Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File:                     BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier:          5oCOBm+M69WT9J+pn2a38yWroI2bRd+WRj+l9ehvs7s=
Subject key identifier:   0B:D4:B1:06:57:EE:0B:49:81:0B:33:1D:78:9B:85:82:E2:13:C7:85
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer:       /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial:       01A07216555088FBB974BB9409727EF925B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number:          0393
Signing time:             Sat 05 Sep 2026 15:01:01 +0000
Manifest this update:     Sat 05 Sep 2026 15:01:01 +0000
Manifest next update:     Sun 06 Sep 2026 15:01:01 +0000
Files and hashes:         1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=)
                          2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: c7ieYOr5dIDtZPCxd01IYUoou6jDOaHEdP2uU4+FWzY=)
                          3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=)
                          4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:72:16:55:50:88:fb:b9:74:bb:94:09:72:7e:f9:25:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
        Validity
            Not Before: Sep  5 15:01:01 2026 GMT
            Not After : Sep  6 15:01:01 2026 GMT
        Subject: CN=0bd4b10657ee0b49810b331d789b8582e213c785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:11:9c:a1:a3:83:6f:f1:9c:3c:7f:c9:5d:
                    9b:6d:62:dd:c0:82:84:b1:cc:c6:ef:af:4a:e6:1a:
                    b1:e6:d5:e4:7d:da:f1:ca:9c:4d:e7:b6:7a:df:2b:
                    d2:d2:f2:eb:4f:01:01:01:56:2f:f8:05:9e:65:ad:
                    db:ab:2c:3a:0c:dc:a8:7d:03:a2:52:9c:ce:26:7f:
                    d4:8d:84:aa:97:ff:22:41:7f:7f:a8:f5:11:f6:51:
                    7f:34:f4:f7:70:88:58:de:fa:eb:7f:fa:1f:56:ab:
                    04:ce:c2:be:f4:07:cc:27:af:c3:3e:8f:b8:08:8c:
                    00:86:21:14:e6:6a:42:ba:9b:2c:8d:e1:9e:80:f9:
                    f2:b7:6a:8a:19:af:e4:c6:13:cb:9e:d2:0a:64:14:
                    3a:0d:f7:a6:d5:f1:b8:25:c0:33:39:ef:43:9e:5a:
                    fe:db:a2:5d:bb:4f:d0:32:f5:1b:78:35:45:53:ef:
                    2f:bd:48:90:c2:bf:e0:bc:bb:2e:ee:ee:3b:e8:bb:
                    3c:3d:83:e6:ec:3a:05:16:de:c1:47:98:de:cb:7c:
                    0e:4c:01:c6:e9:37:1a:f9:ba:35:94:d4:85:bc:1e:
                    84:ff:08:f6:f3:22:3c:ce:b4:73:3e:b1:53:d1:37:
                    db:2b:a7:61:25:0f:26:71:39:2d:99:81:f1:1e:f9:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:B1:06:57:EE:0B:49:81:0B:33:1D:78:9B:85:82:E2:13:C7:85
            X509v3 Authority Key Identifier:
                keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:70:58:e9:c3:45:c5:48:b5:3c:d8:08:62:da:55:52:cd:
         1a:17:1b:06:8f:93:de:a0:ca:6a:9e:b3:a0:03:c7:25:74:08:
         50:28:31:d4:08:70:7e:ff:fe:c4:5a:ae:24:2c:99:c3:bf:50:
         ab:79:33:a0:34:63:32:51:1a:29:7b:ed:86:fb:b5:fa:0a:b3:
         62:97:7f:3b:5b:3f:d2:02:74:df:f7:24:6d:27:91:ba:2e:c3:
         6d:59:b5:cb:ab:2e:4d:a4:3c:e9:39:a0:88:32:08:24:eb:55:
         b6:04:bd:23:63:35:b8:2d:e4:0b:36:8d:d7:ff:60:f0:59:20:
         1c:f8:3c:af:12:22:e6:14:b8:81:4f:93:b8:ce:da:eb:97:e3:
         d3:a2:76:de:31:2b:7e:f9:d5:aa:26:b8:88:1b:4d:2c:42:4a:
         3f:76:9c:54:1e:1e:81:b3:3a:bb:9c:2b:31:eb:fd:e9:00:cc:
         28:59:9e:41:dc:3f:04:d0:9a:81:0e:ae:95:e4:4f:0d:07:82:
         0d:c3:30:bc:60:33:61:17:78:54:78:54:d1:ca:a8:08:14:89:
         e7:a2:9c:4c:ce:2c:08:4a:d4:6b:64:5f:68:79:ea:ab:12:b0:
         a3:ad:37:20:65:49:49:03:9f:0d:07:10:98:a6:c5:97:48:84:
         ae:44:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:50:18 2026 by rpki-client