Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
File:                     bdxuUU9PYurbPicQ6snJ8vBkX3g.mft (raw, json)
Hash identifier:          X0oVlZ35cYjwyrZXjrl9lA6BNK2nM31LVG+UERk+c4A=
Subject key identifier:   B4:03:54:1E:85:A6:85:FE:9C:D5:59:F9:C0:1D:28:B9:8C:53:57:79
Authority key identifier: 6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78
Certificate issuer:       /CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
Certificate serial:       019F8833068966A23639E5DBC80AE648C4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
Manifest number:          0270
Signing time:             Wed 22 Jul 2026 05:01:13 +0000
Manifest this update:     Wed 22 Jul 2026 05:01:13 +0000
Manifest next update:     Thu 23 Jul 2026 05:01:13 +0000
Files and hashes:         1: IIP1y0Ygnnk-m9njlLkFRgHOiJQ.asa (hash: MQcB8erVJ5t0mt5m65SC96rSPLoGOQd4tXoTWIovg1Q=)
                          2: bdxuUU9PYurbPicQ6snJ8vBkX3g.crl (hash: hrnaXJNt/jZ7OjaEVXjHYOeuM6RxmuZFel9D+4YkSwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:88:33:06:89:66:a2:36:39:e5:db:c8:0a:e6:48:c4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddc6e514f4f62eadb3e2710eac9c9f2f0645f78
        Validity
            Not Before: Jul 22 05:01:13 2026 GMT
            Not After : Jul 23 05:01:13 2026 GMT
        Subject: CN=b403541e85a685fe9cd559f9c01d28b98c535779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:35:45:5a:c9:f9:38:61:11:13:86:6a:3b:
                    3b:1c:e5:df:db:c5:6f:49:9b:9c:52:99:cf:ee:ed:
                    23:db:6f:84:0b:19:fa:86:2b:0e:8d:77:24:67:c1:
                    a7:b4:83:20:cb:2b:2c:b9:74:f5:31:8d:28:67:be:
                    c3:61:ec:d4:0c:f4:af:b8:95:cf:1d:c1:e5:40:bf:
                    c6:5f:97:53:f0:1f:b1:79:11:7c:8a:cf:51:65:38:
                    a6:d2:7c:7f:62:c1:0a:20:94:19:d4:7e:1f:94:7b:
                    db:af:91:e6:de:43:15:ac:01:a2:5f:1d:50:aa:be:
                    a3:65:6e:25:91:b0:93:d0:5e:de:9c:d1:32:22:9a:
                    74:df:c4:b6:79:12:62:8f:f4:3c:ee:ec:73:04:5b:
                    ca:ff:31:78:21:4d:0d:79:f6:59:5a:4e:aa:0a:9d:
                    dc:80:55:91:57:e0:4c:52:c8:f7:54:ef:dd:fa:7d:
                    ef:36:f1:44:4e:8a:64:d4:56:9e:65:c1:ea:57:cc:
                    15:48:11:f7:f3:fc:31:8d:73:f1:34:1c:a0:7f:8c:
                    24:b3:7e:6b:4c:a2:73:39:c7:e7:da:05:5c:a5:86:
                    66:62:83:e8:30:3f:97:30:b4:af:44:3d:28:b3:6f:
                    6b:70:5d:c3:a7:60:e4:74:9d:0a:42:7c:b4:e6:cd:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:03:54:1E:85:A6:85:FE:9C:D5:59:F9:C0:1D:28:B9:8C:53:57:79
            X509v3 Authority Key Identifier:
                keyid:6D:DC:6E:51:4F:4F:62:EA:DB:3E:27:10:EA:C9:C9:F2:F0:64:5F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdxuUU9PYurbPicQ6snJ8vBkX3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/23b835-53b3-4037-863c-b6b74ad7522a/1/bdxuUU9PYurbPicQ6snJ8vBkX3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:a5:c1:7e:94:a5:39:4e:88:ba:9d:12:c5:c5:94:d5:62:
         0c:71:13:a1:aa:28:07:c8:fe:bc:4d:97:fc:62:81:4e:54:b4:
         d5:a3:c8:2a:34:11:7f:ab:53:a9:3f:81:32:b4:fa:02:62:74:
         d4:a1:0f:65:4c:ab:8f:68:08:46:a5:be:ac:af:be:54:3b:6f:
         92:76:22:66:48:ef:f1:35:a9:a1:95:94:ac:7f:36:b4:92:36:
         a7:ca:f2:d5:dc:64:fd:f3:eb:e6:25:22:50:58:02:45:1b:2b:
         3a:28:f8:ca:32:36:09:02:1b:93:d4:b0:84:2a:ab:27:ca:cd:
         89:2b:4c:de:6a:2b:c5:f5:47:c4:3b:6a:c8:4f:7e:71:8e:9a:
         f8:82:12:ed:7e:fd:8a:65:4d:18:52:f4:c1:e2:15:33:51:04:
         e3:3f:f7:12:b4:66:69:9c:e7:79:7b:78:e6:f3:db:3a:13:61:
         3a:34:7f:a8:fd:f9:0a:88:f5:ca:7e:74:5e:1f:f2:63:9c:20:
         fa:0d:6c:55:e0:80:b2:f3:7b:c0:e1:f5:b6:d1:27:38:fd:be:
         3b:1d:3f:15:52:c0:a9:84:28:b4:14:20:a8:65:bd:75:92:6d:
         9c:f5:65:2c:95:52:6f:b7:f4:a1:08:50:c7:59:64:b7:44:54:
         91:ab:93:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+IMwaJZqI2OeXbyArmSMTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGM2ZTUxNGY0ZjYyZWFkYjNlMjcxMGVhYzljOWYyZjA2
NDVmNzgwHhcNMjYwNzIyMDUwMTEzWhcNMjYwNzIzMDUwMTEzWjAzMTEwLwYDVQQD
EyhiNDAzNTQxZTg1YTY4NWZlOWNkNTU5ZjljMDFkMjhiOThjNTM1Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu41RVrJ+ThhEROGajs7HOXf28Vv
SZucUpnP7u0j22+ECxn6hisOjXckZ8GntIMgyyssuXT1MY0oZ77DYezUDPSvuJXP
HcHlQL/GX5dT8B+xeRF8is9RZTim0nx/YsEKIJQZ1H4flHvbr5Hm3kMVrAGiXx1Q
qr6jZW4lkbCT0F7enNEyIpp038S2eRJij/Q87uxzBFvK/zF4IU0NefZZWk6qCp3c
gFWRV+BMUsj3VO/d+n3vNvFETopk1FaeZcHqV8wVSBH38/wxjXPxNBygf4wks35r
TKJzOcfn2gVcpYZmYoPoMD+XMLSvRD0os29rcF3Dp2DkdJ0KQny05s1fpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQDVB6FpoX+nNVZ+cAdKLmMU1d5MB8GA1UdIwQY
MBaAFG3cblFPT2Lq2z4nEOrJyfLwZF94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2Mt
YjZiNzRhZDc1MjJhLzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yM2I4MzUtNTNiMy00MDM3LTg2M2MtYjZiNzRhZDc1MjJh
LzEvYmR4dVVVOVBZdXJiUGljUTZzbko4dkJrWDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBKlwX6U
pTlOiLqdEsXFlNViDHEToaooB8j+vE2X/GKBTlS01aPIKjQRf6tTqT+BMrT6AmJ0
1KEPZUyrj2gIRqW+rK++VDtvknYiZkjv8TWpoZWUrH82tJI2p8ry1dxk/fPr5iUi
UFgCRRsrOij4yjI2CQIbk9SwhCqrJ8rNiStM3morxfVHxDtqyE9+cY6a+IIS7X79
imVNGFL0weIVM1EE4z/3ErRmaZzneXt45vPbOhNhOjR/qP35Coj1yn50Xh/yY5wg
+g1sVeCAsvN7wOH1ttEnOP2+Ox0/FVLAqYQotBQgqGW9dZJtnPVlLJVSb7f0oQhQ
x1lkt0RUkauT7g==
-----END CERTIFICATE-----
Generated at Wed Jul 22 13:32:31 2026 by rpki-client