Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          PhnTIZD7Ya8Vc/HNvYGH/Sx0zi6zX0AR4URr2uKawtM=
Subject key identifier:   E3:5F:84:C9:55:95:26:E5:C6:B0:14:78:4E:06:26:0E:08:9F:AE:09
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       019F848CBE72FA95169AFEBA3123C8634B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          1557
Signing time:             Tue 21 Jul 2026 12:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:43 +0000
Files and hashes:         1: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (hash: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac=)
                          2: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: Y0sExa2B8PR1LKvPiqDQBqmImi1QUP5BsoiBsbLWyhc=)
                          3: U_IVMG7bQBnJVGDLyXYBpWOHB2A.roa (hash: q/ZezPb+HqhfJjhS/MThIaBJugpttbjehqzX0ZM2VRQ=)
                          4: Y28x5IzUI42VFOBvke09KYzr7_U.roa (hash: hhVaUfCtGXTnfymIDdR8UxHA+TnCtopLvOzuoWmW+28=)
                          5: bLR2p3__awZBusTPsasm4YiUzOA.roa (hash: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=)
                          6: rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (hash: Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:be:72:fa:95:16:9a:fe:ba:31:23:c8:63:4b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Jul 21 12:00:43 2026 GMT
            Not After : Jul 22 12:00:43 2026 GMT
        Subject: CN=e35f84c9559526e5c6b014784e06260e089fae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:75:6b:b8:f2:48:8b:31:23:9f:57:93:6c:
                    ec:73:bf:70:16:bc:50:38:45:29:15:7a:33:94:0a:
                    c3:1d:f2:ae:57:37:69:51:a6:f5:57:4c:43:a1:da:
                    b2:a2:e4:94:41:b7:d8:df:b8:62:81:ca:ae:fe:66:
                    bf:93:94:4c:53:f2:30:99:dd:93:d2:e5:8f:08:8a:
                    ee:d5:50:4c:45:9c:6b:2d:e8:a0:e7:10:64:e6:ea:
                    3c:75:03:63:b6:02:d1:0c:70:49:74:2e:78:bd:16:
                    77:32:c6:13:df:bd:e4:06:4c:ee:49:94:fb:98:91:
                    f5:3c:f7:26:f0:d9:17:ea:5b:0a:18:65:2e:69:28:
                    bf:d0:f6:77:7f:fe:49:56:51:04:c2:69:2a:6c:51:
                    44:f8:60:d8:32:12:8c:e7:a8:04:83:31:42:2a:41:
                    4e:33:fa:7a:61:d0:ec:48:ed:e7:a5:85:8f:09:d0:
                    9e:83:ce:2c:26:86:68:af:e3:16:85:f7:a8:7f:6a:
                    e7:5a:72:26:d4:23:60:d7:81:d1:8e:a1:97:dc:5f:
                    5b:12:3b:01:50:a2:4a:03:2c:d2:a5:4e:7b:bc:40:
                    17:48:7c:78:28:ee:ad:aa:8a:2d:a6:ce:e5:04:96:
                    12:ab:27:d9:de:bf:c0:b0:f7:53:8c:72:96:e2:60:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:84:C9:55:95:26:E5:C6:B0:14:78:4E:06:26:0E:08:9F:AE:09
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:22:80:f8:d3:f3:18:6b:02:ea:d2:21:43:a6:72:de:41:
         db:ca:20:59:b5:ba:74:24:7c:5f:22:5a:32:25:14:12:73:af:
         d1:7d:5d:9f:b3:d7:d5:34:26:8b:89:01:0e:69:6a:87:30:b5:
         e8:83:0c:b2:de:7d:9a:7a:6b:ba:ac:73:82:cb:f6:6a:b7:60:
         44:93:74:4d:9c:a5:7a:09:21:14:56:f6:09:74:86:ea:5f:37:
         ab:0a:33:39:39:44:92:e6:a7:27:85:c0:9d:33:bf:33:91:92:
         fc:02:3c:25:83:ae:bc:78:2b:c0:1f:d4:c0:42:7c:af:72:7c:
         34:ef:b0:a7:d2:2b:ec:7f:ce:ef:e0:40:5c:ac:45:73:7c:44:
         79:a8:02:8b:a7:45:af:79:b0:5d:33:d8:a4:b9:6e:3c:f5:c2:
         46:9c:28:dc:53:3e:f0:17:89:4e:8b:d6:ca:65:bc:d1:27:0b:
         7c:92:fb:32:f5:55:47:11:05:9d:72:82:3a:49:a1:18:7b:c0:
         33:8a:20:b7:21:6c:bc:28:81:b4:e2:48:8d:63:ee:33:5a:27:
         9c:96:6b:c3:1d:73:c7:cf:ff:67:2a:cb:e0:d7:66:31:97:9e:
         5b:4a:4f:29:b7:14:a3:39:a6:89:6a:ed:1a:a8:c1:87:48:01:
         28:e1:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:16 2026 by rpki-client