Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          DzIo1s9yrnhfdR/3R1ejprmJPSDU7tlm4aFEmzyMpnw=
Subject key identifier:   C3:F3:09:5E:1F:A1:EF:1D:D4:1E:A8:A6:0F:A8:8B:5B:05:67:DD:57
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       019FAABF1EAE884BAA9AA3F3798974FCE092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 22:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:19 +0000
Files and hashes:         1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
                          2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: 4xdXAT6LrMRouxuV/FHKPf1iA9fVmcWzeVia1oKdw0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:bf:1e:ae:88:4b:aa:9a:a3:f3:79:89:74:fc:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: Jul 28 22:01:19 2026 GMT
            Not After : Jul 29 22:01:19 2026 GMT
        Subject: CN=c3f3095e1fa1ef1dd41ea8a60fa88b5b0567dd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:57:96:c2:f6:23:77:e5:9c:38:35:bc:b8:
                    12:99:f8:04:70:93:fd:f0:fa:2b:de:d8:99:5d:60:
                    b2:67:19:b2:97:fa:6e:cc:f3:04:33:6f:38:15:80:
                    d6:2c:2c:59:ee:9c:a7:a6:75:27:8f:39:90:63:d0:
                    8e:e5:f5:9f:c6:06:46:56:e7:68:25:d2:a5:6d:62:
                    fd:aa:a9:f3:4e:76:6b:f5:53:ea:e7:3a:2d:42:5a:
                    16:a8:25:cf:c7:f1:02:66:29:d6:ce:e1:f4:6e:d0:
                    42:34:4a:ef:0e:0c:89:82:a8:70:e6:26:1f:38:08:
                    cc:82:48:46:f1:16:71:3b:fa:c8:66:d3:c5:2b:eb:
                    6c:29:07:73:c2:ea:18:e4:9e:70:f4:e9:29:7f:4e:
                    b9:84:f9:bc:9a:99:6f:18:8e:70:58:a3:b2:5c:2f:
                    6d:f0:f5:aa:29:31:b7:25:02:a3:b7:ca:9e:36:2c:
                    3f:f9:1a:e9:8d:a1:b8:bf:35:e2:aa:c5:93:80:a9:
                    f5:13:59:93:64:0b:77:86:de:58:cc:2a:12:a9:a2:
                    db:96:d8:e8:61:d0:d8:b1:9a:3d:71:04:dd:9b:d9:
                    4e:48:12:02:60:21:2e:fb:d0:68:8b:66:91:cf:6e:
                    13:fe:6e:68:d6:25:77:04:cf:56:86:0b:01:37:2c:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:09:5E:1F:A1:EF:1D:D4:1E:A8:A6:0F:A8:8B:5B:05:67:DD:57
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:2d:7d:44:7c:08:6a:25:bf:b5:e6:d7:bc:8b:47:a6:b5:
         c1:24:21:2b:6b:df:95:c4:34:6c:22:e7:b4:79:56:7c:67:c8:
         58:e2:e5:80:7d:e0:fb:d2:03:bf:fb:2e:3d:05:1f:59:0a:a7:
         2e:27:22:e7:d4:17:6a:77:d4:07:fe:55:06:45:57:55:f3:18:
         80:09:36:5a:b0:de:68:fb:a3:e9:e0:6a:b1:ec:03:3d:04:fa:
         97:08:43:af:d2:e7:38:7a:e2:0d:8d:49:01:08:47:9b:22:b5:
         59:a7:c2:b1:21:a9:b7:03:97:80:43:65:17:df:00:0b:df:71:
         9c:22:97:22:20:80:f8:70:3b:89:63:f2:4d:09:03:83:13:e7:
         e1:de:2a:9d:63:e5:6e:2b:e5:81:8a:f1:17:c5:5d:71:d7:1d:
         57:10:53:dd:4c:66:5b:46:c8:d2:1e:f5:8c:2a:52:09:0a:95:
         bc:59:1f:ec:99:17:ab:f5:cf:19:72:72:78:a8:b6:a0:a3:3e:
         d4:f2:45:12:69:2c:c9:54:00:6c:29:7e:55:6c:f7:81:d0:b5:
         e8:be:3b:fe:1c:ad:6f:c9:6f:ac:0d:69:36:b2:69:8a:85:1b:
         04:68:8f:69:a8:1d:7f:32:a8:e8:82:90:c2:0f:5c:6f:a4:f1:
         79:01:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:03 2026 by rpki-client