Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          VvDqvyokUu1jRzKNCmAf2ML9fhI0EXKAZFeqMavOukQ=
Subject key identifier:   AD:2F:43:DA:94:E0:68:62:D5:F6:80:2C:6C:E5:55:8E:48:64:E5:F5
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       019FAA1A79281556A4536640FEAD5CAE9F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          068C
Signing time:             Tue 28 Jul 2026 19:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:29 +0000
Files and hashes:         1: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: yVdu8I7IraAVgy2KXc5tdHHIRprC+X2yAIovOES3/eU=)
                          2: BtnTg3UVtCotLWbUTHeLsZgdhVE.roa (hash: Sz+ixKVwiOEIj7coiYEtqiN5kz/+2rKd3V8d+a0dElE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:79:28:15:56:a4:53:66:40:fe:ad:5c:ae:9f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Jul 28 19:01:29 2026 GMT
            Not After : Jul 29 19:01:29 2026 GMT
        Subject: CN=ad2f43da94e06862d5f6802c6ce5558e4864e5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:39:91:ac:e6:9d:a5:2a:f1:1c:33:12:b4:
                    d8:26:d5:10:2e:86:18:8e:4c:52:c4:67:e0:d9:ba:
                    82:9b:dd:f9:18:13:18:a0:63:41:60:ae:88:25:01:
                    7e:0b:6c:5a:6c:a3:b7:4c:8d:e9:dc:c3:6c:4f:25:
                    56:1f:83:6c:97:5a:c8:05:d8:79:41:91:a3:46:4a:
                    38:58:18:92:94:38:ce:11:a7:13:df:29:39:1d:e5:
                    29:3e:e8:96:f1:bb:58:ae:4b:bb:04:61:2e:b0:21:
                    05:2e:93:d8:08:b7:c3:82:b2:b3:b8:aa:f9:43:cd:
                    15:ee:69:51:91:ce:5e:76:74:9b:c6:36:f8:13:ad:
                    e7:ab:7f:52:b9:c0:c9:a1:7f:3a:44:cb:b2:45:5f:
                    69:86:4b:a5:4d:a6:eb:42:33:a5:55:07:f0:0e:9f:
                    d1:d6:d5:b3:e5:fa:41:af:9a:e1:e9:34:3c:03:cb:
                    2c:18:22:37:f6:57:e2:4a:65:b8:f6:48:5d:88:3c:
                    c1:c3:2e:85:d5:c6:75:bd:73:0d:d0:cb:c9:23:f9:
                    67:ef:76:2d:f8:a0:f2:22:b5:70:a1:c6:ce:a3:a2:
                    ac:b6:e2:d2:78:23:09:3f:bc:38:c4:d7:fa:f1:71:
                    41:49:c0:88:66:4b:85:1f:cf:a3:21:57:a7:2e:e4:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:43:DA:94:E0:68:62:D5:F6:80:2C:6C:E5:55:8E:48:64:E5:F5
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:01:a6:2e:0b:d5:50:c2:59:9f:fe:59:5e:a4:99:79:4e:
         0d:25:ca:69:a9:7a:c6:a7:b6:b6:74:b0:cc:c8:34:cd:28:29:
         16:0e:4a:e6:8d:d1:b0:a2:a8:d7:f1:b0:5e:aa:60:28:8a:dd:
         90:f4:f1:92:a8:55:c5:ba:1a:1f:d7:c1:66:10:d6:fb:40:ad:
         9a:36:94:b6:4a:41:a0:2e:ce:4a:22:0c:db:3a:33:47:a4:bf:
         ce:94:18:74:fc:b6:63:73:03:a0:f1:5a:fe:72:21:4a:a7:1c:
         0e:54:35:66:db:b3:1b:59:d0:11:3c:58:b5:06:84:02:b3:45:
         67:0c:c4:a4:7e:91:b8:e5:03:9a:2d:e2:62:75:51:d1:1e:ec:
         b9:71:e2:c5:7e:ed:b0:c2:2f:7d:49:0f:40:2b:50:c6:1f:4b:
         9f:08:a9:a7:35:06:ed:79:ba:3c:4b:01:d5:81:7c:57:64:90:
         24:02:c3:14:0a:75:a8:fa:a4:76:cd:4c:17:cc:98:d6:fb:e5:
         69:f0:41:82:2e:c3:71:c4:3c:00:67:43:1b:8b:ec:28:fb:2c:
         9f:8b:d5:cd:ac:3e:fe:b9:cc:bf:15:7c:54:c9:17:f8:5f:72:
         59:70:5d:f1:8e:cc:d1:2f:10:c9:a3:10:9a:c7:4f:a9:9c:24:
         2a:77:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:49 2026 by rpki-client