Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          FKTP93JaMphZb7EJwpFlUrOrEwPvCIKKngVJY7OOAEQ=
Subject key identifier:   B2:64:5A:82:C4:C4:E3:00:2F:BB:AC:F1:D0:B0:96:09:30:D6:1B:74
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019FAC3F35A3799C0D376C5FA94A249103E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          04D5
Signing time:             Wed 29 Jul 2026 05:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:51 +0000
Files and hashes:         1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
                          2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
                          3: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: b5l3juPFni6633x+UtYzelJrQgwQ8Fcp3PqXIUS/zb8=)
                          4: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
                          5: RB6c02Y05ndL1tBmed3K3PYqOb8.roa (hash: HA3QTmLMd6DYrv7h2tvYadjPLlyjtL356EnCTt0Ef14=)
                          6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
                          7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
                          8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
                          9: xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa (hash: GdkhncA6Cz+FJ2IUdWjBXkrGRY/WRmJ/1R0l4xrrdNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:35:a3:79:9c:0d:37:6c:5f:a9:4a:24:91:03:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Jul 29 05:00:51 2026 GMT
            Not After : Jul 30 05:00:51 2026 GMT
        Subject: CN=b2645a82c4c4e3002fbbacf1d0b0960930d61b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:36:81:89:9a:45:95:95:9b:67:0d:de:ca:
                    78:9c:37:15:f7:4c:88:f6:86:78:dd:23:0d:da:e9:
                    19:b0:3d:70:2d:93:33:de:88:ae:e4:21:6b:f7:52:
                    c5:30:29:46:91:11:2d:ef:6b:78:05:af:80:d2:b9:
                    5e:9f:40:b0:b2:50:98:59:b5:b0:99:f3:f5:d1:f6:
                    51:01:e6:aa:a7:af:df:6d:4f:ca:fb:82:96:65:e5:
                    fe:ba:24:fe:dc:e9:a2:ec:50:4e:39:1c:d0:81:a1:
                    63:56:3a:c3:11:10:99:ca:b8:85:0d:f1:c8:06:ae:
                    b5:f3:40:bc:8b:27:fe:ac:64:3a:10:21:4e:0a:65:
                    b8:a4:64:cf:aa:dd:9a:ca:c5:1f:88:17:8b:54:33:
                    31:ff:fc:81:50:4a:61:78:99:ed:9d:5c:0b:f2:70:
                    00:ac:f5:1e:f8:8c:52:ba:ce:c9:ec:f8:b7:67:a7:
                    a3:14:c9:93:df:c3:01:a8:28:f1:5e:16:40:a3:46:
                    82:1b:99:18:da:10:75:ae:02:fe:16:ff:b3:5c:da:
                    4a:49:3f:a2:1a:b0:95:71:5b:53:53:86:0a:8b:5a:
                    04:42:ef:2e:60:b2:6d:a2:94:93:eb:21:6a:d1:22:
                    79:e4:c9:14:32:a0:69:40:14:d0:69:2b:59:f0:ec:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:5A:82:C4:C4:E3:00:2F:BB:AC:F1:D0:B0:96:09:30:D6:1B:74
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:ad:45:9d:f6:af:a7:03:d3:16:89:ce:ab:ee:93:89:97:
         d4:34:40:05:f8:21:2d:70:6b:2e:19:b4:eb:78:77:7b:41:cb:
         dd:86:88:ba:57:4b:f0:01:34:d3:d1:cc:d6:02:22:9f:ad:90:
         b1:88:97:48:8c:91:d4:1d:ec:c2:10:0d:14:3c:a4:db:6e:63:
         80:39:be:10:50:27:49:fd:27:ba:21:88:71:af:e4:01:76:66:
         d5:7f:bb:59:79:8e:21:22:b2:54:ad:71:dc:55:3b:2b:6b:9f:
         62:4e:5a:3f:a1:03:57:23:86:2b:f2:7d:5d:29:e0:8c:a0:d2:
         b1:ab:14:cd:9f:d8:20:48:bf:0a:f0:5b:01:d2:3d:4c:2f:d7:
         29:4d:3b:9c:67:2c:e5:34:52:30:30:6d:f9:ba:33:32:86:2a:
         bb:23:9b:70:a2:39:c5:b6:78:ca:e3:a2:a9:c5:24:73:cb:bc:
         3f:18:a6:2d:26:14:ab:b7:3d:44:c5:c6:8f:c3:77:94:99:12:
         95:ae:ea:70:7a:4a:3f:28:50:7f:a4:db:b9:bb:7e:d7:ff:c7:
         73:00:8c:82:b2:e3:be:4c:4c:93:75:45:0a:8b:cb:53:a5:dc:
         f0:d5:58:24:2e:04:58:f6:f0:91:56:72:4f:42:61:f7:a1:b8:
         ef:e5:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:52 2026 by rpki-client