Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          JWkuEpVSt933Y09642h4y959cXgR24H4qq4VGbPMp9A=
Subject key identifier:   31:80:80:06:A3:F1:09:2F:C8:E2:2A:C9:29:B9:3D:3B:44:65:8B:05
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019FAA19880A5224627EA9B513D5309EE928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          16CE
Signing time:             Tue 28 Jul 2026 19:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:27 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: uTH2lwMWD4Wr+TgB3fyDQi0W3KRZjEEn0FvTCf1KFhI=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:88:0a:52:24:62:7e:a9:b5:13:d5:30:9e:e9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Jul 28 19:00:27 2026 GMT
            Not After : Jul 29 19:00:27 2026 GMT
        Subject: CN=31808006a3f1092fc8e22ac929b93d3b44658b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:1d:a8:6e:52:0f:19:02:f2:c7:54:12:93:
                    87:cd:7d:ba:21:80:98:a8:18:00:d2:2e:14:99:ef:
                    21:0b:ed:04:8c:19:50:e9:4b:55:37:34:f9:14:d4:
                    01:2e:50:3c:95:f5:37:59:2b:c0:28:99:9b:cf:83:
                    9b:46:43:9d:96:7c:43:a9:83:ec:37:fc:83:28:5f:
                    88:09:2f:55:6e:c3:c1:fd:82:f1:74:0e:9f:b1:e0:
                    62:cb:c8:3f:eb:db:39:48:85:d5:14:6b:6f:36:f2:
                    c9:69:3d:26:41:39:75:b7:4d:41:45:ff:9f:c0:30:
                    22:b1:1c:90:89:59:ae:7c:51:be:0f:dd:f9:7d:7a:
                    41:58:99:0e:33:39:7a:7d:90:9f:ac:18:30:ab:a8:
                    53:41:17:62:99:be:36:2d:64:f1:a6:d8:3d:47:cd:
                    57:86:b8:77:be:19:d3:1d:0e:38:53:39:12:1b:e9:
                    ec:47:73:d3:38:96:4f:e5:9b:15:13:3d:0a:10:e2:
                    22:95:74:7d:09:63:1e:5f:80:a3:56:21:35:34:8b:
                    83:ea:d4:e5:c6:95:04:44:9e:5b:9b:68:95:56:45:
                    f0:52:12:30:2b:7d:13:a3:84:12:65:0c:4c:6f:41:
                    a9:12:48:ed:a1:bb:20:81:36:23:65:3e:53:88:8e:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:80:80:06:A3:F1:09:2F:C8:E2:2A:C9:29:B9:3D:3B:44:65:8B:05
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:4c:a9:59:d1:7c:67:5a:7a:d3:f3:1b:8b:73:99:8c:53:
         d4:ad:4e:ef:12:c1:65:44:ac:eb:57:7c:2d:dc:6b:85:e2:4b:
         79:be:a3:81:96:fa:52:08:59:6c:6b:10:f7:16:81:7e:69:1e:
         99:7c:ee:37:c2:eb:2b:bf:d2:74:85:1b:ac:46:82:98:8c:13:
         7c:dc:3a:89:45:78:10:80:09:99:91:be:48:5b:94:8c:74:b6:
         09:a4:2d:2a:78:2c:0d:7c:9c:e6:10:1e:36:d2:f3:70:ac:ef:
         23:14:7c:76:6c:f4:35:02:74:0c:99:2c:70:96:d1:2d:ce:4d:
         43:1c:49:be:cf:14:f0:94:f2:c1:f0:e7:6f:4d:77:f2:41:9c:
         96:c7:88:77:f5:6c:c9:61:3a:2c:7d:52:01:97:d5:d8:50:06:
         2c:39:06:3b:fe:ea:46:04:4c:3c:14:39:28:ab:0c:4e:51:b5:
         37:97:43:f1:1f:b2:a6:c8:25:4c:a2:6f:3e:11:5d:0c:ae:5b:
         e5:53:f3:70:9a:35:bc:87:a6:67:69:48:8c:42:31:7f:3a:1e:
         f8:2c:80:e2:0a:7a:b6:0e:a4:47:5d:33:79:50:04:f3:cb:a4:
         09:24:1d:ad:4b:79:20:67:0c:3a:31:1c:30:90:7c:46:7f:7f:
         a3:0f:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:26 2026 by rpki-client