Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File:                     Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier:          WTK8KBW38/VfahmKlSF7tAnSHgGHtEF2UBQqMvKP1oA=
Subject key identifier:   7F:E8:A1:A8:EC:A2:E3:AE:2D:ED:B1:F0:52:76:E9:8A:8B:D6:37:99
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019FA1BBAFFA615FF07AC01AAF9DA86646BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number:          1624
Signing time:             Mon 27 Jul 2026 04:00:59 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:59 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:59 +0000
Files and hashes:         1: 7VIKCa61Z75pFNublu7wlAtvkh8.roa (hash: d/0djTjrhOewyBKD6bQpZD7nKtygIdgcjwVz9/qNO9g=)
                          2: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: 0DZERROqvAKXK4pXE2g9CJVU377LT53Ygem0RKStZI4=)
                          3: JyAGENEBYI2RUrGflH3181W7wwE.roa (hash: HdxEi3V75II9paWrrSvMYM0URyA0KzY9zHOSzqzIBUI=)
                          4: uGgURm4xZb_PGCLcLHmslzE7biA.roa (hash: pIGXgkw2db69+0HAwWrFE2B3kXizGYdLfC7lC0LFfVk=)
                          5: wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa (hash: +vnxHkv9IVNBAo2p+O8n8zZLqGi1fGQbtfQSaGakEfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:af:fa:61:5f:f0:7a:c0:1a:af:9d:a8:66:46:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Jul 27 04:00:59 2026 GMT
            Not After : Jul 28 04:00:59 2026 GMT
        Subject: CN=7fe8a1a8eca2e3ae2dedb1f05276e98a8bd63799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:ba:f6:75:1b:f7:bb:cf:ec:c6:e6:4d:93:
                    cf:35:70:1c:85:63:7f:da:9b:7b:d0:8e:ab:a6:dd:
                    05:3b:58:6f:78:87:62:1e:ee:bb:f5:7e:b9:bc:09:
                    39:a1:51:32:85:a3:66:b0:5c:1f:7a:d6:1b:54:60:
                    12:59:c8:7b:c8:2e:da:30:c7:b8:e0:de:9d:d2:cc:
                    5d:02:cd:ba:38:95:13:7f:59:a1:5e:b3:49:6e:b4:
                    fa:3d:2a:53:19:49:ec:57:c3:34:1a:87:25:b4:cc:
                    a3:4e:ee:90:c4:77:dc:ad:ae:fb:58:74:b5:43:ea:
                    23:b7:92:3e:0f:ae:4e:a1:5c:a5:73:65:24:e2:b0:
                    34:32:6d:70:ae:ad:44:0d:03:88:39:11:b3:d8:c1:
                    fe:5f:2c:d6:ce:fa:a3:23:26:05:db:77:b0:6d:72:
                    7a:7e:7c:5d:fd:68:f8:59:28:d5:25:93:5d:cc:55:
                    9f:d1:5e:72:b2:51:de:7a:de:4b:f1:73:c8:5d:46:
                    2c:fd:0f:3c:a4:b5:50:3a:52:77:c1:0b:84:e0:c8:
                    b4:c5:be:81:74:3d:c2:72:35:9a:17:1e:87:12:78:
                    be:71:00:9e:41:fd:4b:a1:37:41:cb:ac:37:64:0e:
                    e7:02:2f:4d:43:c2:88:46:c3:0e:aa:bc:96:4a:19:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E8:A1:A8:EC:A2:E3:AE:2D:ED:B1:F0:52:76:E9:8A:8B:D6:37:99
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:68:de:9a:fd:c1:3f:06:73:f4:5e:10:24:48:5a:aa:3e:d6:
         24:07:ed:c1:16:f4:59:fa:2c:73:56:1e:80:b8:2e:78:65:d4:
         d3:fe:ea:c6:c7:19:5b:d9:38:bf:5b:ea:82:8f:66:fc:a8:06:
         5b:78:c2:05:35:fa:31:b2:49:2c:58:9e:e6:cd:68:e3:e8:e8:
         0f:b4:c0:0b:80:97:00:75:d2:c1:6c:96:27:ab:75:9e:5d:95:
         d6:98:0f:30:e3:05:fe:1f:85:e0:08:f2:31:e1:3a:fe:de:18:
         15:53:8a:d0:97:6f:62:9c:17:9b:2b:fe:d8:55:91:5f:5c:11:
         f4:e3:7e:14:2e:cd:57:3b:f2:a6:4d:c0:b0:f3:91:0f:27:53:
         ba:4f:8d:98:93:56:5e:5f:43:c4:21:30:2b:99:bd:fd:98:8a:
         af:b0:04:00:62:fa:20:34:ab:88:93:1c:a5:a4:bc:9a:49:90:
         09:21:29:23:38:97:dd:ce:3b:ff:bd:1b:94:ea:42:a1:04:94:
         3e:e0:82:7b:58:39:58:21:45:54:8e:a8:f9:02:79:13:3d:1d:
         58:eb:bf:9d:d9:32:9c:e7:f1:a0:05:2b:f7:1c:26:6c:cb:1e:
         4c:7f:c4:15:5b:1f:b5:f3:90:5b:97:f7:0e:b1:db:f8:0e:5d:
         48:a6:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:21 2026 by rpki-client