Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier:          riNqMZJTLKhI8hu4Bym1er/cxt5h8z3FqwKzPEGU370=
Subject key identifier:   45:D3:4A:DB:9F:B2:BB:DC:71:D7:B8:BA:11:98:11:93:DE:B6:3E:93
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer:       /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial:       019F1943CED0B8A9E91AACC7FF58A32F677D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number:          1984
Signing time:             Tue 30 Jun 2026 16:01:41 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:41 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:41 +0000
Files and hashes:         1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: NyF+U7zroQ0FJYPMiZmcsII9A5o7lSvMUbixKyE3GI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:ce:d0:b8:a9:e9:1a:ac:c7:ff:58:a3:2f:67:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Validity
            Not Before: Jun 30 16:01:41 2026 GMT
            Not After : Jul  1 16:01:41 2026 GMT
        Subject: CN=45d34adb9fb2bbdc71d7b8ba11981193deb63e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:c7:74:6e:ba:4c:17:02:91:a2:56:e1:90:
                    3e:6a:92:67:10:98:8c:3b:90:af:ea:19:c1:40:20:
                    11:b1:81:4c:e1:17:a4:0c:8f:d5:91:06:f7:62:b0:
                    c3:72:9b:37:ca:82:3a:99:fc:32:7e:3e:de:14:49:
                    99:78:86:fe:fd:ef:63:58:3c:04:26:66:41:e6:59:
                    a7:3c:96:0e:02:33:88:3f:a0:c9:50:35:38:45:58:
                    00:99:45:e8:8f:da:b8:da:e2:03:67:41:ec:92:42:
                    f5:01:38:45:44:ab:e4:8d:4b:65:50:19:de:95:60:
                    a4:1e:8d:f9:8b:c7:e2:26:9c:21:ef:db:2b:17:84:
                    f3:9d:d7:2b:96:b9:4a:dd:e2:8e:90:f7:41:2e:49:
                    e6:c5:1b:49:b6:0d:68:e1:97:db:25:eb:4b:e8:72:
                    c6:20:8f:11:be:f0:bf:31:2d:4d:b9:3d:8a:ac:f2:
                    7e:85:a6:5b:f3:ad:14:0c:4a:34:af:b2:85:9c:d8:
                    f2:d4:20:8b:15:d9:ca:83:b6:cd:42:94:c6:98:47:
                    3c:ef:f7:1b:e5:91:50:bb:b2:85:7b:b6:69:f8:39:
                    38:3f:92:77:89:b3:30:21:b8:c4:a5:b5:6f:53:22:
                    05:32:61:29:b4:ac:74:e8:39:0b:34:46:fc:38:79:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:4A:DB:9F:B2:BB:DC:71:D7:B8:BA:11:98:11:93:DE:B6:3E:93
            X509v3 Authority Key Identifier:
                keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:3e:27:a2:67:b6:48:32:92:76:0e:25:f8:25:0c:4a:93:
         b0:cf:3c:ec:78:f7:ee:68:65:0f:20:fe:ee:4a:d6:b7:b7:a3:
         25:c5:4d:52:52:88:bf:3a:69:d3:ad:68:6f:e6:2b:ce:e1:0b:
         e5:c0:c1:d9:55:4b:f7:4f:5f:cd:77:56:6f:5e:39:0f:21:bf:
         2e:ac:01:bf:2b:90:df:e4:a3:59:8f:08:ec:1e:21:da:e4:a1:
         aa:41:8e:ac:ea:31:4d:18:23:e9:5c:6a:2d:9d:9b:8d:4f:72:
         cd:f0:d0:4d:85:f0:ec:02:c5:d6:72:dc:c3:76:8c:88:9a:db:
         ef:71:a7:5f:4e:43:b2:1c:11:a8:3f:e7:77:f3:a1:6f:d4:05:
         16:b7:94:11:84:a3:2d:e9:bd:1c:9b:0e:51:20:d4:7c:f0:36:
         0f:f5:6f:b0:b6:e3:f8:a5:02:83:14:54:b4:bc:34:50:39:5b:
         1e:a9:cf:f7:02:83:9b:63:34:f7:90:42:de:44:b1:37:21:6d:
         51:96:24:cf:54:1a:4f:4b:1e:0a:09:10:02:86:20:1f:78:27:
         2b:fd:8b:16:f1:42:0c:59:a8:1e:ce:07:0c:90:4e:73:4b:07:
         c2:a9:a2:f7:2f:f4:43:a5:12:c1:5d:a3:38:b0:f3:ab:f4:ef:
         5f:a6:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:38:25 2026 by rpki-client