Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          0SJZGwOXUS1bPGOy4UVVCyMKwu2Q6WitGmrxd7Kr0us=
Subject key identifier:   7B:19:CC:05:95:4F:8C:1D:F3:3A:7F:09:94:B9:56:D0:AB:B9:1B:1B
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       019F841EA99373FACB26B3F78C6E68E0DCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          19E1
Signing time:             Tue 21 Jul 2026 10:00:29 +0000
Manifest this update:     Tue 21 Jul 2026 10:00:29 +0000
Manifest next update:     Wed 22 Jul 2026 10:00:29 +0000
Files and hashes:         1: 3wWxSXnn1AkR2FQz-cSLXCO25fE.roa (hash: 9Mau/Rvq7d0nRIpqNv+3vxuSV8Oxqjuu2vQqrrKBRSo=)
                          2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
                          3: P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa (hash: gL2/PVEx/BkWJ9c7qys5mfYr8ijPQCI4jEJ/mb5fIUI=)
                          4: WNIo6fh_J1JaSjunj1Z5Xu1CXJ0.roa (hash: I9y0xJA8TLrCiSo9CMmPRbQsrLPI2QdSmCxydXLI1h0=)
                          5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: mNyyyNW6fXPiRvqhZy1O6PlZeeWH9bEex3Rufe8a0Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:1e:a9:93:73:fa:cb:26:b3:f7:8c:6e:68:e0:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Jul 21 10:00:29 2026 GMT
            Not After : Jul 22 10:00:29 2026 GMT
        Subject: CN=7b19cc05954f8c1df33a7f0994b956d0abb91b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:af:bb:9f:3a:16:e7:c8:0d:00:46:90:c1:
                    31:86:dc:d8:51:ce:17:b5:7c:9a:c3:c0:a2:8a:00:
                    68:bb:2f:54:39:1a:55:61:0f:11:35:e1:96:73:be:
                    41:80:5f:65:d7:5d:88:a7:f4:e3:32:bf:4d:9a:21:
                    3f:ca:67:a3:ba:97:0f:ee:4d:85:64:77:aa:37:b3:
                    7c:3c:61:ce:e3:00:50:4c:3a:de:96:e5:53:27:48:
                    c2:ab:46:c1:1f:9c:d6:8b:96:88:b6:9b:c9:c1:87:
                    51:1f:16:78:59:ac:97:93:f3:e7:05:2a:ad:2c:09:
                    e2:02:96:58:52:66:32:2a:61:7a:9e:c5:0f:00:95:
                    16:9f:75:3e:a8:7b:de:d9:0d:64:62:db:3c:12:0c:
                    80:cf:23:6e:27:f5:7a:2a:8c:33:2d:7b:f4:08:90:
                    17:84:f5:69:7c:d1:b1:ca:3b:37:e8:2f:21:6d:b5:
                    62:e5:42:7e:4a:6d:bb:d1:f6:52:95:94:53:d8:f2:
                    6f:5e:2c:6d:10:a3:47:ac:28:17:71:69:c4:89:d5:
                    90:1a:f4:3f:72:a7:2e:12:dc:38:ed:a4:c0:7d:29:
                    87:9b:3d:67:ac:6e:5b:f9:38:46:2e:4d:8a:41:9c:
                    8e:e9:93:eb:3f:84:10:d1:57:aa:f1:14:20:4a:db:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:CC:05:95:4F:8C:1D:F3:3A:7F:09:94:B9:56:D0:AB:B9:1B:1B
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:e9:90:cc:29:6a:9f:42:5a:1b:23:7a:c7:ce:8e:43:49:
         9f:bc:ee:e1:e4:06:eb:f6:11:cf:f1:b0:06:12:1f:ae:eb:39:
         40:74:ba:12:23:1b:74:19:b7:e1:bb:53:c3:6b:32:6a:89:45:
         c4:1b:29:c4:4b:94:ab:d8:12:8f:99:76:b6:82:54:ba:76:ee:
         58:cb:6f:a7:1d:c5:fa:30:37:21:a2:bb:a6:b4:8f:28:80:a1:
         2f:72:37:5f:63:fd:f1:9d:05:fa:db:75:5f:15:2b:16:62:35:
         40:76:b3:49:47:3d:ff:8f:26:06:50:5a:fe:ee:0a:e2:49:af:
         dd:72:4e:e8:f6:ea:07:ab:50:8b:72:d7:7c:83:80:79:2e:59:
         39:9c:94:77:ff:16:3e:17:20:ec:15:18:95:2a:7d:54:c1:18:
         5f:1e:61:85:28:e5:b4:09:8a:3c:12:b3:9e:3f:8c:08:44:a3:
         da:32:79:e5:66:aa:be:af:47:fc:a8:b4:f0:f1:b1:3b:28:58:
         25:cf:81:a2:e9:ff:4c:ff:a7:79:bb:51:ee:28:c6:bc:f1:54:
         c9:93:bb:a2:a8:0d:00:2b:ce:20:3c:a4:bd:83:ba:2a:13:56:
         88:a7:e8:41:1f:32:65:5c:1a:c4:7e:f8:fb:f5:c6:51:a2:6a:
         f3:62:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:44 2026 by rpki-client