Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          Y8Bbtrw6YXYyjHq+0/IxdLmKG/BKR+eq9qCw7s0J3E4=
Subject key identifier:   7B:F0:35:0A:50:E6:AC:0D:2E:82:57:91:72:11:5C:A1:8B:CE:AA:65
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019FAB2C761627A53C71655008694AA58EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          16AF
Signing time:             Wed 29 Jul 2026 00:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:45 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: HqinYtfUkD1VMyj0scAp8Vzp+Ee69hchaFtAiBjp8do=)
                          2: TM2u3nE4U4gt579zKk1egxcYwGw.roa (hash: XOA83pwjmnyrd8JcXEc6+qU+kfl85cy7kc2/rS23hZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:76:16:27:a5:3c:71:65:50:08:69:4a:a5:8e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jul 29 00:00:45 2026 GMT
            Not After : Jul 30 00:00:45 2026 GMT
        Subject: CN=7bf0350a50e6ac0d2e82579172115ca18bceaa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:20:1f:d9:2b:c1:12:d8:b3:8c:30:89:72:f4:
                    f3:45:a8:f8:52:bb:8c:75:63:17:e0:b9:d4:56:9f:
                    f5:40:ed:4d:93:0a:bf:44:ae:bb:18:bf:2b:9a:bb:
                    b0:fa:47:81:91:93:df:98:2d:93:b3:94:a2:e0:f5:
                    93:a0:f1:b6:98:6b:d9:c6:c0:ab:de:70:1f:7a:18:
                    4e:58:27:eb:a3:2d:bd:93:9f:19:ba:92:57:2a:22:
                    1d:5b:0a:dc:25:73:48:e6:14:ff:17:ca:c5:5d:62:
                    02:87:a6:e7:b4:59:c5:d9:d6:8c:19:2e:ae:44:3d:
                    aa:57:de:e2:52:6d:42:9a:76:4a:07:5b:6d:04:79:
                    67:f5:88:b7:49:f4:fd:85:6d:df:95:38:de:45:a2:
                    c1:44:e2:19:b4:cf:52:7e:2c:76:d5:e3:ed:d2:94:
                    6c:43:70:26:95:ef:a4:e9:6a:c6:d7:60:d3:88:95:
                    66:25:85:ba:c5:4a:bf:c1:7c:ee:ec:32:9b:b9:3d:
                    5c:d8:48:f4:8a:3c:07:ae:e5:18:0d:57:64:37:67:
                    8e:29:a2:9c:3c:e5:eb:25:06:64:da:33:d3:15:da:
                    45:80:2f:b5:e5:ec:1c:ca:4d:01:aa:f4:a2:ee:6d:
                    f6:19:cf:56:73:92:27:56:a6:86:f8:d2:2c:c8:de:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:35:0A:50:E6:AC:0D:2E:82:57:91:72:11:5C:A1:8B:CE:AA:65
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:78:66:cb:c1:dc:79:e6:3f:d7:16:bb:a4:82:21:6d:cc:
         51:fa:89:7d:d7:0d:31:df:4f:f4:15:56:2a:ad:75:80:ae:ce:
         21:df:e3:ea:ec:a2:90:fb:00:3a:1b:b8:7e:30:91:c2:ea:46:
         97:b3:09:8a:42:6f:fd:43:93:f2:b8:d1:24:8d:16:43:6b:08:
         62:64:5f:ce:49:53:16:22:53:50:51:3a:fa:b9:94:ff:d8:0e:
         03:d2:0b:4f:20:54:07:fb:bb:d6:93:2a:c9:84:2c:75:66:27:
         c5:35:fc:e3:d3:8b:4f:fd:3d:86:0e:0f:c0:33:eb:4c:e9:02:
         df:48:b5:30:80:54:1f:7b:7b:a3:4c:f7:1c:f2:7e:6c:94:12:
         97:31:2d:a5:9c:b3:15:2d:c0:1d:13:96:18:7f:27:59:0a:fa:
         a2:2c:2e:71:58:ea:1d:bd:d0:e4:85:cc:fc:13:98:52:00:31:
         1f:2c:c5:38:9f:4b:16:30:c4:9d:8a:6c:43:2c:cb:c5:98:f6:
         60:5c:db:81:82:cd:d2:a5:88:28:89:e8:b1:e0:6f:4b:13:5e:
         df:02:a2:f5:09:32:3a:f3:bf:bb:38:50:2d:d6:b9:3c:72:06:
         42:e6:4b:17:3b:64:7c:98:7b:dd:4f:47:d8:84:e8:d7:c5:da:
         3b:a0:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:56 2026 by rpki-client