Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier:          LxeXBdxHPsbSlUhhsrm7kkp7s6JKJz8EDV1AXOVt+zk=
Subject key identifier:   4E:06:01:81:49:3A:50:F9:71:E8:AA:90:43:AB:70:46:13:AB:D6:16
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer:       /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial:       019FAC7707CB0F71B34E30727CE41272B9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number:          055A
Signing time:             Wed 29 Jul 2026 06:01:49 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:49 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:49 +0000
Files and hashes:         1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 93sI9Ha/yFnwWM+Q+q33fpUP+gzIrrifApW05g4h12Y=)
                          2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:07:cb:0f:71:b3:4e:30:72:7c:e4:12:72:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Validity
            Not Before: Jul 29 06:01:49 2026 GMT
            Not After : Jul 30 06:01:49 2026 GMT
        Subject: CN=4e060181493a50f971e8aa9043ab704613abd616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:94:9e:7a:c3:b6:3e:09:af:c2:1b:24:e2:
                    52:45:28:b7:55:72:85:36:56:7c:a6:fe:ce:ba:41:
                    31:4f:66:9d:ea:8b:ce:5e:ce:2d:68:4b:5b:2e:e8:
                    31:66:ff:b4:6b:cf:7f:1c:e5:d6:1b:c3:3d:dc:89:
                    b8:e8:61:fe:20:37:74:48:b8:62:e3:65:de:97:e7:
                    15:df:ff:63:31:13:a4:f9:0d:b1:fc:57:f6:ec:ea:
                    df:4a:1c:92:72:1d:86:a5:6a:a2:a9:46:13:64:01:
                    57:62:2b:66:5b:c2:d7:15:0a:4d:a5:91:f5:f2:fe:
                    bc:89:71:19:a5:f0:33:37:07:a8:67:af:ac:b1:71:
                    6c:4c:98:ec:25:8a:6d:8d:b7:51:bc:7a:79:e0:9c:
                    8d:a0:fb:95:e7:38:49:18:bb:e2:8a:3d:1c:e0:be:
                    3a:ee:40:56:44:74:9a:3c:7d:d6:2f:42:66:be:2e:
                    c0:d3:8f:9c:fe:ab:8e:bc:14:cc:a5:9d:1c:7f:fb:
                    9a:52:41:a8:6f:b6:5c:3e:14:6f:8c:7e:39:19:1c:
                    4a:be:40:06:8f:28:93:9b:ca:6e:25:66:23:4c:ae:
                    4a:6c:32:2f:15:dc:6c:af:83:8a:6b:9b:0a:36:f8:
                    d8:27:7f:d8:95:6e:e5:ea:c6:94:a0:3b:69:a7:6f:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:06:01:81:49:3A:50:F9:71:E8:AA:90:43:AB:70:46:13:AB:D6:16
            X509v3 Authority Key Identifier:
                keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:da:1e:21:4b:d5:d8:d4:11:39:2a:9b:23:50:91:13:26:ba:
         9b:6a:2d:36:58:d7:d1:68:42:e0:ba:6b:67:67:6c:0a:23:bc:
         4f:ff:ce:f6:3b:79:92:e8:41:0a:58:3a:ac:1d:72:88:17:08:
         c4:ff:80:1c:47:04:11:4b:2b:96:7a:ea:77:52:27:47:d1:a6:
         c6:b1:c1:a5:b4:c9:92:22:d5:1a:ee:f4:5e:d8:d4:af:9c:62:
         26:e1:d2:bd:a4:73:b7:e8:a3:00:ec:38:00:9a:00:46:f1:6a:
         c8:62:24:b7:76:af:ee:eb:94:4a:2a:02:3b:72:21:d2:57:02:
         0a:87:62:27:33:f1:82:f1:b7:1d:5b:9d:3e:b9:0c:c0:bc:f6:
         c4:82:e4:7a:22:e4:f5:d7:cc:0e:72:f7:55:86:50:bf:47:da:
         50:aa:1b:47:d3:8c:bd:16:64:c1:88:97:05:5b:9c:2d:22:bc:
         4e:0d:dd:71:7c:12:8c:52:39:ee:78:2a:6b:18:79:55:4f:d7:
         7a:63:5f:0a:2e:dc:46:8b:19:01:2d:bc:e1:49:e2:36:cc:15:
         69:52:65:ee:f3:a5:ce:6f:b6:fa:ce:82:64:69:8b:fc:50:d6:
         18:a0:4b:da:3c:c8:b3:67:bd:b1:9c:6d:7c:d2:84:df:a2:2e:
         3a:52:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:17 2026 by rpki-client