Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File:                     bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier:          EYJMFkVcWZ178i18EPMUwxb+Yojeb1XQGWvelXn+cHU=
Subject key identifier:   BC:F8:C6:E4:57:DB:7B:7B:0F:A0:24:72:1E:1E:48:84:75:9D:43:76
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       019FA1BB36D1DDB85E6885B37981254C8104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number:          1938
Signing time:             Mon 27 Jul 2026 04:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:28 +0000
Files and hashes:         1: 5MpTWg7vOC10jLratdl1_iJfqFQ.roa (hash: WBcsUKrOcStpVBrwzN2JImax8LyO4TXbQF8KR2s4TVo=)
                          2: B3x10EBzihJq8QxD90A60FEqEz0.roa (hash: X2mSotg1WCyJhyzR7z2UsB+9u+XI3nXErU62l1uIIvo=)
                          3: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: NLywEsNXj6pqZf/AbtEyeSzP/whtV8NgL51lfqZGYWc=)
                          4: de_3vJfXeXhVKgCaiSs44gZCA8A.roa (hash: SZ/DHM8HFtP6XUXr8ZKZg3jTMbbqq1Kkx2fwqWMQRhg=)
                          5: x3YkXAPuFFAQU2qypU85h20QD78.roa (hash: 2sWys96464RaFQza5Xomz0qM/22LLb+sW69zdCIvPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:36:d1:dd:b8:5e:68:85:b3:79:81:25:4c:81:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: Jul 27 04:00:28 2026 GMT
            Not After : Jul 28 04:00:28 2026 GMT
        Subject: CN=bcf8c6e457db7b7b0fa024721e1e4884759d4376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:cf:5b:a9:8b:0b:d7:e5:63:28:4c:e1:51:
                    6f:d2:2d:6e:c6:5c:ff:44:09:26:c6:ea:b8:ae:4e:
                    b9:dd:b2:b5:a9:f8:9c:e6:f0:f7:68:1b:b2:d6:fb:
                    7a:90:13:61:b4:c3:4a:4a:78:3f:95:1c:86:32:af:
                    5d:74:75:8a:69:a0:47:53:9d:16:0d:15:a7:3b:ce:
                    0b:eb:8c:6a:a6:03:a8:3d:b7:42:77:c8:ad:b5:7f:
                    7d:d9:7a:71:e7:ce:03:e0:57:8a:58:f0:78:b3:56:
                    40:3d:01:4d:3b:02:43:22:c4:43:94:18:02:30:c9:
                    49:47:34:8e:4c:b1:e2:04:71:02:fc:44:00:e3:ed:
                    34:b7:71:16:a7:5e:99:90:96:c2:26:b5:06:75:6e:
                    2f:8f:14:71:1f:64:e1:c3:81:41:f1:b8:1f:62:1b:
                    c3:6b:47:cb:5c:45:36:c5:48:38:e7:4c:36:49:db:
                    49:e1:de:da:8b:f2:aa:20:55:69:4b:fe:98:f6:24:
                    5c:e9:21:08:4a:4f:73:85:21:0d:c2:68:46:f5:84:
                    80:90:3d:ae:36:11:cb:4f:ff:d0:1e:db:55:74:94:
                    85:03:eb:a4:42:e1:3e:b1:78:84:92:b0:05:e0:4c:
                    42:69:23:6d:3e:2b:20:f4:34:33:a2:89:39:4c:d4:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:C6:E4:57:DB:7B:7B:0F:A0:24:72:1E:1E:48:84:75:9D:43:76
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:19:d5:7c:fa:de:0f:e0:12:13:2d:4f:fa:4b:5d:77:67:74:
         63:5e:bb:fd:b7:3f:f0:e7:55:ac:56:47:b4:51:93:cd:a4:f9:
         8c:5e:4f:92:17:c0:7f:25:27:ab:42:6e:e8:d1:05:86:43:73:
         14:8d:fe:1d:8f:ce:8f:cd:18:f9:14:84:b2:a9:a9:7e:28:6b:
         f3:8f:dd:0b:46:cd:58:88:e6:b0:0a:59:01:75:96:19:b1:08:
         c9:45:85:d8:7f:25:90:df:05:c7:46:76:28:2c:d7:71:4a:78:
         b5:cc:0e:d4:59:33:53:19:c2:12:82:d5:58:b2:9f:3b:c4:12:
         53:47:6e:78:2a:6f:5a:40:20:a4:ef:5b:da:20:ae:d6:1d:b1:
         54:da:29:92:22:b1:18:11:3a:7f:2c:e2:83:64:a3:72:6c:e7:
         d3:a6:75:aa:7a:1c:c9:5e:7e:14:54:53:4a:27:86:ca:42:a7:
         d4:22:70:96:2c:2c:6f:a2:9d:4c:f1:27:57:a6:8d:a1:75:03:
         21:f0:4e:ed:6e:af:d9:4e:3c:2a:7b:71:c5:9c:9a:99:3c:d2:
         54:b5:13:19:c0:4a:ba:e9:46:4e:48:17:db:ce:ca:f9:12:59:
         37:72:dc:ea:29:18:63:53:16:ab:e7:34:7d:2e:70:c4:41:e6:
         0b:58:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:09 2026 by rpki-client