Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          5pyn8I5tkldOkYNJr9oBLI4Z5lxNykp6beT0E/P2EhI=
Subject key identifier:   A7:90:D0:D5:25:38:1E:75:A1:36:B8:BB:A7:BD:7F:15:E2:A2:63:EB
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       019FA9AC08AAA8B241004DA3A2EC89857895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:51 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: sR9pbIX1+IOBW5veIjphEUsStzwYJ2k81c0SE6HzS9s=)
                          2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:08:aa:a8:b2:41:00:4d:a3:a2:ec:89:85:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: Jul 28 17:00:51 2026 GMT
            Not After : Jul 29 17:00:51 2026 GMT
        Subject: CN=a790d0d525381e75a136b8bba7bd7f15e2a263eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8f:0d:22:5d:61:48:6d:4f:c6:7d:b8:e5:c0:
                    03:3f:0e:41:d6:3a:01:58:fe:1a:0e:2f:2a:5a:7f:
                    99:b8:72:aa:e2:43:5c:6b:7a:b3:6c:b2:53:17:9c:
                    b4:8d:36:3d:c1:1f:1a:d7:48:8d:93:78:8e:b7:f7:
                    81:cb:e1:c4:97:b3:32:f4:8d:79:9d:f9:8f:68:79:
                    8f:b2:4a:65:ed:f4:0c:a3:81:61:9b:8e:10:62:b0:
                    a6:0a:e0:e2:88:47:b8:38:57:4a:85:e3:c0:d8:47:
                    e4:01:8f:e6:46:9e:a2:2e:94:4a:ee:34:69:7d:b9:
                    8c:53:b2:b1:d4:78:10:ab:f5:58:f3:6a:dd:74:3c:
                    79:7d:5e:9d:2c:ab:fc:9f:52:58:90:79:70:d2:e1:
                    47:79:93:88:86:4a:c4:18:dd:41:67:ac:60:4a:a4:
                    18:cb:41:93:3f:27:f4:32:a4:dc:bd:bb:6d:24:de:
                    71:da:37:74:43:1a:c1:28:09:03:6f:06:c2:62:a1:
                    7f:d0:ec:7e:6d:e5:d3:f5:6c:75:25:4e:84:27:f7:
                    05:dd:df:7a:7b:08:9f:e4:cc:3b:f6:b9:6e:9a:90:
                    0b:d6:c6:3c:a8:a5:ce:47:4e:87:90:d8:f9:a7:f6:
                    c9:ce:33:7c:d7:ce:7e:0c:95:11:ec:c4:7d:90:9f:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:D0:D5:25:38:1E:75:A1:36:B8:BB:A7:BD:7F:15:E2:A2:63:EB
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:a1:a8:d5:6f:76:f0:95:29:d3:d0:fa:f0:f1:80:3c:7d:
         9e:36:0b:ef:32:3c:f7:25:a1:b2:bb:e5:52:0f:e7:6c:0b:25:
         79:97:03:ef:25:6e:c4:a9:e4:0f:16:bf:e5:a3:f8:d6:9b:e6:
         4f:b3:5e:f1:ea:c3:03:49:a0:ba:d5:2e:ac:61:27:4f:14:9d:
         6e:ce:4f:c5:44:ed:33:6e:47:26:5f:53:a2:b4:a1:77:ad:ed:
         de:26:41:9a:ae:0c:cd:d5:5e:81:ab:8c:10:8f:88:53:64:d0:
         81:e8:20:5f:e1:6d:5f:08:ad:a6:8c:b1:2d:0b:f2:80:c5:b2:
         fc:17:1c:ae:8d:6a:18:b6:f9:28:7b:14:c2:0e:0b:f1:e8:28:
         19:81:fe:2c:c3:87:db:4c:22:d2:a9:ad:da:6f:4a:40:40:df:
         02:cf:6f:91:ba:b6:7e:47:55:91:b2:13:2e:2c:00:2a:c0:25:
         e6:bd:7e:ad:b5:33:6c:3c:18:43:c8:47:ba:3d:00:4d:22:1d:
         c9:6d:54:db:07:d1:fa:17:e0:62:8e:14:8c:25:41:88:af:6c:
         5f:2d:b2:c7:37:b1:78:39:09:74:d7:86:ce:4d:07:24:8f:10:
         f7:b9:d0:20:b9:a1:53:2f:46:97:63:97:71:52:d4:f2:51:88:
         68:f6:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:01 2026 by rpki-client