:c1:ae:5d:1a:93:bf:9b:33:46:e3:
                    1d:ce:d5:bf:74:0d:d0:45:6c:eb:9c:67:8c:98:ec:
                    63:a6:58:30:5d:c1:9e:1a:9e:95:ac:3b:d8:0b:d7:
                    fc:8f:05:55:c9:a4:6e:b5:a6:69:5d:a3:ed:c1:41:
                    a9:be:0a:41:58:ba:25:57:22:b8:c8:bd:14:62:eb:
                    ca:85:23:11:08:16:31:56:a1:76:9a:0a:b2:21:d5:
                    ae:33:72:17:82:02:a7:ab:03:ea:8c:36:91:6b:59:
                    b0:7c:b1:cc:ef:26:4e:1c:7e:01:f1:b0:5e:da:0e:
                    ef:64:7a:ce:4d:ea:96:e8:3b:89:93:c4:df:4c:00:
                    d4:8a:55:0b:49:f2:09:70:70:3f:3d:dd:6a:ca:6f:
                    9f:eb:0a:e0:f6:9c:7f:69:d7:03:d9:2a:2e:42:4f:
                    14:b4:82:a5:e9:9f:64:8a:02:07:50:66:59:18:cd:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:40:27:9A:08:BB:85:87:7C:3A:AF:97:8C:86:95:74:0D:58:25
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:25:fb:2e:94:e4:3b:2b:61:18:8b:46:70:7a:b2:6b:20:
         43:ca:24:e0:ee:2e:8b:a3:c5:9b:b4:c8:d7:23:44:54:3e:5f:
         51:1c:87:be:87:41:ef:e2:54:6b:93:59:b8:38:7b:d0:68:6c:
         d1:c8:7c:d4:d5:b5:53:70:10:ec:81:b5:00:27:da:fc:98:17:
         ec:63:49:4f:b0:42:ea:59:3f:04:84:9e:13:35:1f:b6:fa:67:
         43:40:16:7b:d5:bc:41:e4:6f:7c:e9:36:42:48:25:99:09:99:
         cf:33:3e:da:50:c6:ad:73:a0:00:6f:7a:f0:66:1d:18:04:09:
         95:2b:ea:37:c8:1e:de:b3:1d:95:f7:04:6f:79:5a:78:4f:c7:
         8b:d0:bb:09:30:7a:00:90:cf:55:b6:f7:bd:33:33:f9:a9:81:
         c8:d1:52:d1:f3:89:d0:58:69:bc:35:6e:39:76:1d:08:97:40:
         07:69:db:b2:ef:3d:2e:21:f0:52:58:11:e7:06:7c:e0:6e:86:
         38:a3:bb:48:50:e9:09:93:31:b3:e6:5e:b8:0b:29:bb:45:4b:
         21:6e:f3:50:92:d6:83:24:3e:bb:94:c9:b4:81:73:42:22:77:
         b7:fe:10:86:6c:25:90:8f:a0:d6:0a:df:fa:f3:9b:3c:53:e0:
         c3:ef:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:44 2026 by rpki-client