Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File:                     v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier:          3NjRVlMQCqvH8HAnGJC1xss5VcqK/AWiQUhcsPVQKAA=
Subject key identifier:   50:AC:63:D4:06:8F:77:97:28:CA:D6:19:D7:4C:B8:C9:03:64:0D:95
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer:       /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial:       019F71E13F869374BC2D72A9B212722788B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number:          02B9
Signing time:             Fri 17 Jul 2026 21:00:14 +0000
Manifest this update:     Fri 17 Jul 2026 21:00:14 +0000
Manifest next update:     Sat 18 Jul 2026 21:00:14 +0000
Files and hashes:         1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
                          2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
                          3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: l49+xXAdlcbl0KQtrblPx2RJri937KN3rjG2Unqtg9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:e1:3f:86:93:74:bc:2d:72:a9:b2:12:72:27:88:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
        Validity
            Not Before: Jul 17 21:00:14 2026 GMT
            Not After : Jul 18 21:00:14 2026 GMT
        Subject: CN=50ac63d4068f779728cad619d74cb8c903640d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:68:99:4f:ed:02:13:20:42:6e:09:6d:c5:
                    47:8f:31:c8:7a:9f:64:e7:fd:1f:31:2f:d4:e3:e8:
                    41:26:97:27:6a:64:81:ee:bd:32:b7:6c:70:02:a0:
                    3c:75:e0:62:b3:fd:1d:32:05:61:ae:e1:34:d7:07:
                    9c:cb:3f:d3:11:c0:9c:f0:6f:60:6f:1b:f3:a9:7c:
                    12:f9:4a:83:76:ca:9c:44:8c:fd:fd:d7:7c:f6:49:
                    66:a7:76:a4:e2:88:d1:44:fa:86:06:ce:c1:d5:70:
                    03:f8:8f:0f:70:88:a3:9c:5b:08:79:80:c1:ff:89:
                    5f:6c:c4:f7:88:d9:fa:b2:5a:74:cc:f9:17:12:d0:
                    82:1c:12:93:fc:f4:34:9c:6b:9a:49:18:27:c2:51:
                    66:11:94:ad:cb:d6:1d:ba:04:19:a0:f4:78:93:f6:
                    48:21:96:30:8f:82:16:7b:ba:0a:f6:21:8d:cb:32:
                    d0:97:76:72:73:33:27:25:95:31:a4:cf:8c:1d:1a:
                    33:dd:8d:eb:a3:f5:05:7d:77:b9:d8:7b:e3:9b:9a:
                    c4:7a:b5:90:ac:76:5f:bb:9c:b9:a5:03:95:c8:68:
                    4e:f9:34:13:b4:2e:74:5b:23:fb:dd:dc:39:78:0d:
                    b7:e5:6d:eb:37:90:a1:b5:87:c8:6e:07:0c:d7:fb:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:63:D4:06:8F:77:97:28:CA:D6:19:D7:4C:B8:C9:03:64:0D:95
            X509v3 Authority Key Identifier:
                keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:2f:7b:60:a7:de:f4:be:3c:04:1f:78:e9:02:19:f6:88:
         bb:0b:c6:cd:3f:49:00:5b:cc:2b:5f:89:04:a7:cd:db:b8:b8:
         ac:e4:9a:27:e8:ed:53:85:f5:03:e3:db:11:53:42:bc:a0:a0:
         89:f2:6d:00:36:6a:9e:a0:90:d5:9f:41:25:60:80:33:ac:b7:
         ce:83:51:bc:bc:95:16:3e:f6:61:cd:ca:1b:ab:f6:53:11:ef:
         0b:15:61:8f:4b:bf:e3:54:af:9c:90:33:f9:63:85:c9:65:f9:
         3a:3e:da:d4:98:7e:e0:8b:92:7d:33:6a:38:04:50:a7:57:fc:
         5e:f8:51:e3:e8:df:3c:fc:58:96:00:1a:12:31:f5:d6:89:c5:
         bd:a9:39:9c:ec:a8:24:59:aa:2d:f0:da:14:30:d9:f5:ac:28:
         f5:f7:76:25:62:bc:bb:07:fc:35:c2:f7:b7:8e:f9:6e:e3:9a:
         4f:93:2c:5a:b8:26:f3:67:b8:cb:a9:a2:ec:46:d6:5a:8d:39:
         f8:aa:0e:4e:29:b3:7c:f6:9e:57:3e:26:b5:d8:ba:00:a3:d4:
         27:07:c7:19:0b:05:23:a4:b1:e7:82:f0:d3:a9:66:5f:e3:dd:
         78:0e:1b:22:65:29:4f:46:1d:7c:fe:18:96:00:44:de:97:bd:
         e4:49:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:27:00 2026 by rpki-client