Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          8MHYDXQDk4H0YEOXc9MbgMLWeX9MyersV7W2Z9bWCl8=
Subject key identifier:   69:72:1B:6F:30:05:FF:5B:36:DD:01:E1:3D:85:CC:75:E6:2C:B8:2D
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       019D9A3EE1341908671C5F6DCCD6E0CEA335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          C1
Signing time:             Fri 17 Apr 2026 07:01:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:45 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:45 +0000
Files and hashes:         1: 39UtiwRanfdVAezzQQpEd13UB08.roa (hash: YxE7Edc+a6NH5tSiYV8kT6sjjgpdiQ4CkWE/R+15ILI=)
                          2: 6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa (hash: Xu4eAyvLY8fcHbJYD67JsRTonGok8ykhcr1+fNZCbpw=)
                          3: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: ve86isK24nT7JPb4IvXp0P+381ZifLyvI4H36kX6FdU=)
                          4: LXq-oiqft7wRDdw64Jvaiks2PDY.roa (hash: kUfgi4D0OUuHWv0dHkOts8Krj7+6E/9PnZ3dk+UjfjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:e1:34:19:08:67:1c:5f:6d:cc:d6:e0:ce:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Apr 17 07:01:45 2026 GMT
            Not After : Apr 18 07:01:45 2026 GMT
        Subject: CN=69721b6f3005ff5b36dd01e13d85cc75e62cb82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:d0:38:38:67:a3:cf:4e:24:c9:8b:f9:72:
                    b8:22:91:3f:00:0e:57:06:69:0a:fb:60:b7:42:dd:
                    19:49:b1:d1:67:dd:76:70:ac:ff:4f:0a:e9:eb:6f:
                    a5:f5:7f:1d:de:40:8e:4a:3f:da:19:1c:b2:83:47:
                    04:6a:86:eb:48:5c:74:0a:10:97:ef:9a:e9:d4:be:
                    1e:2a:31:39:17:b7:b3:1c:ae:6a:d3:c2:ab:69:17:
                    1a:a7:34:97:7b:77:13:8b:a5:4c:aa:61:fd:d1:65:
                    52:a6:a2:4d:cf:ad:3a:91:d5:11:e3:50:7d:dc:d2:
                    25:de:c7:92:8e:a5:4a:f2:7e:01:33:84:73:6c:70:
                    c2:51:51:87:26:3d:2b:86:11:33:e2:f2:94:cd:84:
                    f7:58:f5:d8:b2:76:ce:d3:7a:38:45:d2:55:65:cf:
                    00:ce:12:70:cd:8c:63:98:5f:a3:c8:05:22:1d:8b:
                    27:1a:29:f6:93:07:fa:69:76:93:78:b7:75:4c:33:
                    73:2a:6f:68:c9:99:74:f3:9d:da:d6:9f:e0:a8:c8:
                    cc:a2:97:98:f2:c2:9c:50:5b:f7:28:99:ef:43:de:
                    32:a2:ae:6d:6e:74:55:f5:11:df:bf:ac:14:17:36:
                    b9:15:c1:30:a7:b3:0a:5b:bd:85:47:00:0c:0c:f1:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:72:1B:6F:30:05:FF:5B:36:DD:01:E1:3D:85:CC:75:E6:2C:B8:2D
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:f2:25:79:94:c0:18:4b:46:09:d0:a1:7a:da:44:ff:33:
         57:25:78:0f:1e:1e:0e:62:ec:e2:e0:89:6d:0a:72:31:10:85:
         6e:4a:9e:1c:12:03:77:b0:85:73:9a:2f:38:d2:54:e1:31:79:
         85:99:70:12:cb:85:51:10:6c:4d:59:cd:65:e3:3f:c8:cf:1e:
         4c:9b:7d:d7:ea:cc:01:77:65:9b:3d:ea:69:be:06:68:78:8d:
         6b:9b:03:dd:14:c9:c7:e8:b7:a5:f4:60:6b:6a:b2:a1:eb:fa:
         42:cc:48:af:a6:1c:9c:a1:b4:b4:52:ae:5b:cb:87:a2:96:26:
         09:ee:19:ed:de:40:fe:3c:61:64:2d:fa:0f:c7:8c:e7:c5:ae:
         bb:a9:c8:fd:98:91:4b:32:6c:13:21:ff:72:20:15:38:97:e2:
         b1:83:b3:d9:fc:70:a8:6e:ac:85:6b:47:18:c0:30:d9:ba:6e:
         97:4e:3c:cc:f6:ee:88:72:db:91:f8:5e:4d:b7:b0:87:a6:ab:
         ab:8d:c8:76:ed:be:82:dd:e9:85:a9:30:65:e8:77:e4:b4:32:
         fd:d6:c2:95:01:60:57:78:8f:10:84:30:fa:52:a2:30:8b:0e:
         ad:92:b5:19:2d:42:2b:6b:ef:bc:78:03:1a:90:19:6e:98:15:
         c2:f6:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:01 2026 by rpki-client