Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          CWWRuU/HCCVjb3PHEDyoIQuWtp6wTZ7Sn6a33JNvOF0=
Subject key identifier:   2C:E9:56:0F:71:1A:4C:ED:61:E8:56:01:7B:81:3B:88:62:D0:31:6E
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       019FA9AC106D6444E4DB647F1BC445B805FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          1913
Signing time:             Tue 28 Jul 2026 17:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:53 +0000
Files and hashes:         1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
                          2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 6dzsUlHlUmBcFeiRb6qlKKxwcW1vnJfUu2CoCnCug6c=)
                          3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
                          4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:10:6d:64:44:e4:db:64:7f:1b:c4:45:b8:05:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Jul 28 17:00:53 2026 GMT
            Not After : Jul 29 17:00:53 2026 GMT
        Subject: CN=2ce9560f711a4ced61e856017b813b8862d0316e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:07:c2:8b:cd:38:e8:6c:80:b8:f5:01:d3:
                    c1:ee:88:ba:c7:59:fb:79:5a:59:96:ee:be:b6:88:
                    17:79:c1:31:7c:ca:9f:92:68:5e:27:83:99:55:d3:
                    a6:44:3a:f1:cc:2f:df:6c:94:33:1b:85:87:35:e2:
                    0d:cf:5f:5a:a4:02:42:df:ef:27:4e:d1:e3:3e:70:
                    32:9d:d7:bd:d7:20:7b:60:39:9d:bd:41:0f:d7:6c:
                    89:b8:bd:8f:0a:5c:50:99:0d:f9:37:89:ce:4e:51:
                    5c:49:22:48:4b:f1:78:ce:e3:fc:37:d9:94:2c:0b:
                    db:7c:73:e7:c2:96:4f:36:b5:03:9e:ac:39:51:c8:
                    5c:bb:50:b6:d8:92:ce:41:df:e6:72:da:46:40:c9:
                    79:be:0b:62:db:b0:a3:96:1d:36:71:28:99:cb:b6:
                    9c:70:6c:f3:c8:d0:6b:37:9f:f3:7a:57:56:e6:fd:
                    1e:6e:22:04:87:bf:39:ad:44:f2:52:5f:24:c8:ed:
                    f4:b2:f1:35:3a:0b:f1:2c:83:0d:97:1f:b4:df:67:
                    67:ea:29:4b:3a:f7:2a:14:94:16:65:32:56:f1:8a:
                    b7:6f:ab:90:76:b5:22:61:b3:f1:44:0f:5c:cf:d5:
                    17:bc:11:98:f9:e8:f0:06:3e:03:6a:da:cf:96:bd:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:56:0F:71:1A:4C:ED:61:E8:56:01:7B:81:3B:88:62:D0:31:6E
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:c4:02:41:ee:f5:26:b7:b6:92:e6:1f:c9:21:22:cc:a1:
         45:7e:b1:89:9b:51:77:d6:ad:be:af:8b:56:68:d8:20:ea:6c:
         66:60:45:21:03:1f:0c:c9:0c:60:8c:c0:74:c6:5c:1e:be:96:
         6d:a1:45:84:19:d8:df:2c:cc:09:43:cf:3d:dc:67:a0:73:be:
         e3:ab:31:f1:72:ae:5d:2f:bb:f9:83:03:6f:93:36:79:95:e9:
         e8:69:b5:39:fa:b6:71:58:56:0d:4f:e3:76:49:8f:c5:9d:18:
         eb:cd:07:36:a1:1d:32:0e:eb:ff:6c:8a:f5:a0:b3:e5:46:54:
         ae:84:fb:15:39:4b:f5:36:a4:b9:fe:08:06:f9:73:dd:92:19:
         46:e5:4b:70:d8:7f:67:86:bb:ab:5a:ea:3a:00:8c:9c:cc:b9:
         9a:30:63:40:77:aa:90:cf:d1:78:32:ff:85:54:f7:ec:20:2c:
         c1:f3:62:1c:34:9f:15:3d:1b:82:e5:fa:29:1a:e2:3e:cb:7b:
         e5:9f:c1:bf:ee:80:12:4d:0e:cf:61:fb:d7:63:a6:d8:71:a9:
         aa:cb:90:28:92:ab:a9:06:65:e5:d4:e5:70:61:c1:8d:d9:fc:
         61:77:b9:fa:c4:b1:4f:04:a4:cc:04:35:4d:54:16:ea:1f:6b:
         f1:0b:d4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prBBtZETk22R/G8RFuAX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjYwNzI4MTcwMDUzWhcNMjYwNzI5MTcwMDUzWjAzMTEwLwYDVQQD
EygyY2U5NTYwZjcxMWE0Y2VkNjFlODU2MDE3YjgxM2I4ODYyZDAzMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuysHwovNOOhsgLj1AdPB7oi6x1n7
eVpZlu6+togXecExfMqfkmheJ4OZVdOmRDrxzC/fbJQzG4WHNeINz19apAJC3+8n
TtHjPnAynde91yB7YDmdvUEP12yJuL2PClxQmQ35N4nOTlFcSSJIS/F4zuP8N9mU
LAvbfHPnwpZPNrUDnqw5Uchcu1C22JLOQd/mctpGQMl5vgti27Cjlh02cSiZy7ac
cGzzyNBrN5/zeldW5v0ebiIEh785rUTyUl8kyO30svE1OgvxLIMNlx+032dn6ilL
OvcqFJQWZTJW8Yq3b6uQdrUiYbPxRA9cz9UXvBGY+ejwBj4DatrPlr0fZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzpVg9xGkztYehWAXuBO4hi0DFuMB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPfEAkHu
9Sa3tpLmH8khIsyhRX6xiZtRd9atvq+LVmjYIOpsZmBFIQMfDMkMYIzAdMZcHr6W
baFFhBnY3yzMCUPPPdxnoHO+46sx8XKuXS+7+YMDb5M2eZXp6Gm1Ofq2cVhWDU/j
dkmPxZ0Y680HNqEdMg7r/2yK9aCz5UZUroT7FTlL9Takuf4IBvlz3ZIZRuVLcNh/
Z4a7q1rqOgCMnMy5mjBjQHeqkM/ReDL/hVT37CAswfNiHDSfFT0bguX6KRriPst7
5Z/Bv+6AEk0Oz2H712Om2HGpqsuQKJKrqQZl5dTlcGHBjdn8YXe5+sSxTwSkzAQ1
TVQW6h9r8QvUEw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:19 2026 by rpki-client