Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          SZzVrTzLUgpdIsSv9xce9fnD2fh/Snpq+QaYIO7KDGs=
Subject key identifier:   8C:4A:B2:F4:98:F4:ED:72:C7:1B:71:2D:82:F2:EB:3C:1A:4E:48:C5
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019FAA50CA900956611B37E1E6D86A6E01C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 20:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:49 +0000
Files and hashes:         1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: YE8gds7+dLtTeQGzc4DEF9WErKaN3Er+xGNwAO5+xZw=)
                          3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
                          4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
                          5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
                          6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
                          7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
                          8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ca:90:09:56:61:1b:37:e1:e6:d8:6a:6e:01:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jul 28 20:00:49 2026 GMT
            Not After : Jul 29 20:00:49 2026 GMT
        Subject: CN=8c4ab2f498f4ed72c71b712d82f2eb3c1a4e48c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:cc:11:f6:33:ee:40:68:99:a8:9d:b6:e1:
                    41:56:55:61:a7:72:83:3c:7a:4b:22:04:cc:de:2f:
                    15:93:7a:2b:92:ea:a1:30:0a:93:90:78:7d:e9:d6:
                    8c:60:cd:9e:9a:9a:73:34:38:bc:65:51:c2:ca:8f:
                    da:c7:a3:36:26:ef:7b:d9:31:c0:39:10:90:31:fd:
                    ad:80:8f:b5:64:d8:f1:94:c9:49:fc:58:d9:47:ee:
                    49:83:27:97:23:10:01:e2:11:67:1b:f5:77:5a:9a:
                    8d:94:6b:e1:ba:b1:5c:99:2c:ba:b9:ae:23:69:90:
                    e0:40:99:74:33:c6:53:7a:46:0d:54:b5:dd:ec:b5:
                    38:9c:c3:67:3c:22:e9:e8:ee:cc:1f:30:5d:0a:9d:
                    72:97:1a:96:08:a8:4a:c0:95:58:07:04:5d:3d:55:
                    00:07:70:19:d6:63:76:f1:ff:7b:50:0f:af:1e:26:
                    78:68:28:d8:a0:03:b4:40:11:70:37:4e:bb:83:9b:
                    b5:c8:46:c5:3d:b6:46:c0:ee:32:8f:95:13:41:24:
                    79:9f:35:12:33:0f:79:24:36:76:9d:ac:7f:21:67:
                    67:b6:7e:47:53:30:6d:81:97:ab:bc:8c:90:92:a4:
                    b3:a6:b4:ef:4d:e6:01:40:60:33:21:4d:13:91:61:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:B2:F4:98:F4:ED:72:C7:1B:71:2D:82:F2:EB:3C:1A:4E:48:C5
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:20:57:6a:07:57:8e:af:4b:68:86:52:f9:d6:74:dc:e0:
         84:0a:1b:ef:a0:7f:50:a5:fb:30:85:f6:41:a7:fb:d1:5c:aa:
         7d:c7:c3:2d:1c:b8:f1:12:aa:a6:aa:4f:1f:ea:14:32:6a:6c:
         05:13:1a:52:ab:76:50:fe:6a:06:29:34:6c:54:b1:2b:5f:00:
         46:0c:e3:e3:e6:17:65:cb:1e:fb:3a:1c:e1:63:c7:f6:cd:15:
         41:d9:10:a0:b1:cb:78:71:ac:31:de:2b:09:ff:23:cc:5e:dc:
         da:6b:0e:ee:10:12:dd:2c:04:dc:a1:11:32:22:58:56:bb:1c:
         1a:04:9d:6c:b2:5d:66:22:16:eb:e9:d0:20:9a:35:32:86:2c:
         0d:8a:8f:7b:5a:d7:85:01:88:93:c3:f1:e3:2d:dc:95:5f:9d:
         56:c6:0a:20:69:93:51:a0:ba:da:2d:f8:ed:62:ec:cc:53:88:
         0b:7f:f5:c6:27:e7:c6:eb:56:f6:01:27:ae:53:89:df:1a:92:
         ee:b2:59:b9:95:9a:c8:86:68:1f:39:d0:26:a3:c5:ea:e9:cc:
         5c:6b:b8:63:94:a2:a6:39:4d:5c:74:fa:a2:26:11:5f:a8:41:
         5a:c2:62:e8:37:00:c8:c7:93:2d:ef:77:9b:14:af:c6:c9:a4:
         c4:81:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:46 2026 by rpki-client