Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          pu5A2g9SDkrBhdPH/UM97Eq7t/tQQsyNXQq7VGZgU6o=
Subject key identifier:   D5:C6:46:27:9A:83:1A:DE:81:63:27:87:8A:51:43:72:82:A2:0F:EF
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019FA8D0858D829351E337FBD60B4BDCA58B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:05 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: ml0hhBh4TjhuyyNbJnL5qrdFFtx8T6zn8I5kyKhEvmQ=)
                          2: tcbkNHlV278WuPIHWR3nno0tNIU.roa (hash: 06lnHiwHQVCyQQPbik2oG2DAxVKNgLZC3M/2kyqLgGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:85:8d:82:93:51:e3:37:fb:d6:0b:4b:dc:a5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Jul 28 13:01:05 2026 GMT
            Not After : Jul 29 13:01:05 2026 GMT
        Subject: CN=d5c646279a831ade816327878a51437282a20fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:3f:66:bf:b0:a9:8d:9b:99:c7:ab:b3:75:
                    67:20:91:8b:76:7d:11:13:20:2e:ff:fc:64:62:b5:
                    90:ef:60:75:f9:30:b9:b6:bd:b9:35:a8:31:38:65:
                    9e:ba:35:fc:70:58:00:a8:2b:ef:b4:17:98:e1:46:
                    49:55:46:9c:03:e9:f6:54:83:cd:2e:9c:4c:c9:9e:
                    0c:79:24:ef:2b:37:28:de:1f:cb:d3:4a:df:28:e5:
                    e4:b2:b9:da:c6:80:5f:90:de:38:c4:c5:d3:8b:90:
                    0d:22:4f:5d:9d:6d:5e:ab:d7:0c:7e:b2:c2:dc:63:
                    2b:b9:f9:fb:5d:c7:45:18:0a:13:bc:68:06:b0:f9:
                    b4:35:0d:6b:d1:90:62:37:bd:aa:df:94:ba:cf:59:
                    ce:18:29:e4:c1:77:8e:65:9d:c5:bc:95:85:b9:f3:
                    3b:40:78:4a:0f:8e:5b:54:c7:11:ab:b6:8b:9f:c1:
                    95:80:d2:69:1a:99:10:66:a3:6a:41:b8:61:df:fc:
                    00:5f:66:b4:f6:03:d4:eb:e9:2e:03:83:3c:98:32:
                    1c:0a:ba:43:33:78:82:2e:9a:21:c7:f0:9e:07:de:
                    41:2a:87:3a:8c:21:f9:89:8d:2f:98:f7:ee:3e:49:
                    b3:75:0d:5e:d1:33:61:d0:06:87:3c:98:4b:63:21:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C6:46:27:9A:83:1A:DE:81:63:27:87:8A:51:43:72:82:A2:0F:EF
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:82:98:0a:c1:82:66:b7:a7:88:6b:49:c3:ed:03:47:bb:59:
         67:0d:75:05:33:1c:1a:f4:61:c3:16:07:89:f9:ea:46:f0:80:
         c3:4e:83:d7:b3:61:32:c9:56:9a:c4:da:47:8c:29:5b:fc:50:
         15:36:52:ac:bb:6d:da:fc:a4:96:30:bd:21:9a:72:84:fa:67:
         d9:cc:9f:59:f1:90:c9:49:cb:e3:74:e1:89:7a:cf:5c:2f:38:
         ac:9d:54:1c:05:92:e6:56:35:45:37:e4:aa:19:2a:1c:ce:b0:
         0b:a3:be:e9:19:f3:d3:35:21:ae:01:9b:56:52:50:4a:57:5e:
         eb:7e:a1:ec:84:3f:40:10:32:87:c2:05:46:28:bb:e2:7e:92:
         b4:3f:02:f8:b6:ed:4b:20:8b:d2:4e:53:63:08:42:e2:3b:21:
         3c:40:fb:e6:bc:43:0c:70:40:87:c5:07:c2:21:a4:e7:46:e3:
         6f:26:a1:73:90:aa:58:3c:1b:ec:7c:9d:b9:e5:7e:08:a6:7a:
         7e:f1:d8:2b:12:7a:20:8a:23:ae:62:40:4a:7a:de:75:cd:a5:
         ba:8b:73:19:6e:8a:b3:d5:a5:c4:5f:f5:1a:57:80:2c:75:85:
         cf:a7:e7:42:af:29:10:23:68:f6:0e:cb:01:79:e1:75:1d:69:
         fa:21:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:12 2026 by rpki-client