Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          tsHQ3WJskXsWZA/5xJtfoOsjiyl9ukhBp0RVjoPUdbo=
Subject key identifier:   21:E3:5B:DD:61:62:2D:35:49:99:F6:C3:21:F8:62:A3:FD:4E:7B:D0
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       019FA89A1CB1E1F5F2086B62FD217CF23DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          1025
Signing time:             Tue 28 Jul 2026 12:01:39 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:39 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:39 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: e5mTfS7GMzU3uIb9TtuBc0zTKTiKIP8n9VwKKLERMas=)
                          2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:1c:b1:e1:f5:f2:08:6b:62:fd:21:7c:f2:3d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Jul 28 12:01:39 2026 GMT
            Not After : Jul 29 12:01:39 2026 GMT
        Subject: CN=21e35bdd61622d354999f6c321f862a3fd4e7bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:45:01:c3:3d:a3:4a:da:81:64:f2:d6:f1:
                    bb:22:ce:91:c9:fa:7e:6b:36:5a:95:d9:c9:c6:d2:
                    c1:d2:16:18:a1:b4:9d:f8:06:de:ab:3b:1d:5f:66:
                    45:96:05:34:ea:fb:39:c3:0c:e2:08:d1:2a:c8:ec:
                    44:3e:ee:57:54:8f:f0:0a:59:1b:67:0c:e7:8a:46:
                    f5:4f:ea:b4:6c:ee:e0:0a:35:31:15:92:49:c1:0f:
                    9a:19:de:8e:ce:87:40:69:06:4c:fc:d5:d3:14:0c:
                    67:6e:0d:c8:fd:97:80:d9:4e:37:df:ab:5c:25:07:
                    46:15:0d:e7:3b:10:c0:9b:3b:ab:be:b8:7d:10:2a:
                    79:83:d0:25:b2:29:15:f9:4a:7b:20:7b:1e:ac:81:
                    06:29:05:14:9f:3e:34:ef:57:45:67:b1:9b:83:c8:
                    a7:83:13:89:ce:38:a0:2a:01:e5:3b:9c:5f:3c:2b:
                    69:88:95:be:39:e4:6f:f5:8c:4f:9f:bf:56:04:1f:
                    5a:16:c7:f0:d3:0f:ac:8d:aa:b7:e8:41:2d:01:7f:
                    fe:4d:55:d8:fa:ed:33:b5:5e:bd:89:22:1d:4b:71:
                    46:d8:73:56:98:8f:08:d4:23:d3:c6:00:a1:59:73:
                    89:21:40:40:94:a5:8d:a0:c5:47:3c:68:83:dd:d3:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:5B:DD:61:62:2D:35:49:99:F6:C3:21:F8:62:A3:FD:4E:7B:D0
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:8b:ef:a9:d4:d7:16:13:ed:9a:39:90:f7:d1:0e:03:f4:
         44:c0:76:85:4b:b2:92:2f:c9:ed:44:ec:9c:bc:77:3d:34:a7:
         40:f5:84:28:c5:b8:dd:72:c8:cd:5a:1b:a1:28:54:39:5f:e2:
         40:90:f4:b3:82:cd:1f:bf:90:86:3e:b9:a4:b4:6d:35:21:d6:
         83:73:f0:e9:24:7d:da:89:55:d1:b1:35:03:24:cd:7f:4d:93:
         97:b5:be:24:96:82:37:4e:f7:96:3f:5f:c1:fe:07:54:a5:2c:
         cd:c4:80:ad:85:fb:ba:64:7d:54:7f:c5:a2:24:f9:e3:dc:95:
         91:b9:9c:ac:da:6c:2c:78:20:f6:b6:94:2b:75:f0:42:5a:64:
         3c:de:ef:a1:a4:de:ba:bd:1b:ab:d9:ff:db:05:bd:02:d9:82:
         e0:4b:c5:07:9e:be:f6:c2:43:8d:3e:3a:ab:36:a6:73:35:a6:
         c6:da:14:53:dc:aa:6c:17:0d:52:92:f0:2a:d8:14:18:6a:b9:
         35:44:66:03:dd:c4:6d:13:95:5d:30:43:5f:c9:49:4e:4e:5c:
         d4:85:38:8f:06:36:62:9e:06:95:59:6a:14:6c:8d:b0:3f:a3:
         92:a4:60:e0:88:05:58:68:68:a5:5d:5c:d6:dc:5a:31:d7:33:
         aa:19:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:26 2026 by rpki-client