Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          nu/+Lh252kDbqviErVpKyTeR8vHeFAu2E+oHNjC6G8c=
Subject key identifier:   E8:DA:61:DF:82:69:87:31:57:D9:FD:96:E1:B8:7B:4E:DC:B3:2E:7B
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       019F18D62AA44853281AFA8FA605F2C2A848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          18C8
Signing time:             Tue 30 Jun 2026 14:01:56 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:56 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:56 +0000
Files and hashes:         1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
                          2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: VR+++JJHBqtNXgMw/v7kFBcxg72RgJ6W9AgyJCjWwGI=)
                          3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
                          4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:2a:a4:48:53:28:1a:fa:8f:a6:05:f2:c2:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Jun 30 14:01:56 2026 GMT
            Not After : Jul  1 14:01:56 2026 GMT
        Subject: CN=e8da61df8269873157d9fd96e1b87b4edcb32e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:23:66:ba:ab:be:4b:f6:a3:bf:a2:55:a1:
                    f2:bb:8e:f4:73:ef:97:a3:bd:06:71:64:5a:a7:1b:
                    eb:e8:a7:f7:44:c5:ae:d4:b1:80:9f:32:ea:77:12:
                    3b:19:8b:b1:1c:bb:51:4a:9c:03:ae:16:6b:7c:c1:
                    e5:2e:52:28:fe:de:7a:55:43:47:d2:eb:80:8f:f2:
                    64:f6:e9:8f:3b:05:db:4e:b7:96:42:ed:c9:be:8b:
                    63:f7:d7:b4:c1:e1:10:6f:3c:8d:12:67:65:a8:90:
                    e2:df:af:6e:1c:7d:8d:40:86:11:0f:df:e4:41:1e:
                    9a:95:c7:ea:85:a0:a6:9e:c8:66:85:a3:9f:c1:39:
                    0c:ad:b9:55:5c:d2:44:15:d9:76:0c:7f:fe:91:4e:
                    96:df:e3:52:5c:1a:e2:f1:fb:e6:76:d9:8f:39:a4:
                    7b:f4:cb:ec:d9:ab:02:1c:b3:70:37:fb:2e:19:ff:
                    4d:6c:9c:d3:e8:98:ec:89:b8:42:56:44:95:c5:64:
                    e9:eb:01:ec:e6:98:8d:6c:e3:35:63:22:f5:7e:91:
                    02:c0:fe:e1:69:f1:fc:e9:26:21:07:11:c3:61:69:
                    09:38:bb:c1:e2:a5:31:b2:76:23:d0:53:a9:44:48:
                    f2:d3:89:5b:ad:2b:c1:8b:bb:5a:24:35:8d:e6:8f:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:61:DF:82:69:87:31:57:D9:FD:96:E1:B8:7B:4E:DC:B3:2E:7B
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:15:d9:e1:e4:87:99:ad:50:92:99:c4:5a:8b:4a:94:a2:a1:
         78:bd:02:54:b9:31:06:26:ae:1f:92:a5:f6:fb:70:55:79:e2:
         9c:a7:2c:18:91:ed:76:a6:6a:25:8b:94:bc:11:9b:1d:d4:a3:
         58:c4:d4:2e:64:53:5b:35:a6:62:c2:11:44:0b:09:88:18:25:
         2b:44:1d:27:a8:cb:95:8e:01:1b:d2:f7:62:49:06:ab:dd:bc:
         a7:0d:de:11:86:f5:55:fa:bd:e5:94:ef:d4:ea:9b:6e:26:aa:
         63:f5:39:e1:09:00:20:a7:84:72:2d:dd:70:a1:df:89:8b:53:
         be:2e:db:f6:bf:ff:a4:cc:71:2c:82:ef:da:64:20:e8:84:42:
         5e:01:d1:16:1d:bb:12:23:16:ea:f2:71:3b:80:8d:0b:ac:4a:
         31:7d:d5:f8:ca:08:1a:37:19:a3:f6:c9:e2:3f:f0:fd:07:e2:
         6b:65:b8:c7:4a:af:6b:ac:e7:cd:24:f1:fc:d8:15:51:53:da:
         6a:db:b6:a4:35:d1:0b:41:60:cd:51:71:27:3c:a7:5d:c4:42:
         3b:58:cd:7d:e7:14:de:6a:b1:ac:16:08:f9:00:62:be:74:25:
         72:5d:21:a5:53:12:07:b1:d9:c1:bc:7e:13:9e:70:6f:e1:1c:
         22:bf:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client