Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File:                     BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier:          MWawn7bwxF12SAwKTMEDmvXEkSD9R6exnvDZOteEhgk=
Subject key identifier:   84:6D:E1:6F:1F:B6:79:06:35:13:20:5D:F5:B2:C1:96:F1:5D:27:7E
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer:       /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial:       019F9EF14F01B1E528976709089887D08D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number:          19CE
Signing time:             Sun 26 Jul 2026 15:00:42 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:42 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:42 +0000
Files and hashes:         1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: x7YfQwEz5bvgYZgXbwLo9JsFycfs60/GVSCqYl5ACEI=)
                          2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:4f:01:b1:e5:28:97:67:09:08:98:87:d0:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
        Validity
            Not Before: Jul 26 15:00:42 2026 GMT
            Not After : Jul 27 15:00:42 2026 GMT
        Subject: CN=846de16f1fb679063513205df5b2c196f15d277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:f0:00:a2:03:5a:10:83:29:5e:55:98:a0:
                    cb:35:ab:24:c0:22:96:ec:a4:1f:c0:8f:f1:5f:0a:
                    e6:a4:ea:76:47:31:91:d2:1d:20:bd:52:55:e8:a6:
                    f6:76:00:89:22:29:9a:d6:a0:d6:10:d9:20:7a:34:
                    9f:d2:bb:71:02:44:ec:8c:9a:d0:9e:5f:2f:50:fc:
                    60:b3:3d:f3:41:99:2c:f7:4b:57:76:cc:31:84:9a:
                    0d:60:a9:fc:e5:e7:bc:63:8b:4e:5a:0d:7d:c5:44:
                    4a:a3:b3:5b:9b:b2:74:53:2f:b8:14:de:a2:cd:23:
                    09:88:d8:27:a3:62:16:03:64:92:05:c9:e0:65:01:
                    5f:47:7e:d0:f4:0f:1b:15:11:2f:42:07:74:3d:32:
                    3c:d5:4f:a6:af:c7:b1:26:f0:6a:77:47:48:0b:2a:
                    3e:2c:17:f4:06:ba:b8:49:64:c5:e6:f3:64:93:7e:
                    db:68:dc:a4:fa:e6:7e:34:98:22:77:70:ae:dc:e1:
                    e9:83:0b:5e:7d:2d:0e:db:01:ab:51:fc:56:de:b0:
                    97:e9:5e:3b:7e:59:c1:c6:ca:c0:cb:97:f4:60:a9:
                    4a:2a:d3:bc:29:33:44:ca:e3:6c:7e:04:22:7e:f0:
                    76:b1:4d:27:13:79:d7:2e:de:38:cb:67:9f:c2:f4:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:E1:6F:1F:B6:79:06:35:13:20:5D:F5:B2:C1:96:F1:5D:27:7E
            X509v3 Authority Key Identifier:
                keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:5f:0b:2a:75:40:b0:39:85:43:94:85:ce:ee:49:02:90:
         93:3c:74:21:3a:00:4a:b0:4d:f3:8b:8a:65:79:0e:b6:00:93:
         1e:6d:ea:72:46:19:53:36:fd:db:b5:ca:e7:73:00:b0:99:47:
         68:7b:54:fd:88:62:2a:de:e4:de:ed:e1:ac:e6:30:99:10:77:
         0b:39:ef:d3:75:c2:bc:59:1a:24:32:3f:37:9c:63:ad:85:4c:
         4d:68:2d:18:d8:9e:0c:03:c0:9c:e6:d0:7a:64:21:b9:57:d2:
         35:e5:bc:8a:04:5b:07:9c:f7:69:af:15:7b:e5:28:9c:c8:56:
         1d:8c:87:96:b1:27:7c:72:7f:4e:75:8c:cb:28:81:a7:1a:2a:
         10:02:de:d4:92:e5:55:79:a4:e2:73:da:b7:c9:cb:9d:ef:85:
         3e:77:3c:24:fe:01:cc:5a:6a:e9:aa:a2:cf:ad:d0:9d:fc:d3:
         81:be:71:6d:a5:47:45:20:77:85:1f:1c:05:75:08:d9:c2:d7:
         50:20:b7:8c:cd:7c:88:6c:79:4e:04:f2:db:1f:77:a0:d3:6d:
         e2:62:25:e3:e6:b1:56:73:cd:e7:7c:7e:de:bf:7d:69:d8:95:
         33:2c:b5:f4:f3:cb:99:76:9e:bd:1a:9f:90:a9:4b:57:b5:fd:
         34:c2:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:25:24 2026 by rpki-client