Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File:                     B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier:          qHWfJZLf35dUu2uuE0kZkiygHaVm4/AdQN3PCpIGpHI=
Subject key identifier:   C5:C5:76:94:69:7F:80:CA:46:7A:27:90:86:54:88:71:D0:EC:9B:B9
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer:       /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial:       019F1754D9392E33814609B62865D180E506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 07:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:04 +0000
Files and hashes:         1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: XzTqOP0PsovNRoPbXXOv4he08uNJE7/GMEs63gNkhbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:54:d9:39:2e:33:81:46:09:b6:28:65:d1:80:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c610b2a06db1831854b6726c33090336287415
        Validity
            Not Before: Jun 30 07:01:04 2026 GMT
            Not After : Jul  1 07:01:04 2026 GMT
        Subject: CN=c5c57694697f80ca467a279086548871d0ec9bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:26:55:e4:3f:aa:64:1d:26:19:ef:3d:b5:
                    53:27:a5:6b:b2:67:70:a5:0e:2b:04:4a:fb:6d:80:
                    b4:b0:6f:58:84:0d:39:02:b0:2c:f1:0e:d3:8a:d8:
                    53:ef:02:d2:75:3e:9b:ea:d0:38:4e:b3:5c:4e:df:
                    32:05:be:e7:db:47:e6:c3:cf:3e:da:bc:3f:81:03:
                    99:11:a1:cb:2f:b6:fa:b6:62:8c:93:6f:9a:19:93:
                    bc:4f:96:95:06:88:c6:dd:28:6d:84:81:a6:0e:30:
                    ba:ad:93:fc:38:03:44:58:70:b3:2e:dc:82:1c:cd:
                    26:44:8b:e6:3f:5d:e0:d3:4d:fd:2e:da:08:d4:71:
                    ee:73:22:18:20:24:46:a5:da:b7:ed:ff:ae:71:39:
                    88:65:77:69:0e:63:1f:0f:55:29:19:6e:40:41:f6:
                    f4:7a:47:f3:0c:2e:a8:54:c0:45:45:ce:e1:e3:c8:
                    85:aa:c1:05:7f:82:49:eb:a6:29:50:a8:ee:a8:ee:
                    0b:3b:b2:25:08:f8:49:17:30:21:9e:4c:f8:5f:a8:
                    49:93:e3:de:64:19:05:8c:a4:2f:23:a3:9f:bb:39:
                    fa:76:ad:e0:b9:20:b9:b3:4f:3a:c9:ce:64:4a:34:
                    17:28:d4:d9:e7:93:58:5b:7c:01:c5:76:4d:49:f4:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:76:94:69:7F:80:CA:46:7A:27:90:86:54:88:71:D0:EC:9B:B9
            X509v3 Authority Key Identifier:
                keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:03:1b:80:96:08:8c:0f:2c:30:75:fe:a2:5d:37:6e:3f:
         a7:85:98:34:85:4d:42:d3:6d:74:c8:6e:9c:7f:bd:12:45:e8:
         e6:d0:ea:5f:7f:c2:d0:cd:59:04:55:90:7c:b2:38:9e:82:35:
         d1:8a:52:eb:49:db:f7:fa:8f:a3:46:b3:7c:13:71:8e:e1:0e:
         13:a1:2f:ce:5b:a4:f5:04:03:73:7a:fe:54:e5:35:ce:26:2a:
         23:c0:42:e8:7e:df:b1:27:6c:71:cc:52:20:1a:08:42:51:cf:
         cb:a4:b9:78:7d:ca:5c:d4:d0:bc:62:73:3c:4e:ee:dc:87:70:
         ae:d0:35:37:51:4e:d5:c1:3b:0d:1b:fa:89:d0:cf:7b:69:7a:
         02:8f:94:e9:d0:9c:6e:33:59:9d:5f:e8:c9:99:f6:4a:7a:60:
         34:92:6b:0b:88:5f:56:41:74:b0:0a:1a:fe:67:3e:43:f7:d2:
         f4:8f:a5:85:cd:35:9b:18:1f:38:8d:23:df:cd:ac:e2:74:14:
         a0:8b:8c:d4:5b:2a:82:23:5e:a4:46:a1:31:b5:df:27:82:0f:
         cb:67:09:f6:3d:fa:3f:b2:bc:04:7a:23:6c:ee:93:33:a4:09:
         dc:f0:0d:2e:b3:11:80:22:b9:aa:f8:b8:2c:d5:5a:fd:81:57:
         76:f0:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:21 2026 by rpki-client