Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          H4LqhXrL6E0sQJ/f6HSDSe2N2QmueYQ3fmq5YP/W7bc=
Subject key identifier:   C5:AA:CD:3E:5D:3E:4A:90:24:E0:87:1B:1A:C7:34:9E:B8:B7:C1:83
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       019FA9ABEED3C99C94DAAB1B1F50BC860349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          01D5
Signing time:             Tue 28 Jul 2026 17:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:45 +0000
Files and hashes:         1: 3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa (hash: wiSgmKaOMIcmWFd8GaxGj7Vm+74phyS4WrLi0VpoF/I=)
                          2: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: afuk5UPLtePro2fiqGyqtOnfyQ+q5F8BmD+w92tI8U4=)
                          3: MnaK4RFMKFqvcy9LYy8dOLSmUhE.roa (hash: JFebODicpWznSO2Mn/DWAEOUW3TbJ4875G8KS9D1Pkw=)
                          4: k8uOmZLDmTTLy-4ZEk43SDNPT2U.roa (hash: XnliqZzLSitAyY5Y0444OhQs0+7ZKErHlGbelno8vGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:ee:d3:c9:9c:94:da:ab:1b:1f:50:bc:86:03:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Jul 28 17:00:45 2026 GMT
            Not After : Jul 29 17:00:45 2026 GMT
        Subject: CN=c5aacd3e5d3e4a9024e0871b1ac7349eb8b7c183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:7f:b5:f7:c2:dd:78:cb:79:a7:3f:89:d2:
                    b3:19:b2:3d:b8:42:d9:e5:3d:e5:ae:6e:f2:32:30:
                    5c:6b:07:79:16:d4:91:aa:04:29:19:af:f4:bc:b5:
                    77:8b:00:78:9c:5a:b6:4a:7a:93:9f:cb:5c:fb:7a:
                    1f:68:1a:46:cc:62:98:8e:04:79:47:cb:61:8e:24:
                    64:bb:0f:62:e2:70:3c:69:60:6e:af:91:85:47:3b:
                    35:c4:c8:46:de:d0:5e:ab:c2:3c:68:32:89:6c:13:
                    3a:82:5a:57:b2:08:66:a0:14:a7:a7:96:d3:d0:4d:
                    82:75:2e:0b:eb:57:42:62:52:cf:4e:8b:3c:ad:e9:
                    bd:92:cd:7a:e1:89:0a:77:f0:b8:f7:6b:5d:f0:69:
                    01:28:21:55:2e:b3:ba:7a:13:18:09:77:80:42:cb:
                    82:f0:a2:09:2e:88:30:88:c0:1c:bd:2a:d0:c5:51:
                    8c:3d:6c:f3:d7:08:57:e3:12:b3:49:ba:cd:44:c3:
                    b6:2d:e8:da:c6:c4:ba:a3:64:53:52:00:cd:af:ec:
                    eb:b0:2d:6c:24:2f:9c:03:10:18:e0:3a:45:0d:93:
                    0e:af:d6:ae:77:47:37:c5:ed:69:f7:65:c1:51:3a:
                    f2:32:83:60:de:78:f0:29:c7:3e:de:73:f4:ad:09:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AA:CD:3E:5D:3E:4A:90:24:E0:87:1B:1A:C7:34:9E:B8:B7:C1:83
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:23:1c:6f:19:06:b6:b0:e8:9b:2a:d9:9b:e1:00:bb:a6:
         25:2f:60:39:22:ac:7c:6f:14:4a:20:d8:21:66:e9:6a:fe:40:
         a8:45:db:4b:75:b2:00:f9:47:5c:a4:c0:5b:0b:60:38:81:85:
         07:0d:12:f5:dd:ba:2b:ab:20:59:62:b6:b2:d0:ad:2e:31:22:
         7d:27:61:83:0b:4c:7e:15:23:e0:09:ef:73:84:54:99:bf:f7:
         ec:54:8c:c5:1a:b9:a5:a8:ee:25:27:ba:be:88:ef:63:b8:5c:
         f3:44:01:7d:3d:8a:21:ab:14:07:b3:50:86:2c:84:0f:4c:57:
         e5:83:5a:7c:6a:c8:a9:ae:be:92:3d:9e:fa:2b:58:c6:ce:fa:
         e0:13:17:c1:c0:ad:31:32:b4:22:96:6c:94:db:43:91:ff:cd:
         6e:10:71:62:7f:14:f6:92:75:67:94:93:d8:90:7f:6b:7c:44:
         20:74:5a:e8:57:d2:f3:58:59:79:5b:6d:f6:40:d2:57:b9:6d:
         fe:79:cf:fa:46:fc:db:95:46:eb:ec:a0:f7:03:17:53:01:79:
         87:5b:dd:a0:3b:dd:31:d5:63:2a:a2:da:75:5e:df:ae:9c:6d:
         74:73:58:93:36:ba:83:17:08:0d:b1:0a:d5:db:5f:64:04:aa:
         90:02:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:31 2026 by rpki-client