Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          t3DV6+TR8L1OvSBOxTLUjqbmMOh4vJ7oGPrelUKceHk=
Subject key identifier:   F6:EF:65:D2:F6:02:3A:6A:52:36:FD:D1:86:BB:B0:81:FB:70:AE:2F
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019FA14DBF6A0372AA5C5F42C10D1B9117A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          19D4
Signing time:             Mon 27 Jul 2026 02:00:54 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:54 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:54 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: EUwgdt/bVo2W6VmuKcGjvP8Uwj9o5ELsb/ICI8Nfdkg=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:bf:6a:03:72:aa:5c:5f:42:c1:0d:1b:91:17:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Jul 27 02:00:54 2026 GMT
            Not After : Jul 28 02:00:54 2026 GMT
        Subject: CN=f6ef65d2f6023a6a5236fdd186bbb081fb70ae2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:cd:b2:be:ff:c2:52:b1:67:88:a4:e3:10:
                    4d:55:2c:87:d7:bb:3b:fc:8f:89:c0:96:59:87:91:
                    ee:1a:d5:1a:d5:42:fe:2d:18:bb:07:3b:81:18:02:
                    74:00:d3:cc:7c:1b:90:be:fc:95:4a:f7:f4:0a:df:
                    1d:86:1d:79:e2:1c:e3:67:64:d8:7d:47:9d:51:cf:
                    e0:d9:6b:f4:d1:f9:71:d9:02:d8:1d:cb:ed:3f:cd:
                    69:5f:75:cf:5c:74:70:b3:ed:27:38:51:1d:49:d3:
                    d5:94:07:6d:5d:db:ea:73:e7:b2:fb:75:2f:db:60:
                    c3:29:5a:85:f0:99:8c:69:7b:ea:7c:70:44:32:38:
                    f6:d4:a9:ec:85:c2:ca:3c:27:4a:90:17:39:c6:b8:
                    18:87:0d:7c:6e:a8:14:91:7d:34:d9:ab:aa:6d:a8:
                    07:d4:a4:d4:f1:df:00:23:9c:23:02:d0:7e:d5:b2:
                    21:93:94:36:d2:8d:7b:51:bd:17:b7:3e:ed:89:0a:
                    53:62:4d:d0:11:4c:3c:01:55:ba:a6:75:47:24:16:
                    6e:36:a2:33:41:95:0a:8c:27:7f:48:d9:99:28:40:
                    3a:32:3f:a7:6f:3d:85:2d:6b:ad:0e:0b:b3:7d:69:
                    47:e0:69:53:aa:7f:ce:ae:b7:c1:26:8e:00:8e:64:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:65:D2:F6:02:3A:6A:52:36:FD:D1:86:BB:B0:81:FB:70:AE:2F
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e2:83:ef:a3:b3:c0:e6:5a:e9:9f:ac:3e:5b:1e:5d:4d:27:
         6b:73:eb:f4:04:9d:e8:03:d6:90:69:2a:5b:7a:32:a6:50:9e:
         bb:5b:86:ff:de:6b:b0:7c:f3:69:84:29:04:9a:87:5f:c9:41:
         3a:f0:de:0b:c4:3a:a3:60:c8:e7:e0:ef:82:49:ca:03:81:ba:
         70:c1:d6:54:e6:5d:05:b3:8e:0a:68:e9:54:2a:36:d0:ff:2b:
         4a:29:0a:0b:c0:6f:80:e6:29:ae:e5:9d:fe:bc:58:07:bb:5a:
         cb:42:6c:f6:f0:bf:52:2a:64:d4:aa:7d:e6:fa:ba:37:40:c7:
         a3:b2:5d:bd:48:b0:2e:f7:57:47:13:78:34:ae:c1:62:c7:9d:
         1a:fb:6e:a1:97:97:2b:5f:0e:ff:85:82:3c:56:8c:df:f4:db:
         03:ef:8b:79:03:63:f6:6e:a8:9c:43:0a:74:59:0e:96:6e:e5:
         85:2d:9b:f6:7b:6e:f5:48:4f:f7:51:51:21:7f:98:9c:62:75:
         c7:c2:2d:03:06:f3:a1:2f:db:74:70:f8:eb:91:3b:af:b1:ce:
         f6:3c:a5:04:39:5b:11:c1:fe:e6:6b:d1:09:56:88:6b:04:8b:
         8f:8c:92:ee:73:3b:df:85:1e:50:7d:d3:66:98:f6:c5:4b:34:
         64:f3:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:03:38 2026 by rpki-client