Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier:          sa5Tv7OVNOI6T9GYiRZNiEsq/NRA+yP2o0YqkiwlN1M=
Subject key identifier:   C7:E9:1E:C4:F2:C1:51:54:EA:CD:BA:11:24:E0:6B:3A:BC:4E:61:69
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer:       /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial:       019FA3733E52A6DE8BE541258524E701D6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 12:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 12:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 12:01:06 +0000
Files and hashes:         1: MJtCVVy7xxJhXUWGWWZ2lNCGj1k.roa (hash: HdvJHKbNcNPfl/JOSdnPb5pLI2El/VPr+80cW88sPD4=)
                          2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: UUh0IYEqr+6cAqtILTC0uUJZvbFmUPqCt6asWLIiwLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:73:3e:52:a6:de:8b:e5:41:25:85:24:e7:01:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Validity
            Not Before: Jul 27 12:01:06 2026 GMT
            Not After : Jul 28 12:01:06 2026 GMT
        Subject: CN=c7e91ec4f2c15154eacdba1124e06b3abc4e6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:a1:73:8b:75:49:d7:f4:bb:ca:ea:be:94:
                    83:4b:ca:07:d1:90:2d:c3:37:ac:95:fb:f7:a5:0d:
                    e4:a7:92:d3:c6:64:4e:50:39:d7:c7:00:cc:7e:92:
                    14:80:a7:06:a1:55:01:91:10:0f:47:24:c3:58:53:
                    e6:a9:53:1f:2b:95:79:35:09:d4:d7:5a:95:65:12:
                    d6:1e:6e:d3:d5:77:7e:fe:4e:ff:45:0a:3b:35:a2:
                    c5:4f:5d:7f:b3:1d:fb:3b:9d:c3:6e:fa:3f:2b:a5:
                    9b:08:f4:ec:6f:e6:34:9e:14:f6:81:bd:f3:ba:af:
                    95:8f:09:7f:2b:cf:e2:23:8f:d3:da:4e:1d:3d:d9:
                    56:d1:51:df:72:30:4f:71:18:a7:dc:9d:02:5a:16:
                    e8:0c:05:63:f8:c0:bc:c9:1a:b2:e1:6a:e4:44:00:
                    1f:63:59:c3:0b:4a:3f:e9:69:d3:2d:30:c4:db:7e:
                    5c:04:18:d5:f0:20:c9:82:1e:68:77:56:bd:98:70:
                    88:b3:32:29:f8:ea:ec:7f:7b:71:ed:d1:27:5c:7b:
                    c1:03:90:1f:81:67:c4:77:3c:cc:48:47:4a:74:09:
                    15:9d:ef:29:fb:af:ec:b7:98:51:73:68:49:d1:ad:
                    5b:ea:44:4c:dd:26:2f:a9:3f:54:f4:59:cb:12:8a:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:1E:C4:F2:C1:51:54:EA:CD:BA:11:24:E0:6B:3A:BC:4E:61:69
            X509v3 Authority Key Identifier:
                keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e6:c2:89:76:cd:5f:92:db:84:dc:a4:54:7b:cc:50:6f:b1:
         86:dd:eb:3c:04:3b:2c:f2:fa:63:68:4d:a8:61:cb:31:9d:e4:
         c5:b2:63:34:1e:d6:84:02:d8:ae:7b:28:a6:f9:eb:fb:05:0c:
         e9:fe:bf:5e:25:f4:fc:c9:c2:d1:43:ed:a0:82:91:7c:5c:61:
         c6:6d:1f:36:e4:fb:ff:92:c5:aa:e0:2d:03:f2:4d:84:2d:2a:
         71:52:ca:0e:09:cb:ab:3a:9d:ec:b1:17:ad:73:99:e8:e9:43:
         10:5b:1f:4e:ca:5b:3b:44:0d:3f:08:4d:1d:45:8d:33:6a:ce:
         6d:3d:96:1f:38:28:60:eb:a4:87:58:d2:7e:ef:81:8f:dd:8a:
         bb:56:64:e0:ec:23:16:27:e5:eb:0f:17:e3:0b:26:1a:f1:26:
         0b:e5:16:b7:3e:d1:ea:be:c4:1c:a0:f8:ce:b6:fe:a8:d0:30:
         ac:3a:ef:c8:dc:34:69:76:0c:ff:56:96:63:c8:49:84:32:8c:
         13:5f:33:22:1a:c9:06:f7:9b:89:ec:00:5e:dc:00:7b:07:b3:
         7a:cb:41:f6:5b:3c:03:48:57:89:ff:b2:95:58:7b:64:91:8e:
         7e:f1:a1:eb:0d:19:fe:6d:d4:f0:c9:c8:46:bc:6a:4e:a7:b5:
         17:11:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:11 2026 by rpki-client