Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          m5nBMndWF7rFMBUK/M5rl6qwdYy8/++NHv+Ap60Pkiw=
Subject key identifier:   E1:37:30:B0:CA:BE:10:08:CB:8C:27:C4:AB:9A:01:EE:1E:A6:C3:B3
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       01A001A5DBA542B6D806EF9CB9672BB6EF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          191F
Signing time:             Fri 14 Aug 2026 19:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:41 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: fnkSNFP5+jF8OAKF2fsG8qtDiSXHAJlSCMKDAq8Lu2U=)
                          2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:db:a5:42:b6:d8:06:ef:9c:b9:67:2b:b6:ef:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Aug 14 19:00:41 2026 GMT
            Not After : Aug 15 19:00:41 2026 GMT
        Subject: CN=e13730b0cabe1008cb8c27c4ab9a01ee1ea6c3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:b4:ea:f0:03:2c:06:b0:92:59:87:2d:8a:
                    17:59:72:d8:fd:a9:e8:e6:ce:0f:23:06:69:0a:ef:
                    63:61:a1:9f:d9:22:35:0c:bd:70:ab:49:cd:50:aa:
                    ad:55:f1:e3:19:7e:06:6b:9b:85:b5:55:d7:70:d2:
                    2a:b8:64:a7:52:be:9f:5a:6b:f8:24:c0:d0:24:e3:
                    33:3e:5a:9d:a0:e7:ff:30:f2:f2:00:5b:f7:59:94:
                    72:55:09:e4:9e:ab:71:2d:91:6f:7b:c5:83:bd:24:
                    72:52:ff:7c:eb:55:3d:34:5c:14:19:6d:c5:4f:32:
                    27:a3:8c:1b:9c:b4:02:15:4d:64:21:c4:b6:4c:8a:
                    4b:b8:7b:d9:f1:9b:ba:b4:b2:15:33:1c:05:e0:1b:
                    95:e1:7b:64:dd:12:ab:9b:44:be:fe:a7:e2:dd:08:
                    12:10:be:95:e1:ed:8a:ec:38:ba:84:18:f0:70:11:
                    d8:e3:fc:7d:ad:e5:5f:90:0a:5a:c8:8c:35:9f:be:
                    88:a8:e5:fd:15:28:6b:3c:f5:d8:27:cc:8a:b9:59:
                    c9:08:48:f5:69:a9:10:42:b8:db:52:e2:41:5a:9a:
                    5b:33:18:e8:b9:18:d0:c3:12:86:5c:60:99:da:25:
                    86:e2:c8:c4:26:1e:90:a0:e8:52:6f:84:ef:6a:f1:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:30:B0:CA:BE:10:08:CB:8C:27:C4:AB:9A:01:EE:1E:A6:C3:B3
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:63:2a:25:33:1e:dc:0e:8b:87:97:64:02:e5:76:be:c0:b1:
         42:5e:8e:ef:b2:0a:fb:f3:31:e1:3b:ca:de:e8:84:f5:43:d6:
         46:24:66:48:b7:9a:f7:a8:b1:90:bc:14:41:d6:89:58:0f:91:
         5e:d4:64:2e:a4:5a:a7:b9:11:6a:95:88:6e:61:44:83:55:9b:
         ee:63:ea:27:87:6e:e4:1b:3f:5a:3c:42:3f:5a:3d:29:3c:85:
         89:54:b9:9f:b0:7b:d6:d1:12:d3:66:4c:3d:c3:77:41:4a:84:
         56:d6:d9:00:89:cc:ed:6b:8f:36:e7:ab:ab:51:80:31:a2:c6:
         c5:39:7a:66:df:38:d9:fa:4b:af:6f:a8:e0:eb:75:eb:6a:bb:
         44:03:a6:1d:9a:3c:fb:f6:67:61:11:d0:a4:0f:8e:81:15:d4:
         4b:2d:8e:82:69:19:56:90:3f:3f:d4:63:36:e0:af:d3:52:16:
         12:3b:b7:0c:e3:48:6d:70:a0:48:c0:97:cb:69:2b:8a:27:6c:
         74:9c:78:af:9c:4c:3b:db:d9:13:b1:a2:d6:66:b0:c4:22:26:
         b1:78:79:19:4a:54:4f:c3:51:f5:75:ad:c5:65:85:26:e6:e0:
         ea:1d:1c:26:ba:e7:67:de:28:8c:1d:21:98:85:f5:1f:cb:1b:
         76:c8:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:55 2026 by rpki-client