Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File:                     BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier:          SDQOvppH94YHtSQcdphS8r5nLTWEzV83hsSAcwC/nUA=
Subject key identifier:   11:B2:88:90:2E:93:31:F2:B0:C9:E3:97:F6:61:18:95:FB:73:33:45
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer:       /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial:       019FA1F2D1FCD4185142064659A560AE91E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number:          188C
Signing time:             Mon 27 Jul 2026 05:01:12 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:12 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:12 +0000
Files and hashes:         1: 46krBMuMgQRTOnYjjiwz0jZnP9g.roa (hash: i+WuevI3Tnw5jBTEqmKxgeqDkLLDwvFZgvTXSU8JdlE=)
                          2: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: N6Bhk/Mp9ktyyMmp1ZRuEAMVEZc1hDdd4GvqRTjh1LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:d1:fc:d4:18:51:42:06:46:59:a5:60:ae:91:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059f516802c261309a61048772e6eafd5867a990
        Validity
            Not Before: Jul 27 05:01:12 2026 GMT
            Not After : Jul 28 05:01:12 2026 GMT
        Subject: CN=11b288902e9331f2b0c9e397f6611895fb733345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:a8:92:44:48:f2:96:6d:cd:06:9b:46:3a:
                    2f:11:8c:54:b2:49:89:38:89:bc:9a:39:6d:78:b6:
                    67:62:95:ed:88:f7:b7:ee:c4:9d:d7:e1:3b:b4:ca:
                    ae:a3:55:b0:32:74:a5:c6:30:bf:c4:c4:f9:71:29:
                    8b:d3:1b:c6:98:b1:62:80:54:95:d4:fb:22:06:d9:
                    32:73:72:c8:5d:c7:c0:0b:4a:06:53:82:28:e0:65:
                    20:ae:5e:c9:4a:4a:be:74:38:89:19:25:e2:83:b0:
                    34:e5:17:3f:6f:17:bb:3a:89:d9:76:f2:5a:4f:07:
                    e2:3a:48:69:08:25:6c:25:4e:b7:0d:fd:4f:22:56:
                    bc:d1:54:c4:72:91:46:b9:67:9b:fe:75:f0:c0:99:
                    8a:c8:dc:11:ec:b4:46:76:9d:fc:35:1f:ad:85:46:
                    08:2c:af:51:97:c7:1c:02:8f:e7:93:1f:29:7f:17:
                    46:36:96:4f:d1:45:57:4f:b2:b3:a3:df:69:f2:05:
                    ad:4b:0c:ee:cd:88:67:69:23:25:e5:2c:22:eb:bc:
                    57:c8:63:eb:1e:a2:97:16:fc:83:31:3d:ec:01:54:
                    b1:d6:61:7b:39:79:63:ec:ef:2a:91:04:93:ec:84:
                    fe:2e:33:a8:b0:f5:74:a0:ba:ba:86:fd:7d:9b:82:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:88:90:2E:93:31:F2:B0:C9:E3:97:F6:61:18:95:FB:73:33:45
            X509v3 Authority Key Identifier:
                keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:52:91:6a:05:36:08:95:c8:22:99:dc:4f:e2:3c:c8:1d:88:
         86:08:22:2a:e8:2a:d3:e1:0c:af:1f:22:a1:9b:ba:13:67:28:
         5e:5e:24:bf:d4:66:8a:75:b7:51:7f:ff:8e:94:df:3a:82:e0:
         16:fc:7d:d6:34:e5:16:30:2f:aa:31:37:40:31:a9:f0:eb:b6:
         58:9e:82:ab:3e:47:0c:4a:48:d4:a1:72:b2:3c:86:04:cb:1d:
         9a:eb:3e:5f:4b:1e:4f:6c:16:60:5c:01:d0:06:70:f6:38:76:
         5c:b7:25:0c:79:ae:ac:4a:48:c9:95:f6:5e:98:37:d4:02:42:
         8a:3f:b5:c8:08:ff:75:b9:cf:e0:f5:b0:3f:38:92:29:32:22:
         58:c0:e0:a1:2c:56:50:67:9c:38:45:e9:fb:7a:56:e7:53:fd:
         a0:78:67:62:07:f2:62:fe:66:13:ae:c2:02:41:c9:7d:83:0d:
         e4:69:c9:31:dd:a6:49:b1:f3:0a:2a:ad:f9:17:09:87:2e:d5:
         c2:01:a0:66:85:f3:cf:4a:d8:0d:8b:3f:1f:a8:65:a9:ee:21:
         0d:8d:72:ec:00:33:02:64:02:5e:9d:28:cc:0c:8d:da:c4:3e:
         dc:82:c5:04:d8:9c:8a:f8:62:3d:c7:ad:02:3a:e8:03:ba:ac:
         3d:67:de:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8tH81BhRQgZGWaVgrpHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWY1MTY4MDJjMjYxMzA5YTYxMDQ4NzcyZTZlYWZkNTg2
N2E5OTAwHhcNMjYwNzI3MDUwMTEyWhcNMjYwNzI4MDUwMTEyWjAzMTEwLwYDVQQD
EygxMWIyODg5MDJlOTMzMWYyYjBjOWUzOTdmNjYxMTg5NWZiNzMzMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIGokkRI8pZtzQabRjovEYxUskmJ
OIm8mjlteLZnYpXtiPe37sSd1+E7tMquo1WwMnSlxjC/xMT5cSmL0xvGmLFigFSV
1PsiBtkyc3LIXcfAC0oGU4Io4GUgrl7JSkq+dDiJGSXig7A05Rc/bxe7OonZdvJa
TwfiOkhpCCVsJU63Df1PIla80VTEcpFGuWeb/nXwwJmKyNwR7LRGdp38NR+thUYI
LK9Rl8ccAo/nkx8pfxdGNpZP0UVXT7Kzo99p8gWtSwzuzYhnaSMl5Swi67xXyGPr
HqKXFvyDMT3sAVSx1mF7OXlj7O8qkQST7IT+LjOosPV0oLq6hv19m4JdhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGyiJAukzHysMnjl/ZhGJX7czNFMB8GA1UdIwQY
MBaAFAWfUWgCwmEwmmEEh3Lm6v1YZ6mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlo5UmFBTENZVENhWVFTSGN1YnFfVmhucVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80MDg3Y2YtNzFlOS00MmNhLThjMzUt
OTUxYjE5ODU2NzFjLzEvQlo5UmFBTENZVENhWVFTSGN1YnFfVmhucVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80MDg3Y2YtNzFlOS00MmNhLThjMzUtOTUxYjE5ODU2NzFj
LzEvQlo5UmFBTENZVENhWVFTSGN1YnFfVmhucVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVKRagU2
CJXIIpncT+I8yB2IhggiKugq0+EMrx8ioZu6E2coXl4kv9RminW3UX//jpTfOoLg
Fvx91jTlFjAvqjE3QDGp8Ou2WJ6Cqz5HDEpI1KFysjyGBMsdmus+X0seT2wWYFwB
0AZw9jh2XLclDHmurEpIyZX2Xpg31AJCij+1yAj/dbnP4PWwPziSKTIiWMDgoSxW
UGecOEXp+3pW51P9oHhnYgfyYv5mE67CAkHJfYMN5GnJMd2mSbHzCiqt+RcJhy7V
wgGgZoXzz0rYDYs/H6hlqe4hDY1y7AAzAmQCXp0ozAyN2sQ+3ILFBNicivhiPcet
AjroA7qsPWfewA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:40 2026 by rpki-client