Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File:                     BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier:          bpLs79fpu1LqtpQeXM9v5et41WHEW3FCOrmcFs7PZX4=
Subject key identifier:   97:3E:84:13:FD:F1:33:7C:23:73:9B:8D:DC:F1:13:EF:8A:DC:E4:87
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer:       /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial:       019FA03AA150EA50C24646C045ECFB44D384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 21:00:24 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:24 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:24 +0000
Files and hashes:         1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: CkYhK3Hgb4w4hjJ17CSDm6yFwr5QPbJQye7JSors65g=)
                          2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:a1:50:ea:50:c2:46:46:c0:45:ec:fb:44:d3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
        Validity
            Not Before: Jul 26 21:00:24 2026 GMT
            Not After : Jul 27 21:00:24 2026 GMT
        Subject: CN=973e8413fdf1337c23739b8ddcf113ef8adce487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:ee:8b:ef:cd:51:56:4c:1b:a6:6b:26:94:
                    fb:d9:ff:1a:f6:ee:80:bd:fb:0d:29:08:69:e3:d1:
                    33:70:80:ab:19:22:f0:3b:0b:55:3f:de:f0:d5:7d:
                    40:29:74:1b:65:31:42:5f:3b:57:72:ba:18:f8:33:
                    b1:63:a0:a3:2d:45:98:12:f6:69:a0:d3:8b:f8:c0:
                    b7:7d:50:f6:a2:d1:16:37:8d:bf:95:46:7b:50:85:
                    c5:be:50:5a:38:24:19:a7:e1:c4:ef:86:f7:2d:b9:
                    a2:aa:56:c4:f5:8e:1e:da:5b:0a:38:fa:70:57:43:
                    c5:22:75:0b:16:f9:1e:b9:6c:9e:36:b5:34:32:b5:
                    33:60:ce:d2:53:ec:88:5a:ca:99:fa:34:0b:fb:9c:
                    50:39:e6:f2:32:db:e2:17:e8:e0:87:14:ca:d9:75:
                    16:c8:61:a7:13:aa:a3:b1:78:15:5f:5c:42:cc:3c:
                    37:b8:f7:07:8f:5e:bf:5d:af:0c:04:fa:ce:26:00:
                    45:f4:2a:8c:e6:03:6b:19:b5:c8:64:32:45:80:28:
                    80:e4:4f:5f:9f:18:d6:2a:46:80:e2:81:0b:a9:72:
                    be:f8:d3:58:13:fe:e8:00:91:ab:e0:65:74:a0:66:
                    58:01:99:1e:0e:2a:48:83:d7:67:d3:cf:3b:a2:24:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:84:13:FD:F1:33:7C:23:73:9B:8D:DC:F1:13:EF:8A:DC:E4:87
            X509v3 Authority Key Identifier:
                keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:16:6b:cb:45:9a:69:d0:19:84:2e:15:20:88:1e:1e:52:
         ce:5d:87:d7:84:67:ed:d3:9d:d4:d2:a9:d8:fe:5d:b9:c4:77:
         00:a2:92:e4:94:ed:99:ae:49:38:62:62:6f:30:b3:e1:9d:cb:
         f0:66:30:ba:3c:20:87:a6:7c:0b:2c:90:0f:e0:db:bc:ee:ff:
         1c:86:81:9e:99:e2:e9:83:b9:6f:4f:6b:8a:ed:1e:db:bf:1c:
         97:d5:0e:46:68:f7:54:85:4d:76:71:66:8c:49:95:09:be:f4:
         f8:1f:9d:75:33:43:02:3b:5f:97:52:09:b2:14:b5:59:4c:74:
         db:4b:1f:c5:6f:e7:46:75:b8:ff:15:93:21:7e:aa:26:11:26:
         2a:07:1c:d4:ae:7e:3a:b7:30:39:29:fd:62:07:62:48:7b:fe:
         1c:8d:bb:6c:b4:65:d9:45:6b:04:ca:a2:cf:00:56:dc:13:b0:
         de:72:73:c5:6a:02:82:a1:72:e6:c1:b4:b4:68:dc:8f:0c:68:
         a1:13:30:28:94:4b:91:66:0d:5b:0a:c0:2b:6c:86:42:bc:f3:
         21:ab:67:d7:77:91:f2:b9:34:80:99:ab:3c:a5:12:a7:3e:4e:
         ab:0f:65:63:47:06:94:a7:fd:11:36:1c:01:1d:1a:48:05:89:
         ca:df:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:06 2026 by rpki-client