Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          VHG3UsLETvZ5x0mG7qNWuFyMM6JuYfYAwSvwZbp6wxw=
Subject key identifier:   C2:C6:8C:A9:2F:EB:E9:0F:C5:F6:04:70:FF:27:07:E0:36:DF:27:57
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       019FA8CFFE4B6D3037F3729D74D4C3974D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          19F4
Signing time:             Tue 28 Jul 2026 13:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:30 +0000
Files and hashes:         1: 3wWxSXnn1AkR2FQz-cSLXCO25fE.roa (hash: 9Mau/Rvq7d0nRIpqNv+3vxuSV8Oxqjuu2vQqrrKBRSo=)
                          2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
                          3: P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa (hash: gL2/PVEx/BkWJ9c7qys5mfYr8ijPQCI4jEJ/mb5fIUI=)
                          4: WNIo6fh_J1JaSjunj1Z5Xu1CXJ0.roa (hash: I9y0xJA8TLrCiSo9CMmPRbQsrLPI2QdSmCxydXLI1h0=)
                          5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: utDXUlCyANmhd05Jpkcbw/xFopyZjxtbQXv+LHBb19E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:fe:4b:6d:30:37:f3:72:9d:74:d4:c3:97:4d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Jul 28 13:00:30 2026 GMT
            Not After : Jul 29 13:00:30 2026 GMT
        Subject: CN=c2c68ca92febe90fc5f60470ff2707e036df2757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:4f:e2:9f:93:ee:a4:df:60:97:ac:9d:f8:
                    2d:6d:73:76:de:76:7f:05:1a:87:8d:35:98:1a:4a:
                    ea:93:bc:f7:90:2c:67:c6:6c:e2:6d:e8:67:d3:12:
                    fb:1d:67:59:85:8c:b4:7b:11:4f:3b:a5:7a:49:46:
                    df:fd:5b:5b:9d:bb:39:11:58:9d:85:7c:60:3e:fe:
                    cc:49:b0:41:31:37:02:c0:b0:fe:82:8f:cb:6b:f2:
                    3c:72:f4:1f:ed:de:e2:8d:c0:ef:4b:dc:e8:b2:da:
                    57:08:87:58:92:f6:c1:1e:19:c7:22:b4:46:78:94:
                    f5:f4:66:9a:26:c6:8f:3c:42:32:de:a9:f0:ca:fa:
                    e2:dd:00:fe:0f:9e:53:dc:5a:22:00:b9:33:0e:e7:
                    9c:61:b3:05:a8:d4:28:5f:9f:bc:81:d1:fe:c0:7f:
                    ce:f4:6e:73:68:9d:0f:c9:a4:64:6f:38:6d:16:2d:
                    69:a8:cd:25:42:32:03:7b:24:27:32:2b:d6:5c:19:
                    69:bb:88:21:44:90:bc:06:2d:41:70:9e:0b:3c:89:
                    fc:b4:26:00:3a:10:e8:77:91:ac:e2:c3:15:c5:c3:
                    e2:9e:f9:b7:d3:41:2c:74:93:9f:99:cd:f6:f1:af:
                    fc:9c:6d:d8:74:3b:3b:f4:4b:35:0e:36:3e:a0:9b:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:8C:A9:2F:EB:E9:0F:C5:F6:04:70:FF:27:07:E0:36:DF:27:57
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:ce:d0:a7:1d:3e:bc:69:5c:f3:f8:ec:aa:3f:53:c8:cf:
         fe:94:19:b0:cc:6d:71:53:80:bf:2f:0f:c2:1a:27:aa:d8:46:
         92:15:02:fd:3b:fa:f2:9c:fb:eb:da:e8:d9:8f:67:0c:03:9b:
         fb:be:0b:48:4f:bb:64:b8:6c:9a:c9:d9:d5:78:f9:95:be:f3:
         26:01:ab:d7:93:39:7f:63:30:7b:67:63:7e:de:34:54:79:55:
         2c:b6:d7:24:a1:e8:02:6b:2f:53:23:50:d3:de:c1:26:9b:a3:
         57:be:e9:36:51:f7:4c:3b:a2:9e:3a:0a:1a:c1:af:59:a0:71:
         25:69:c9:27:8c:20:3c:a2:a7:99:78:37:e5:7f:71:93:39:a5:
         a2:01:14:02:81:89:4f:1f:ae:58:b2:a3:8a:e1:40:ea:63:f5:
         fa:8c:8f:00:be:24:f9:98:9b:75:55:3f:17:af:01:83:7b:fe:
         aa:2a:5d:8e:b6:6e:b0:f8:86:37:3e:f8:21:c8:c9:81:86:74:
         b1:c0:a2:b4:f7:e5:c4:25:df:8e:fc:c0:cc:72:18:08:bb:73:
         f7:eb:76:9a:18:a0:e1:e7:ac:33:09:76:04:08:87:19:69:72:
         f2:6d:c1:7a:2d:24:81:5e:5c:3f:4e:26:c4:e9:ca:e0:4f:0f:
         0e:75:92:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz/5LbTA383KddNTDl02PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy
ODJlMzAwHhcNMjYwNzI4MTMwMDMwWhcNMjYwNzI5MTMwMDMwWjAzMTEwLwYDVQQD
EyhjMmM2OGNhOTJmZWJlOTBmYzVmNjA0NzBmZjI3MDdlMDM2ZGYyNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8dP4p+T7qTfYJesnfgtbXN23nZ/
BRqHjTWYGkrqk7z3kCxnxmzibehn0xL7HWdZhYy0exFPO6V6SUbf/Vtbnbs5EVid
hXxgPv7MSbBBMTcCwLD+go/La/I8cvQf7d7ijcDvS9zostpXCIdYkvbBHhnHIrRG
eJT19GaaJsaPPEIy3qnwyvri3QD+D55T3FoiALkzDuecYbMFqNQoX5+8gdH+wH/O
9G5zaJ0PyaRkbzhtFi1pqM0lQjIDeyQnMivWXBlpu4ghRJC8Bi1BcJ4LPIn8tCYA
OhDod5Gs4sMVxcPinvm300EsdJOfmc328a/8nG3YdDs79Es1DjY+oJu7AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLGjKkv6+kPxfYEcP8nB+A23ydXMB8GA1UdIwQY
MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt
OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk
LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV3O0Kcd
PrxpXPP47Ko/U8jP/pQZsMxtcVOAvy8PwhonqthGkhUC/Tv68pz769ro2Y9nDAOb
+74LSE+7ZLhsmsnZ1Xj5lb7zJgGr15M5f2Mwe2djft40VHlVLLbXJKHoAmsvUyNQ
097BJpujV77pNlH3TDuinjoKGsGvWaBxJWnJJ4wgPKKnmXg35X9xkzmlogEUAoGJ
Tx+uWLKjiuFA6mP1+oyPAL4k+ZibdVU/F68Bg3v+qipdjrZusPiGNz74IcjJgYZ0
scCitPflxCXfjvzAzHIYCLtz9+t2mhig4eesMwl2BAiHGWly8m3Bei0kgV5cP04m
xOnK4E8PDnWSvA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:16 2026 by rpki-client