Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File:                     BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier:          Y9AD6Xjqnx4GNcJQ1zoC8IYbLJmq2s6wZS0DCvl494A=
Subject key identifier:   87:A6:9B:6A:39:C4:5B:B2:8F:AF:9C:A7:EB:F1:84:BD:42:E6:C4:8F
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer:       /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial:       019F1944404688CDADF37203FAA7504FD237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number:          0E79
Signing time:             Tue 30 Jun 2026 16:02:11 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:11 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:11 +0000
Files and hashes:         1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: 1v7AIQLvrChEY3nFF2LEiaoScVSjUiKMM0HMwyqJbUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:40:46:88:cd:ad:f3:72:03:fa:a7:50:4f:d2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
        Validity
            Not Before: Jun 30 16:02:11 2026 GMT
            Not After : Jul  1 16:02:11 2026 GMT
        Subject: CN=87a69b6a39c45bb28faf9ca7ebf184bd42e6c48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:56:1a:31:5a:03:c7:aa:64:4a:08:23:68:
                    12:f3:02:d8:80:e2:f8:8e:35:00:71:3c:ba:ae:21:
                    9b:aa:40:fc:7f:5f:3b:03:e3:92:15:c6:5f:31:f1:
                    d6:2a:60:d9:89:dd:6d:de:4a:c7:de:0f:6b:3b:25:
                    a7:b0:33:63:72:34:92:10:53:b0:14:3f:a5:c2:04:
                    6d:c2:50:dc:a7:71:21:4d:af:b8:1a:94:15:12:c5:
                    3d:0a:0c:bf:6a:d5:fe:f0:b3:61:17:3c:46:6f:95:
                    c2:0d:2a:25:48:b8:ab:13:b5:95:0b:c7:b9:ce:96:
                    04:7f:39:a2:e9:c7:c4:a1:95:a7:f9:3c:c8:fa:dd:
                    86:85:23:61:ce:15:9d:42:9f:61:3c:28:d2:82:0e:
                    57:55:d9:01:0a:3e:15:f7:64:8a:36:bb:17:03:aa:
                    ad:e1:62:7e:5f:d8:41:3c:88:8b:6a:ed:b5:0b:8d:
                    a4:f5:74:a2:89:13:61:00:64:f4:80:a9:6f:06:da:
                    f8:e0:fc:39:fe:bf:59:7e:38:b4:18:99:c5:0c:6f:
                    4b:d4:8e:d1:e2:34:ee:90:45:58:93:65:ff:7c:ff:
                    41:af:91:f2:34:8c:5d:b0:96:e0:85:b6:a4:27:a5:
                    e8:5a:68:f4:f1:4c:a8:ab:44:6d:73:4f:aa:9e:8a:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:9B:6A:39:C4:5B:B2:8F:AF:9C:A7:EB:F1:84:BD:42:E6:C4:8F
            X509v3 Authority Key Identifier:
                keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:30:3b:ac:78:48:68:e8:7a:47:25:93:ca:59:b7:1b:de:37:
         4b:b5:27:d2:1a:65:1a:c8:d7:1f:04:85:f6:62:a9:fb:16:5d:
         c8:a1:2f:4f:44:37:c9:19:c2:57:69:7e:d6:a6:14:3e:09:a5:
         85:78:b2:8b:37:54:2a:f4:04:f9:33:ab:a1:29:9f:f8:cf:d1:
         2b:48:fc:be:1f:2d:10:cd:db:a0:59:a5:4f:49:47:d0:b0:ea:
         9a:7a:9d:19:f6:b2:e4:5d:cd:71:08:0c:7a:ab:3a:d9:40:2d:
         36:67:b0:86:51:ab:40:f9:0d:78:06:62:c1:4c:d9:e2:2a:37:
         51:49:8c:df:f4:9e:81:4d:e5:56:c3:89:c9:f4:0d:d4:c8:31:
         69:76:40:3b:02:8a:e5:61:68:a6:1f:d2:cf:2b:1f:4e:0c:ff:
         a2:0c:0c:42:12:cb:ce:58:9c:a0:ac:d3:11:9a:bb:f4:fe:da:
         32:68:b2:c6:cb:40:a7:7d:b8:6c:36:7a:8a:84:09:11:68:60:
         68:c1:00:df:26:1b:d9:df:c0:4f:f0:ae:00:97:07:9b:45:61:
         4a:5d:47:8d:8f:37:9a:9b:bb:2e:58:34:1f:0b:19:ee:20:6d:
         d3:87:03:7d:e3:d3:3f:80:a5:3d:99:40:99:e4:12:43:fb:bb:
         04:72:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:04 2026 by rpki-client