Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          i2r9Go/0zLE+RfV2QbNT7+sPgdtdXz077oBTeysGWnQ=
Subject key identifier:   8C:AA:85:5E:9D:24:15:90:94:5A:7B:56:C2:1F:64:33:00:4D:0E:B8
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       019F175487509EF0CAF71ADD1A0492E9DB6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          1837
Signing time:             Tue 30 Jun 2026 07:00:43 +0000
Manifest this update:     Tue 30 Jun 2026 07:00:43 +0000
Manifest next update:     Wed 01 Jul 2026 07:00:43 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: E+HLP5wwFGeMOhKxV2zMmf+mjrLpc7qKB2hb4c0gOfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:54:87:50:9e:f0:ca:f7:1a:dd:1a:04:92:e9:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Jun 30 07:00:43 2026 GMT
            Not After : Jul  1 07:00:43 2026 GMT
        Subject: CN=8caa855e9d241590945a7b56c21f6433004d0eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:52:aa:69:88:a6:b6:b5:31:b0:eb:25:28:
                    90:bb:4f:2c:c6:85:d6:fa:02:49:ce:4d:56:c4:fa:
                    8e:1f:56:4f:01:1e:3b:25:b6:ae:44:6c:4c:32:00:
                    ae:60:4e:f7:27:82:e6:04:db:ad:ba:31:5b:8b:b5:
                    18:a8:81:4d:d4:b7:d8:63:8b:cb:77:de:54:d1:e9:
                    61:ba:e6:51:ee:ce:68:70:18:a9:c8:0c:8f:c3:d1:
                    ba:1a:ac:3d:b5:64:6c:0a:ba:e6:0f:19:46:d3:68:
                    82:95:6d:94:02:2f:39:e1:c9:1b:c2:8c:76:c4:12:
                    bc:4f:a4:ce:31:a0:43:77:f2:d0:da:42:58:dc:3f:
                    e7:a0:0a:2d:ba:e6:77:da:e4:70:54:b5:e9:c4:ce:
                    4c:f6:b5:95:c5:cd:26:4d:3c:54:23:ee:44:3e:09:
                    7a:58:58:eb:c4:f6:af:53:58:64:52:d7:0c:ed:6d:
                    df:f8:9e:d0:1e:99:31:63:bb:26:0e:b3:f5:38:cc:
                    1e:5d:17:76:1e:a0:8d:c4:be:f6:e5:29:f5:b2:30:
                    40:d6:13:03:7a:63:bf:17:69:5f:31:1e:c4:9e:e9:
                    d7:0a:60:bb:e4:ae:60:db:57:1b:3f:68:95:7f:9d:
                    3c:14:26:c5:0b:a7:81:7a:3a:4a:f3:f2:a1:ee:65:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:85:5E:9D:24:15:90:94:5A:7B:56:C2:1F:64:33:00:4D:0E:B8
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:1d:62:b7:47:86:f0:5c:3e:23:40:e7:f0:7c:a3:4d:a2:
         54:98:60:35:15:bb:1a:ff:12:55:39:77:e5:4e:7b:4f:72:9e:
         ff:6e:01:82:bd:77:ef:69:7b:0d:28:ee:a9:85:6c:a5:7d:5d:
         f1:a8:73:a8:58:16:eb:ef:3f:de:5f:e0:c0:fb:7d:27:4a:e2:
         74:80:6d:c3:99:6c:46:b1:39:d7:40:ce:b4:26:1f:2e:01:44:
         4c:09:68:57:4e:c9:0d:09:ad:a4:03:db:01:81:d1:5b:30:e6:
         ac:a0:4b:bd:01:45:a1:4e:50:76:19:60:c4:19:d8:d6:f6:97:
         7f:e1:55:29:8f:02:89:62:2e:0b:68:4a:2f:85:00:18:70:db:
         7f:09:63:c3:d6:56:9e:9a:af:3a:30:a7:dc:71:f1:94:39:b2:
         43:51:5a:d3:84:0b:5d:74:9f:0c:31:56:e5:db:9b:a2:9b:02:
         b8:6c:b5:73:c5:2b:00:42:db:ee:6c:68:e7:30:6e:0e:bb:3c:
         de:dd:7b:12:b3:8a:e9:0e:5a:05:4d:80:e2:87:f9:68:35:df:
         88:6f:bc:5d:d5:4a:e5:a8:05:43:52:a1:a5:8e:b7:07:1f:3b:
         e2:22:c3:f0:c6:68:5e:b5:7a:22:2f:0b:d1:56:bd:eb:f2:2a:
         47:0f:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:31 2026 by rpki-client