Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          qznKd+bViNqedrIOP9Gin0zk8CjNgCCpuWGQEgg8P2Q=
Subject key identifier:   73:9E:D8:56:5A:F7:3C:4C:95:1C:58:9F:36:8B:EF:23:34:80:19:D3
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       019FA9AB993A09E014CAB61DF789F69D8A52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 17:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:23 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: l0P0mPHMCA+ttNidkbZ9Th5FL93MnPWe0IJedkmJQjs=)
                          2: tEe3a-zQmY1uh_qVtaABlyzAWds.roa (hash: HWUG6mrvt6f6sZlEJOtZpDSCgFXcJ6JwrGDgcXpGBfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:99:3a:09:e0:14:ca:b6:1d:f7:89:f6:9d:8a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Jul 28 17:00:23 2026 GMT
            Not After : Jul 29 17:00:23 2026 GMT
        Subject: CN=739ed8565af73c4c951c589f368bef23348019d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:77:35:f9:30:2d:a0:74:3e:0b:e0:99:1a:
                    78:87:d1:2a:45:23:53:6b:79:d0:1c:1c:33:85:2c:
                    63:d2:31:ff:c9:5a:be:26:51:0b:6a:12:9b:f2:b8:
                    23:d1:2d:64:b5:40:ba:11:80:15:05:1a:d2:67:ba:
                    9a:ac:92:bb:c6:b2:60:4e:00:4b:1f:93:60:cb:58:
                    c2:fe:43:6a:c1:71:a6:8a:3b:72:86:88:52:4d:20:
                    8f:c3:76:03:6a:bd:82:fd:86:92:f9:6e:6a:57:10:
                    59:71:96:f5:dd:72:a8:07:4f:28:2e:50:a8:5d:5d:
                    05:ed:bf:e2:42:9f:3b:f8:fc:ce:d4:fd:7c:7d:05:
                    c0:e9:9f:bf:8f:86:ee:cc:f3:ed:bd:97:a4:28:55:
                    7c:e0:de:d1:8d:e9:32:89:b0:4a:e5:77:04:6a:d7:
                    7b:27:c0:22:db:34:91:61:1c:7c:42:90:e8:c4:03:
                    90:fb:cd:aa:dd:7e:ba:d8:2a:26:66:79:12:23:55:
                    cf:54:7b:be:07:70:5b:74:ad:45:bf:31:40:ad:40:
                    4c:b7:e3:8b:37:93:a1:d9:5e:1a:86:0a:88:b5:92:
                    b1:a6:d5:ea:61:4b:2f:b9:7e:e6:fa:db:91:1f:4e:
                    b8:2f:c8:6d:86:57:22:c0:82:66:7e:89:33:0b:65:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:D8:56:5A:F7:3C:4C:95:1C:58:9F:36:8B:EF:23:34:80:19:D3
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:68:b4:ba:9c:88:61:3d:4f:c7:4a:d3:19:1a:07:52:7f:
         67:40:7e:da:1d:a7:d8:47:e6:b7:8c:ec:0c:d7:83:b3:ee:d7:
         d7:5e:f4:2b:d0:d2:d0:6f:d4:c7:57:70:5b:d3:20:29:4a:d1:
         da:6e:fb:ae:1c:a5:0d:e0:ec:e1:d5:2a:41:fe:ea:de:54:32:
         d6:89:97:a0:16:ad:3b:42:f1:c4:a9:23:78:1d:d9:17:7b:95:
         b9:89:10:2a:21:d2:c4:a0:ce:88:49:49:32:a6:a2:a0:1f:ae:
         09:b3:8e:bc:8f:64:f3:13:57:78:f9:d6:b9:63:b6:91:9d:eb:
         19:88:cb:91:86:02:c8:0c:38:58:b2:2a:51:11:63:f3:88:7c:
         f0:5a:f8:19:da:7d:8c:95:7f:00:52:42:fd:18:58:f6:c0:74:
         45:13:66:c7:b5:26:02:8d:64:80:a6:5b:f6:bf:91:6a:93:2c:
         ab:5b:32:dd:69:c2:7c:b8:5f:7b:55:40:ca:f8:70:4a:77:de:
         b7:44:1a:9c:6b:6b:b9:71:32:54:6a:b2:5e:46:9a:02:10:d1:
         f1:1e:78:ec:57:ab:f3:3a:9d:3f:05:35:29:ca:aa:7d:23:48:
         b3:28:ea:01:59:48:6c:1c:fe:9b:f6:07:c7:20:5d:1c:b3:cc:
         cf:4d:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:31 2026 by rpki-client