Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File:                     BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier:          FGrjNtJppdW4Rx9+2Vb0QVmphs8tOxIusD5mIEe1nFY=
Subject key identifier:   66:95:67:40:28:61:90:B4:54:E2:E7:2F:C3:7D:9C:EE:12:06:65:58
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer:       /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial:       019F190CDC7E3A65863F200986D3EBD3DECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number:          1992
Signing time:             Tue 30 Jun 2026 15:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:40 +0000
Files and hashes:         1: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 7efIubpv5BTriy/sPCXvIkR5nVbJYNKryMMPMDrwu2g=)
                          2: NaepKDUSFtPVzyjXT9VY683pv7k.roa (hash: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4=)
                          3: tMGhRP-Xzge3RXgNfdMGJBwHoL8.roa (hash: o/l+UfaRASye/WyLBJkfDvEuNMAWi4a+yJfDJFDSNrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:dc:7e:3a:65:86:3f:20:09:86:d3:eb:d3:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
        Validity
            Not Before: Jun 30 15:01:40 2026 GMT
            Not After : Jul  1 15:01:40 2026 GMT
        Subject: CN=66956740286190b454e2e72fc37d9cee12066558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:3c:5e:72:6e:6d:14:93:5a:67:6a:3d:5f:
                    29:92:60:57:9d:df:64:48:a1:6e:a0:04:01:be:42:
                    0e:16:fe:76:b3:e8:79:e9:ee:5c:b6:b4:bc:16:ea:
                    6a:59:26:06:e2:21:17:5f:98:47:55:02:37:a6:b8:
                    8d:70:18:de:21:50:a2:8b:b0:34:84:75:2d:00:f2:
                    8d:6f:0e:3e:d4:1d:3b:6a:86:a1:97:79:17:0a:3d:
                    cb:a2:ac:02:84:a4:69:3a:d3:aa:e0:24:16:75:dd:
                    be:6e:f4:8f:bc:94:1c:63:2e:09:36:db:e8:53:a0:
                    d2:3b:e4:7a:7e:29:88:e5:d4:c5:3a:8f:cd:5c:2f:
                    ee:ec:df:6b:58:30:9b:b7:c8:2d:92:aa:9e:73:9c:
                    5a:31:3e:6a:cc:42:2b:62:ac:76:4d:39:8a:3d:cc:
                    0e:e2:3b:75:7e:58:5d:7e:29:08:51:b3:7e:40:7b:
                    e2:95:9b:f4:86:b9:f1:b3:17:64:66:9f:65:a0:1d:
                    66:1a:60:47:cf:e0:3c:5b:38:42:8a:01:cf:bd:0c:
                    d2:f8:8e:0a:53:ad:87:34:5b:5f:d4:7c:ab:61:ae:
                    01:22:d6:57:e9:80:15:da:f7:1b:c4:46:98:93:67:
                    54:b4:07:08:c5:20:a6:a4:a8:0f:95:21:73:75:3f:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:67:40:28:61:90:B4:54:E2:E7:2F:C3:7D:9C:EE:12:06:65:58
            X509v3 Authority Key Identifier:
                keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:38:84:55:1a:26:c5:d2:79:62:f1:8f:50:97:e1:3e:43:
         71:f5:28:be:89:1b:29:ad:28:a7:71:d3:f7:e9:ed:05:57:69:
         2e:26:31:73:f7:8c:8f:b2:0c:43:98:3c:3e:91:69:cc:46:e2:
         df:58:89:4c:ac:c4:f4:18:61:8c:3e:e9:10:18:d3:d7:4f:81:
         b4:c3:72:53:8f:86:26:02:d8:e9:f2:82:65:d9:41:76:62:a7:
         e5:0b:4b:f6:87:d5:8c:56:31:6d:e5:c1:72:0d:3c:13:43:fa:
         08:1e:f3:59:0f:8d:51:69:b1:69:2e:47:73:26:c5:7b:08:e8:
         bf:1f:34:0a:42:cd:eb:eb:51:85:62:9b:46:4e:e8:18:32:04:
         ce:7a:68:c5:c2:18:d6:bd:09:0f:ae:49:9e:c2:64:91:a9:5b:
         64:13:d0:91:ed:96:a6:67:d0:2b:1a:bb:ed:ce:0f:a6:17:1f:
         dd:ab:ea:77:7b:fc:d1:dd:87:ae:2d:9c:f3:a6:3b:b4:28:46:
         ca:2b:36:65:bc:eb:92:30:ba:c5:d0:59:02:a4:be:92:01:33:
         88:3c:ab:81:51:db:01:5f:66:4e:d7:74:b3:70:b0:ac:d5:85:
         9b:5e:0d:d0:f4:e4:4c:b4:c6:98:66:81:7e:7a:0b:a0:40:2d:
         bd:77:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:20 2026 by rpki-client