Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File:                     xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier:          7zcBZyoaIzyf8G0M0NK3Knq9IvBC/yxvNAION/dSMnU=
Subject key identifier:   2E:15:C2:96:56:C2:E9:C2:EB:E2:9D:BC:DE:E7:CF:CD:CA:DE:B1:F3
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       019F85689B7B52230D61783969952A284D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number:          0F23
Signing time:             Tue 21 Jul 2026 16:00:52 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:52 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:52 +0000
Files and hashes:         1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
                          2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: Qdb/4JaH+tkmtS9yDECmy5IE6eaXl/K4J1916wpI2q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:9b:7b:52:23:0d:61:78:39:69:95:2a:28:4d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: Jul 21 16:00:52 2026 GMT
            Not After : Jul 22 16:00:52 2026 GMT
        Subject: CN=2e15c29656c2e9c2ebe29dbcdee7cfcdcadeb1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:a5:95:99:b5:b2:9d:33:52:22:72:ba:27:
                    3c:be:a5:68:45:1b:52:6a:fa:41:80:ef:13:74:0c:
                    f8:d5:63:4e:fd:4a:4f:6d:1c:bc:b2:d8:ea:97:c8:
                    13:b4:98:15:27:2d:fb:e5:fe:4a:0e:92:69:b4:24:
                    98:84:21:8b:e4:e3:15:dd:56:8d:0e:6b:5f:05:11:
                    af:bb:ef:88:31:00:0d:95:e8:a7:6a:b9:1f:81:03:
                    42:5a:dc:8d:cb:07:36:88:15:12:c6:f8:5d:92:da:
                    db:5f:a4:5a:de:34:0c:54:ca:fd:62:fe:71:25:52:
                    b2:b3:e5:9b:f9:99:35:67:6f:c3:a4:e8:d8:b6:44:
                    9a:c8:6d:a5:ba:47:c9:dd:b1:66:02:11:b0:13:97:
                    df:00:79:00:06:ef:46:ff:12:6b:4a:1b:50:d5:db:
                    2b:a9:2e:bb:7c:60:82:27:7e:f1:fe:49:71:d4:05:
                    dd:cb:4d:47:f0:da:75:bb:a3:ca:f1:0a:79:fa:bb:
                    86:8f:65:07:6d:08:51:8b:07:44:40:c4:0e:55:32:
                    63:d1:f7:12:cd:26:33:75:2b:ab:01:76:65:e4:94:
                    8c:ee:a1:3d:b1:b1:dd:ee:57:6a:77:92:cf:2d:2e:
                    e3:72:fc:43:55:a2:f6:ba:53:88:b3:bc:b1:5c:30:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:C2:96:56:C2:E9:C2:EB:E2:9D:BC:DE:E7:CF:CD:CA:DE:B1:F3
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:a7:d0:3e:fc:78:e2:07:8d:0b:86:fe:d4:3b:0f:b0:f4:
         55:55:14:64:54:20:dc:6f:52:ad:ae:cc:0e:1c:81:a7:02:0b:
         10:3b:10:9d:94:f6:a1:8c:77:a8:45:ec:ee:66:eb:f3:34:c7:
         34:8a:0c:d5:20:0e:db:a6:2c:6e:9b:31:44:23:05:66:f1:f8:
         bd:b6:41:d1:b4:d7:0a:1d:d2:98:82:53:22:68:f5:b8:8f:8f:
         e7:19:09:61:fb:42:e5:6d:52:a3:d8:78:78:3e:da:40:11:6c:
         4c:31:13:b2:70:08:49:cf:07:13:1c:dc:bf:61:48:04:8b:bb:
         84:33:4e:3c:fd:51:3b:e4:c5:aa:ef:0a:8d:8e:89:6c:58:d2:
         3f:10:ed:f3:6c:ad:71:76:7b:d0:b6:3b:e3:e1:29:7a:82:fc:
         d1:3e:05:ad:81:ef:02:3f:2e:b8:d7:28:57:ce:61:9c:d3:bc:
         00:c3:7d:bb:9a:e5:0e:ee:b6:eb:fd:78:da:eb:08:42:7b:92:
         ec:53:70:45:89:6e:69:f3:cf:1c:65:3e:16:e8:83:33:f5:24:
         09:8d:77:2b:4c:4a:e4:e5:d9:ef:4e:c4:47:57:62:fe:51:af:
         fc:15:ba:5d:a2:4e:73:e7:71:7e:fb:15:2a:1c:df:45:ef:10:
         11:e9:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:23 2026 by rpki-client