Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          tgef9B3AX/DnU8nSoL6MspaExIB1Dp5gSTsOvTbbYLs=
Subject key identifier:   06:78:9F:50:32:63:10:B0:D6:E1:C3:32:50:CB:52:05:18:88:2A:B2
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       019FAA1A6EC053362A21F1627F87CD9CE027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          0AB7
Signing time:             Tue 28 Jul 2026 19:01:26 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:26 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:26 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: eG4I3k7bqJsqLpgEjkscD1B+8lrTJQJ65tOJ5//8RfA=)
                          2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:6e:c0:53:36:2a:21:f1:62:7f:87:cd:9c:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Jul 28 19:01:26 2026 GMT
            Not After : Jul 29 19:01:26 2026 GMT
        Subject: CN=06789f50326310b0d6e1c33250cb520518882ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:75:17:2e:98:ba:2c:35:30:87:3a:7c:f3:
                    6c:c3:45:db:e5:29:2c:9c:ff:8f:71:d9:4b:e5:81:
                    b9:a9:93:21:a8:f7:ea:1f:55:58:1b:be:47:93:04:
                    b2:be:9e:5d:cf:d1:04:ba:78:76:28:8a:2d:af:aa:
                    c4:ca:52:7f:85:e9:08:f7:7d:68:20:0b:95:2f:21:
                    0a:53:9d:7c:a3:6b:f7:0d:df:3b:55:a4:4d:fe:b9:
                    28:82:37:a7:b5:0c:1b:20:5c:b4:13:90:45:0d:f5:
                    77:3b:b7:98:80:f9:f1:e0:c8:3b:33:9a:db:55:64:
                    ed:b2:7e:0c:c2:4e:83:c2:19:42:58:38:6a:27:10:
                    93:60:42:b0:1c:65:f1:05:e1:05:d5:24:be:27:b9:
                    a4:28:ed:bd:de:6a:3e:dd:d1:d2:14:33:09:48:0d:
                    cf:98:e5:89:23:c0:72:91:5d:7f:e9:0a:bd:0e:b4:
                    02:71:1c:bf:d6:e4:0b:dd:bb:ec:00:51:a9:d5:05:
                    8d:5c:f6:d4:9a:1c:65:e9:4b:67:63:54:d9:66:b3:
                    64:a6:90:87:73:89:6f:0d:59:1f:0e:4c:73:c3:a2:
                    13:fd:c1:c5:3e:7a:8c:24:f3:af:4f:3d:2b:f7:2b:
                    16:e7:d4:2a:3b:12:8a:c8:73:36:20:09:64:6d:87:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:78:9F:50:32:63:10:B0:D6:E1:C3:32:50:CB:52:05:18:88:2A:B2
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:42:a1:48:b0:db:d9:c3:61:3c:94:a4:8e:ed:60:ac:c6:8f:
         bd:94:60:83:7e:c4:9b:10:e5:2f:20:a2:37:9c:47:bf:e3:a8:
         3d:75:51:a6:50:99:37:36:f0:93:38:c0:5b:56:52:5d:b4:a2:
         e5:b0:15:ed:88:a5:45:ca:0b:7f:17:0c:36:fb:d4:46:7b:34:
         7b:01:1d:00:1d:e1:d3:99:61:d0:bb:d7:11:15:c2:c0:3b:c5:
         98:6d:2e:5d:df:7a:8d:7c:aa:96:26:29:55:3e:26:99:46:f3:
         f2:6f:5c:42:70:a9:3e:c4:0a:ab:8e:25:6a:8a:82:43:13:3f:
         0e:b0:9f:02:17:55:2f:82:38:0f:d9:28:c1:c8:a6:ea:14:e7:
         a8:b9:e9:9f:ee:04:0a:29:cc:12:5a:21:8c:3e:f2:df:1a:90:
         36:aa:24:c1:a6:6a:c0:ab:d5:33:8d:8d:9d:63:c8:53:bd:0f:
         4b:2d:fc:b6:e8:51:94:3d:51:da:1c:f1:ab:51:0c:68:d6:85:
         42:51:04:c7:1d:c5:25:44:3b:52:01:4a:5c:eb:56:87:11:70:
         6a:9d:43:ae:40:69:57:1a:a0:cb:13:a9:ea:de:ca:2a:ff:43:
         4a:c3:a8:ca:bc:d7:11:29:7c:24:16:0c:81:d4:24:fb:3d:96:
         2a:d8:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:53 2026 by rpki-client