Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
File:                     BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft (raw, json)
Hash identifier:          YPIUGLpWcnYVjCxo/dMPEh0UtvMgVVith8CNMm6OGdQ=
Subject key identifier:   80:C9:41:4A:C3:6C:29:0F:92:D9:2D:52:90:38:67:6F:C9:83:63:10
Authority key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B
Certificate issuer:       /CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
Certificate serial:       7B4EC7F4FE578FE3ECE460FCC07FC233CE347522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
Manifest number:          0124
Signing time:             Tue 28 Jul 2026 00:32:52 +0000
Manifest this update:     Tue 28 Jul 2026 00:27:52 +0000
Manifest next update:     Wed 29 Jul 2026 04:30:52 +0000
Files and hashes:         1: BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl (hash: gYa0GDBEw+TcGNlbEWfvzl7PsJ3mnZdaMbriJf/pk2I=)
                          2: AS210352.asa (hash: eDmTtEI2L8UnjXdJYLK4KpDqqBZSh4hjuB+p0Ri9A6I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 04:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4e:c7:f4:fe:57:8f:e3:ec:e4:60:fc:c0:7f:c2:33:ce:34:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b
        Validity
            Not Before: Jul 28 00:27:52 2026 GMT
            Not After : Jul 29 04:30:52 2026 GMT
        Subject: CN=80C9414AC36C290F92D92D529038676FC9836310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:42:b9:68:0c:55:af:04:f4:47:2f:5e:86:
                    e5:2e:c8:0c:8f:2f:41:bc:58:9a:8f:9f:68:a2:2a:
                    47:89:34:30:f5:47:79:6d:86:85:54:de:1b:08:ab:
                    4f:75:6c:69:af:60:59:76:8a:49:7f:50:34:ca:6f:
                    e3:19:16:18:59:92:ee:f5:43:1f:76:77:88:a6:19:
                    de:79:13:96:2c:ea:9d:80:aa:c9:27:0c:19:29:68:
                    81:70:a4:89:21:37:c1:a4:f7:28:27:41:cc:10:05:
                    de:0d:71:02:ee:0b:7f:b5:e6:fa:99:88:2f:44:56:
                    49:34:c6:40:7f:0a:7b:26:2d:ab:1e:18:88:f6:f5:
                    e5:33:b9:91:c7:22:0e:5e:6c:77:02:57:c2:26:56:
                    ff:08:41:60:0f:12:77:c9:cc:af:44:ff:5a:55:bc:
                    37:f2:c4:cd:04:a1:6e:64:5a:59:4b:41:8a:ed:83:
                    72:e7:00:93:3e:fd:b6:d4:60:f9:98:6b:94:88:70:
                    d2:72:4e:6a:4a:1a:33:47:ba:66:f7:7a:0c:35:f6:
                    b0:84:7b:ee:95:78:88:ca:f8:1a:02:e4:47:36:30:
                    86:07:24:bc:43:96:5f:92:87:50:91:9d:a5:4e:3b:
                    8d:f1:e5:d2:49:df:1a:02:dc:21:7f:88:a1:55:ab:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:41:4A:C3:6C:29:0F:92:D9:2D:52:90:38:67:6F:C9:83:63:10
            X509v3 Authority Key Identifier:
                keyid:BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:bf:f4:f4:85:85:66:aa:c9:b2:3a:50:c5:c4:32:5a:df:
         09:4b:7b:cc:85:fd:07:8a:7a:51:0b:29:7b:72:a7:56:68:b9:
         b6:6f:09:b8:2f:a5:d1:47:09:82:13:8a:59:5c:86:38:99:29:
         88:5e:59:a4:f6:ad:3a:09:f6:a0:91:d6:ba:6b:a7:2a:4d:c6:
         72:55:da:bf:8f:9b:d3:4b:f0:71:51:66:cf:3b:72:4f:d5:a9:
         3e:dc:ae:0b:e7:2c:82:d3:73:0d:ce:99:f4:19:6c:b6:ed:36:
         63:40:3f:2a:71:5a:e5:d2:8e:df:33:7f:86:db:73:61:4a:8f:
         9f:52:3d:3a:be:33:91:d2:74:5e:22:ca:4c:4f:20:db:93:ef:
         ee:3c:54:49:48:a9:1a:96:cb:ef:90:f4:fb:9e:7b:e1:fc:83:
         7c:10:62:09:9b:99:4f:28:c8:dc:d3:6d:f8:92:d0:2d:81:98:
         a4:cd:a1:12:68:e7:0f:b9:3a:cc:e1:d7:82:87:7c:a6:fc:0e:
         68:43:14:bd:86:d5:11:33:45:ec:92:59:59:3c:13:93:89:49:
         87:45:dd:6f:91:a1:eb:43:e2:75:73:9f:07:fd:54:e8:3e:b4:
         c7:6f:49:d0:74:ca:b2:af:81:e5:2c:4d:fe:4e:c0:01:30:7e:
         17:5e:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:19 2026 by rpki-client