Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File:                     BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier:          Y38bN3ur3Vnp9ERRRUAX03XROqfZzR9ZiPrhihESQnQ=
Subject key identifier:   7E:76:1E:3B:F8:14:5A:7D:EE:6E:C6:FD:94:84:B5:C7:52:A2:BA:9E
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer:       /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial:       019FADF6B46E67C789AF67BB152243216D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 13:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 13:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 13:00:54 +0000
Files and hashes:         1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: wI5haIeeB8GJUgCjuzDEWg5SvdRJqbpz+vS0m/v19+4=)
                          2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
                          3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f6:b4:6e:67:c7:89:af:67:bb:15:22:43:21:6d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
        Validity
            Not Before: Jul 29 13:00:54 2026 GMT
            Not After : Jul 30 13:00:54 2026 GMT
        Subject: CN=7e761e3bf8145a7dee6ec6fd9484b5c752a2ba9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:d7:fe:a9:40:a1:bf:19:26:6e:a1:cb:3c:
                    f6:6d:50:c1:75:d0:59:5f:1f:27:1f:7e:50:5e:db:
                    f9:4d:12:07:3a:ed:ce:a7:d1:6b:90:4a:3c:71:a1:
                    96:ab:f6:61:e9:ea:62:87:9e:82:f4:d9:07:f1:b3:
                    66:e5:f0:d9:58:db:80:7f:df:34:09:95:1f:8d:14:
                    4f:65:0e:02:20:24:e6:98:0c:77:44:14:66:04:0d:
                    59:45:fe:78:bf:6e:7b:51:c5:60:b4:94:6b:06:92:
                    a5:7b:ae:3f:89:7d:12:2a:53:86:bf:4c:25:d4:61:
                    3b:8a:3b:c1:c4:28:e4:fa:65:92:ed:ab:fa:e2:86:
                    06:1b:d3:4e:58:fc:46:3a:c0:de:53:86:55:28:a2:
                    7c:d5:23:df:d3:27:7c:a4:27:51:db:a4:d5:ff:85:
                    49:f2:c8:ac:c5:22:ef:49:6b:10:51:cf:0c:5c:01:
                    08:2e:95:3c:0b:6c:77:d4:96:4f:e8:e4:4b:d5:0f:
                    98:b9:d2:c8:67:ab:0f:75:78:fc:c0:49:73:68:19:
                    1f:75:0d:89:78:c9:ec:ff:68:9b:e3:89:f8:5f:18:
                    73:00:e3:2e:80:ff:bd:10:49:77:d5:ec:ad:17:63:
                    e1:e4:01:c8:8c:ac:ae:59:06:83:09:e5:a0:71:31:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:1E:3B:F8:14:5A:7D:EE:6E:C6:FD:94:84:B5:C7:52:A2:BA:9E
            X509v3 Authority Key Identifier:
                keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:a8:05:d2:81:c8:80:cf:64:7a:cd:13:6d:14:7a:0d:42:
         e8:f6:9f:72:d2:61:12:7c:5e:86:dc:8f:45:90:ac:d3:ff:19:
         6b:26:46:ff:92:f6:1f:83:7d:12:4e:52:91:a5:76:4b:ac:5d:
         9a:eb:31:1d:b2:88:1f:42:a2:79:90:eb:3f:9c:30:b3:85:1c:
         63:b5:c4:20:b9:2a:d0:a1:1f:6b:e3:30:e1:08:91:fe:a6:15:
         4a:b6:2e:b0:db:f7:c6:2b:af:b4:fb:24:2b:cd:16:56:4e:a7:
         3e:28:2e:1d:fe:9d:55:be:3e:8d:38:ce:e9:8d:31:cb:d8:18:
         9b:f7:02:b8:ba:43:1a:c5:aa:9d:52:1f:47:e5:0a:3d:9e:56:
         6c:c7:41:4d:ed:f2:36:ae:13:27:4e:fc:0c:56:d8:e7:a2:47:
         df:0f:f1:30:8d:79:5b:f5:e9:32:56:b5:1a:dd:d5:a3:e0:46:
         fa:2c:02:c5:ff:3c:7b:82:ec:8d:4b:8d:34:31:a0:9f:88:a2:
         20:3c:e4:c2:96:9f:1f:1e:05:66:c4:3a:34:f6:bb:0e:8b:eb:
         fa:74:54:01:c1:07:df:d5:ed:a0:db:b2:d2:aa:80:92:9d:c9:
         f4:61:a0:e0:79:15:68:ed:b1:31:5b:de:48:af:df:3c:4e:b6:
         44:8e:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:29:19 2026 by rpki-client