Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File:                     B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier:          Ns3LmjwET2eNrFVf6yfRQGdA4umEASmDUEJ/vKubVdY=
Subject key identifier:   D4:B6:E0:ED:55:82:49:95:B5:A7:47:09:5B:47:11:3C:96:F8:2C:46
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer:       /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial:       019FA82B8F754E0D20CCF9D8399708DABA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 10:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:54 +0000
Files and hashes:         1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: VPDXFpVhHg6IOkedepqAfw9nurF0y/pEU07MBRRW5jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:8f:75:4e:0d:20:cc:f9:d8:39:97:08:da:ba:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c610b2a06db1831854b6726c33090336287415
        Validity
            Not Before: Jul 28 10:00:54 2026 GMT
            Not After : Jul 29 10:00:54 2026 GMT
        Subject: CN=d4b6e0ed55824995b5a747095b47113c96f82c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:56:8f:3f:be:ba:1a:97:2c:c2:c4:6b:a4:
                    d6:91:17:f9:69:66:58:09:11:2e:e8:7b:3b:a0:8f:
                    57:8c:3c:63:3b:8a:ca:71:36:7e:84:8e:2e:4a:a2:
                    0f:fa:83:86:0c:e8:00:06:f6:84:71:40:57:9a:7a:
                    48:61:35:60:14:c9:e5:f7:d8:60:d1:98:4b:73:07:
                    7f:2c:00:1c:f4:fd:2e:46:c4:20:fc:e0:6b:fc:88:
                    ea:da:7b:b1:6e:1b:8c:a3:51:c1:73:08:f3:7a:13:
                    83:e3:7d:b1:26:c1:61:7a:c5:e3:bd:36:fa:88:51:
                    50:ca:35:c7:23:52:af:01:3f:3d:b9:40:15:d0:24:
                    43:e8:80:f8:27:28:5f:ec:83:29:91:cf:ee:4a:d4:
                    06:d7:2c:31:18:cf:af:30:73:f3:1c:28:76:c5:52:
                    34:f9:4f:f8:ce:93:a9:b9:58:55:08:5f:0e:9e:a8:
                    7f:72:d8:29:f0:87:ca:4a:18:31:51:9b:8a:ef:8b:
                    73:28:d3:db:94:4e:90:50:e3:ba:9d:91:f3:e9:12:
                    7c:ef:80:29:1d:ce:dd:c6:36:29:7d:7d:64:30:13:
                    c2:c5:7c:cb:d2:44:54:06:32:7a:dd:f7:a3:fe:ea:
                    de:26:71:09:60:f1:95:65:29:ac:99:3c:49:20:20:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:E0:ED:55:82:49:95:B5:A7:47:09:5B:47:11:3C:96:F8:2C:46
            X509v3 Authority Key Identifier:
                keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:26:0b:ad:ce:57:4b:6c:22:96:c2:ed:74:c1:27:8b:77:dc:
         38:95:27:24:e2:44:1d:4c:1f:ad:4f:e4:f4:b6:00:26:f7:64:
         97:ac:24:c7:ae:46:e7:c3:ac:4c:47:42:a8:26:67:45:ce:15:
         d6:58:13:dd:b7:75:0c:a7:b5:fb:13:f5:ea:0c:a7:35:b4:d4:
         48:fa:f4:3c:fa:6a:8f:a5:50:aa:3f:70:aa:61:0f:9a:59:cb:
         1e:13:a9:8e:61:b7:1a:58:c2:77:05:d8:8f:06:46:0b:d0:56:
         dc:5a:50:67:21:5c:2e:e3:f7:1e:2e:92:8c:b6:1c:19:39:94:
         bd:b2:1b:a0:f8:05:3e:2a:c7:7b:c5:e0:13:fd:66:a3:b5:55:
         ec:78:ef:25:03:b9:5b:a6:52:47:e0:e0:69:da:0d:54:85:69:
         48:5a:2e:fe:96:4a:b2:c8:3c:4e:56:e2:49:f1:59:d6:a4:ce:
         02:e8:09:50:94:1a:f0:6c:b3:82:6c:a7:d1:c8:fa:72:aa:07:
         8c:81:04:c2:ab:b2:c0:f5:61:bc:91:a1:d3:d3:15:a6:f4:1f:
         79:9e:29:ad:ca:9b:22:f7:45:65:6a:d3:61:f3:26:8f:6e:86:
         fa:8d:99:f0:0b:69:24:2b:45:ec:9e:cf:29:e7:87:74:74:83:
         db:89:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:16 2026 by rpki-client