Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File:                     bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier:          tVvP9j/0ZS4YBJyIPUPe+iAR9g1XzAhHf4MUrEcHye0=
Subject key identifier:   7F:A0:96:D3:E1:8E:A8:61:7F:B3:70:91:5A:93:3D:80:30:2C:12:27
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer:       /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial:       019F81F9B70C2F3D23F5C30C0D9C7EB1F415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number:          01D6
Signing time:             Tue 21 Jul 2026 00:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:53 +0000
Files and hashes:         1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: dVWW3sQNicau2st5Htv0nkkEmAhiFC/LLJDyD6bJ6js=)
                          2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:b7:0c:2f:3d:23:f5:c3:0c:0d:9c:7e:b1:f4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
        Validity
            Not Before: Jul 21 00:00:53 2026 GMT
            Not After : Jul 22 00:00:53 2026 GMT
        Subject: CN=7fa096d3e18ea8617fb370915a933d80302c1227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:27:4b:6c:2f:7f:33:d3:4e:f8:22:0d:d2:
                    31:51:26:32:57:95:c7:90:c6:44:a8:98:00:7b:7e:
                    f6:6f:97:fe:2e:9a:a3:d6:4c:e3:0b:68:43:8e:66:
                    d9:e7:3f:e3:3c:45:8c:2a:e4:16:f6:20:71:0c:07:
                    67:b2:d0:4f:bd:d7:70:aa:7d:a6:96:e9:b3:77:ba:
                    04:85:59:f8:a9:93:fc:04:d1:59:53:8a:dd:16:4f:
                    5b:1c:d4:c1:96:7e:f3:06:58:3d:29:9a:07:5a:f6:
                    ee:71:23:f5:87:04:e4:b9:43:cd:3d:57:f5:9a:54:
                    c6:d1:34:18:38:a1:48:21:3e:17:85:ce:2d:d5:60:
                    b3:28:d5:ee:d3:77:02:04:37:36:14:5e:0c:f7:1d:
                    2a:ec:f2:d2:8b:e3:54:61:d3:50:5a:4a:29:16:75:
                    50:79:28:8f:95:bf:f4:15:de:75:6f:76:f8:79:b0:
                    b0:e6:87:be:45:81:2b:6d:2c:53:5a:45:85:c7:70:
                    dd:84:13:2a:58:8c:5a:fc:97:f6:df:ac:7a:79:68:
                    09:ee:b9:9f:e2:fd:36:aa:79:18:33:16:4f:b9:fa:
                    7b:5e:6a:2a:6a:76:f7:0d:ab:3e:36:55:cf:72:b8:
                    53:21:2a:77:d8:80:73:67:f1:60:4c:6a:ea:19:6c:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A0:96:D3:E1:8E:A8:61:7F:B3:70:91:5A:93:3D:80:30:2C:12:27
            X509v3 Authority Key Identifier:
                keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:41:af:56:0c:d0:fc:40:93:c1:68:03:c4:ff:3c:5e:55:6f:
         7f:3a:ae:20:c4:32:d2:dc:32:c4:fa:41:06:66:9f:5e:cd:d5:
         4f:a1:93:bc:28:9b:46:bb:74:83:ed:aa:61:e1:11:43:7d:d7:
         a6:14:31:5d:55:4a:ba:39:ec:8c:da:13:16:b3:a0:86:52:b3:
         6f:79:da:7f:3e:d4:da:9f:40:f0:2c:33:53:cb:89:b5:37:07:
         8b:0a:c0:8b:4e:fe:c0:37:cb:f2:e5:71:ff:a4:3d:c7:fe:0d:
         6c:88:0b:fc:09:7a:c4:ea:b5:17:ef:e8:c0:ad:df:15:5b:49:
         9b:73:af:ec:f4:16:3d:c5:47:88:7a:2e:0f:ab:0c:b9:13:e8:
         ed:c0:5b:31:52:e8:cf:d1:c6:26:1e:b6:11:3e:13:a3:81:f4:
         2b:1c:9a:a9:7c:c4:8f:e8:3d:9a:bc:a1:2f:e9:4d:a3:ae:3d:
         d1:ea:90:67:9a:8b:0f:41:03:bf:0c:ed:f7:14:e6:de:66:cc:
         84:0c:d7:44:fc:cc:fe:ab:e0:97:5d:c9:05:99:d9:d0:15:0a:
         9d:64:e2:15:2b:ed:aa:31:0b:5e:b4:6b:cb:16:1e:1c:ca:f2:
         c5:22:e0:21:06:f7:a7:dc:de:ed:b3:f7:6c:16:ff:56:7e:45:
         fc:c0:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:06:13 2026 by rpki-client