Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File:                     i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier:          5qpcDSDPVj1K2FfVqVB+Ilz5cktCD+3TOhfwXJEEj6A=
Subject key identifier:   F0:5B:9D:74:14:C3:97:1A:5E:6F:86:04:1E:94:61:9F:35:D7:27:1F
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer:       /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial:       019FACE3BB54297FD0B6CCC4059548CA25CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number:          04BF
Signing time:             Wed 29 Jul 2026 08:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:33 +0000
Files and hashes:         1: Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa (hash: MZrsYUO7qgY/xpSvPUXy1NiJNVe3XMBHtcUlpHocjuI=)
                          2: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: OPNpR/fdE4haMGg4TbkPEnkhJayEydpQHl5v8NUNfzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:bb:54:29:7f:d0:b6:cc:c4:05:95:48:ca:25:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
        Validity
            Not Before: Jul 29 08:00:33 2026 GMT
            Not After : Jul 30 08:00:33 2026 GMT
        Subject: CN=f05b9d7414c3971a5e6f86041e94619f35d7271f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:e6:49:7f:24:60:8e:08:49:73:69:fd:d9:
                    22:8e:6c:f2:32:de:b7:be:29:84:a6:11:1d:73:96:
                    28:5e:63:c4:09:44:e5:0d:d8:71:d6:49:b4:a0:9d:
                    a7:3b:6a:2e:52:64:c6:5d:45:7e:ed:91:5b:5d:4c:
                    69:33:e9:2b:f6:de:7a:1c:41:65:48:5b:05:8a:e2:
                    6a:e7:46:2d:e2:ce:66:35:0e:22:a8:fa:fd:c7:69:
                    d2:5b:0d:2d:25:ec:35:d0:0e:7e:fa:15:41:d6:bd:
                    af:aa:87:26:43:89:2c:3e:1b:ce:71:cc:a3:9f:bc:
                    81:83:fb:33:78:c4:39:94:ca:f2:0a:5c:6f:18:fa:
                    57:fc:24:d5:aa:a0:f1:28:ea:b3:e8:a9:20:f6:61:
                    a5:2a:7b:cc:89:e8:54:32:5b:2e:e5:d2:98:58:61:
                    df:28:96:e6:ae:a1:fa:1e:c1:d5:90:1f:98:01:fb:
                    1b:2d:b4:41:f3:f9:62:a1:c4:93:df:d2:6f:f4:da:
                    8e:23:13:4d:ba:9b:71:f6:7d:01:78:8c:f3:d7:a3:
                    6c:09:54:36:9f:6c:61:0e:12:af:0c:a3:62:55:5d:
                    c7:ba:9c:0b:70:99:72:2e:f0:bf:35:94:5d:fd:bc:
                    b3:fc:87:82:e0:21:4b:b9:b0:74:ed:59:02:ce:c0:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:9D:74:14:C3:97:1A:5E:6F:86:04:1E:94:61:9F:35:D7:27:1F
            X509v3 Authority Key Identifier:
                keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:2c:96:f8:ac:89:28:b2:1d:9f:53:18:36:7d:d8:bc:d2:
         06:54:ba:36:75:a5:64:08:76:7e:d3:35:51:62:9b:9f:08:4e:
         d4:d1:50:18:37:a9:6d:6f:bc:10:23:d3:cc:05:93:35:28:b9:
         04:74:34:e1:e8:e1:5d:ce:89:7d:13:05:5e:92:ff:d8:1b:fb:
         ac:ff:9d:66:2c:4b:c4:b5:1e:e2:70:19:17:ef:ff:49:8f:c1:
         be:0b:f4:69:a0:83:89:36:52:ff:82:83:71:85:35:85:01:db:
         77:8b:f4:d5:a7:28:56:46:a2:62:89:1d:55:57:6b:fe:01:2e:
         4e:d8:1c:05:77:00:f6:59:7e:80:f4:c5:b0:8a:c5:9d:e4:26:
         b2:b4:68:99:c3:08:ff:bd:b1:9e:ed:63:82:cf:f5:09:bb:e7:
         57:39:a1:7f:a7:35:7a:fd:87:ab:b0:d5:a9:b8:fd:cc:f2:c7:
         4a:b2:6f:1b:47:37:ee:be:93:85:a3:d5:72:f4:a2:38:23:b9:
         e3:2e:da:c8:d3:09:f5:88:a2:a6:70:39:52:e2:d3:39:ae:1e:
         e6:af:1f:f5:26:80:87:3c:94:e0:01:6f:24:7f:29:75:49:3d:
         ce:e9:a2:c5:19:b4:3f:6e:72:87:08:54:79:f2:6a:80:1a:be:
         ac:cb:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:00 2026 by rpki-client