Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File:                     BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier:          m8n/6tB56PNtq1TntOi37V+y0zea5CjYX9CN96h9Unk=
Subject key identifier:   32:25:86:E0:9D:CE:87:60:A0:D8:41:01:57:A6:12:EE:1E:91:A2:89
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer:       /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial:       019FA7862903167BF8BE495384D6BEC7FC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number:          06F3
Signing time:             Tue 28 Jul 2026 07:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 07:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 07:00:14 +0000
Files and hashes:         1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: /iXoOIjnAPHbFRua/yEBE6yAXa217pQmgnbtjEybhP4=)
                          2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:29:03:16:7b:f8:be:49:53:84:d6:be:c7:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
        Validity
            Not Before: Jul 28 07:00:14 2026 GMT
            Not After : Jul 29 07:00:14 2026 GMT
        Subject: CN=322586e09dce8760a0d8410157a612ee1e91a289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:9a:12:a8:67:a3:b3:ea:fb:5e:6d:30:7a:
                    41:01:af:17:b6:de:6b:2b:97:4d:12:37:10:40:96:
                    0b:67:65:9b:6b:cd:65:17:a7:6a:a4:0c:63:ea:fa:
                    67:2f:d9:43:98:d8:cf:d8:76:91:c2:c8:16:a8:98:
                    1f:dd:d8:86:6d:1b:08:72:35:16:55:e1:19:36:3a:
                    d5:eb:ae:7f:ad:c0:de:c6:87:f6:ce:f0:4b:7a:cd:
                    ce:45:7c:54:a6:fe:28:62:06:a1:77:23:9b:65:16:
                    db:10:9b:69:8f:d1:29:e3:2c:b1:2e:c4:f5:87:c2:
                    3d:b4:0a:39:6a:cb:e8:b6:b5:40:46:91:3d:79:95:
                    73:7d:6b:f0:6a:27:d9:6f:ad:72:56:4e:68:f4:24:
                    b1:2a:6b:d7:ec:32:da:99:1f:db:09:56:0d:02:8c:
                    19:3f:ec:47:6f:13:75:81:f4:04:28:65:75:91:d8:
                    a7:f7:42:94:3d:5d:7b:51:f5:24:63:8b:fd:91:46:
                    74:66:a3:2c:fe:62:06:c3:3e:a8:e7:a3:7c:66:55:
                    89:56:68:b5:19:35:fc:28:34:21:50:19:9f:23:fd:
                    fe:4e:d2:77:68:e8:82:6c:a2:f7:f8:d6:2c:19:ae:
                    08:1a:63:0a:12:4a:dc:01:8b:1f:6b:56:df:f5:39:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:86:E0:9D:CE:87:60:A0:D8:41:01:57:A6:12:EE:1E:91:A2:89
            X509v3 Authority Key Identifier:
                keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:14:95:eb:1f:a6:6a:cd:fa:f8:61:56:50:c0:d8:16:4e:
         05:35:22:a3:7d:23:13:aa:a6:aa:42:db:ec:7d:25:6c:c3:76:
         d4:8a:c6:ff:c1:69:f8:66:a4:3a:32:61:a1:93:ea:22:fa:d3:
         77:9b:ca:fd:7f:1d:f0:03:c7:f1:ce:e5:9e:a4:7d:b3:ff:8e:
         58:4d:23:6f:ee:43:1f:6c:eb:21:0e:83:52:c8:8b:3d:ca:4c:
         48:92:7b:a8:39:1c:69:71:21:84:22:04:77:98:7c:40:55:b0:
         0c:70:7e:a3:5a:77:70:2d:3c:39:61:a6:48:81:ad:3d:df:ee:
         dd:1a:2d:a9:73:15:ee:9f:cf:48:fc:e9:7c:0a:55:3d:e9:26:
         ce:dd:8a:4e:3f:6a:ce:59:d5:d8:13:95:86:21:e0:08:b3:6f:
         4e:df:39:1c:33:ba:d7:1c:5c:63:ee:4b:79:83:2e:c7:dd:ab:
         46:31:76:b4:23:7b:9c:62:d7:d5:50:dd:8b:2e:a3:9d:c1:b2:
         fe:cb:77:37:d9:fa:3a:77:1d:11:d8:4a:ab:2c:ea:23:fd:6c:
         6e:9d:87:df:39:12:8d:ae:0b:32:85:bd:64:f2:f4:31:21:8e:
         f2:ac:78:d0:18:55:2c:95:81:73:d1:f5:a1:5e:27:ac:f6:ae:
         a2:74:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:13 2026 by rpki-client