Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File:                     BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier:          kzUBg1XzWUeNIq3/nyVDp4jAWth75d4Q5q/ozeBrTSg=
Subject key identifier:   0C:1A:75:B6:E0:8E:99:0D:0A:DD:87:66:E6:3A:51:75:93:0A:17:8E
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer:       /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial:       019FAB632DDF044436CB9D20D4B326972B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number:          19D2
Signing time:             Wed 29 Jul 2026 01:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:31 +0000
Files and hashes:         1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
                          2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: W8b2QksNA2/owuj4kpBMp+fb/9lFbGlQXKc24jQuWCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:2d:df:04:44:36:cb:9d:20:d4:b3:26:97:2b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
        Validity
            Not Before: Jul 29 01:00:31 2026 GMT
            Not After : Jul 30 01:00:31 2026 GMT
        Subject: CN=0c1a75b6e08e990d0add8766e63a5175930a178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:fe:7d:4b:1f:5d:d8:46:9f:1e:5d:b2:4a:
                    2b:b0:f7:59:b3:3f:4b:58:08:e3:bd:44:f6:4f:43:
                    83:21:63:f2:5c:05:24:5a:67:3f:c3:5b:0b:1f:e0:
                    6b:24:aa:8a:c3:4c:b2:c8:aa:1e:33:af:01:1e:2b:
                    9c:1a:0e:bd:78:25:e3:86:12:52:6c:8d:86:32:66:
                    7a:fd:a7:7a:b0:6a:6f:b2:e7:f9:de:26:ef:91:7d:
                    44:d6:93:41:36:b0:24:53:3d:e6:dd:72:1b:37:95:
                    77:ba:35:d6:fd:08:ed:79:3a:72:ac:7e:c1:0f:65:
                    ac:29:9a:28:48:e0:74:5f:86:c6:67:3f:95:89:72:
                    26:ba:d3:0a:89:0a:e1:b0:9b:5a:5a:3f:5d:80:9d:
                    48:af:21:7a:91:d8:5b:e7:4b:f8:9d:77:07:d7:c4:
                    e8:74:fb:05:31:7f:29:bf:1e:94:b3:dd:da:20:aa:
                    1b:c6:ce:ad:e7:a9:4f:8d:4a:b4:a1:03:8b:e1:68:
                    1c:a7:69:ad:f4:f1:ee:db:71:b7:bd:b2:b3:26:20:
                    b2:b1:71:f8:9b:6a:94:a6:ce:cc:6d:a8:93:b2:42:
                    2c:d0:8f:02:06:ab:54:64:f1:69:0a:f6:bd:9a:24:
                    96:04:31:93:e9:05:c9:b9:ee:6b:e2:c3:fa:fe:49:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:75:B6:E0:8E:99:0D:0A:DD:87:66:E6:3A:51:75:93:0A:17:8E
            X509v3 Authority Key Identifier:
                keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:4b:06:11:63:55:85:77:f3:8e:a9:71:23:74:b5:d6:bf:
         e1:9a:97:62:ae:6f:2b:dd:2e:98:84:9e:b3:1a:49:26:11:46:
         60:9a:46:e4:3b:f4:00:9d:20:41:8b:81:f5:a9:af:bf:50:2f:
         a2:83:34:7c:2d:0b:31:f9:ef:2b:f4:3a:bb:1c:e6:c1:41:fe:
         37:ac:2f:64:2f:cc:10:8f:8f:8c:70:5d:b0:9c:16:7d:ae:84:
         50:f7:d6:66:63:fe:92:c7:0e:9b:4e:19:40:c9:64:ec:c7:19:
         34:77:d7:99:52:5d:2b:2e:09:d0:91:23:23:6a:54:5b:b8:4f:
         56:45:a4:38:b0:56:86:09:c5:a2:1e:1c:d8:0b:d3:65:25:dd:
         86:b1:7f:57:bd:d4:ba:b1:4a:8c:d6:b0:19:3f:4f:86:cf:17:
         dc:fd:88:1a:48:1f:b2:19:7d:87:80:bd:06:95:1f:7d:fe:d1:
         03:55:16:9f:d2:29:1a:e0:eb:f1:89:5f:21:01:e1:94:55:a6:
         f9:88:fe:d2:d7:f3:84:a4:36:e8:87:5f:5a:0f:6d:ad:2b:73:
         19:4d:91:1c:78:7c:aa:f8:59:bd:25:13:29:96:31:3d:f5:b4:
         f0:5f:7e:d4:0f:44:3b:43:4b:59:7f:f8:2a:a0:3d:37:c2:83:
         c3:47:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:35 2026 by rpki-client