Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          OFNCR0ai8coJVQ1FDjrDKcbJvaDUGlkX0lo42FmrPhI=
Subject key identifier:   4B:A7:84:E9:04:D1:75:50:39:CB:63:77:B2:8E:5B:07:22:DC:D2:B2
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       019F9E842355FA4E35E3F517B866DA230A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          19CE
Signing time:             Sun 26 Jul 2026 13:01:27 +0000
Manifest this update:     Sun 26 Jul 2026 13:01:27 +0000
Manifest next update:     Mon 27 Jul 2026 13:01:27 +0000
Files and hashes:         1: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (hash: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE=)
                          2: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: PlZKf/LSmvaWp2aEE9Ew4mN3aXgW11ScGptGpraPAEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:84:23:55:fa:4e:35:e3:f5:17:b8:66:da:23:0a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Jul 26 13:01:27 2026 GMT
            Not After : Jul 27 13:01:27 2026 GMT
        Subject: CN=4ba784e904d1755039cb6377b28e5b0722dcd2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:ee:1f:30:d0:da:6f:01:ba:38:b2:4f:0c:
                    e5:9d:f3:0a:f2:7c:12:7b:64:c2:4f:9f:7e:88:e8:
                    ca:22:7d:51:b3:ab:5b:2d:c1:7c:97:d4:55:f5:26:
                    ee:33:20:40:19:e0:b7:39:ff:bb:7d:d2:36:72:a5:
                    c0:01:93:5d:d3:b1:d9:06:11:a3:79:af:a6:47:31:
                    0a:d9:94:53:3f:8f:dd:7e:b7:1a:0b:20:00:b8:8d:
                    92:5c:cc:9a:4d:ff:af:70:9e:95:01:75:89:01:7a:
                    d0:c4:4a:d2:04:58:ff:d2:3b:b1:d4:45:2a:37:68:
                    66:d4:c9:97:11:6e:36:8b:e7:db:60:f4:6f:54:14:
                    8f:ec:9e:8e:3a:9e:6b:be:be:9f:c4:68:1e:7b:2d:
                    0d:ae:bd:08:8f:ad:ae:80:c5:44:f3:88:7c:0e:3f:
                    55:e4:90:5b:15:08:1e:33:ad:c3:14:92:03:aa:a6:
                    ec:5c:ef:51:6d:1e:10:44:b4:34:8e:7b:42:b0:f1:
                    37:ee:f1:49:7f:d6:c0:50:27:93:1b:43:7a:89:6e:
                    0d:59:99:af:3d:44:85:b7:f5:7f:08:be:dd:cd:4e:
                    82:f2:0c:87:4c:bb:ea:76:99:8a:99:5b:57:d7:1e:
                    de:8e:00:9f:40:08:71:4e:c5:3f:bd:fe:1c:ed:40:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A7:84:E9:04:D1:75:50:39:CB:63:77:B2:8E:5B:07:22:DC:D2:B2
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:30:17:4c:cf:3b:37:1d:c9:da:03:48:d4:bc:e4:2e:ed:
         88:b1:a9:35:07:37:67:f9:76:18:d2:56:69:be:ca:c7:1a:cf:
         de:79:60:6d:e8:f8:64:dd:f7:57:5b:8c:4b:28:94:95:fa:39:
         66:44:8b:09:96:39:ed:27:e8:14:93:11:af:d5:6b:6c:ff:d3:
         ad:d2:ab:8c:32:d0:c7:fc:0d:e1:7c:69:4d:27:6d:b1:c4:4a:
         dd:2e:05:8c:92:dc:d0:17:fe:47:60:c9:8e:8e:ae:29:f0:41:
         f2:87:39:21:52:c2:bb:08:9c:5e:b0:ab:67:ff:83:c2:35:a2:
         f3:d8:d3:86:34:61:e7:7e:da:cc:93:3b:aa:94:00:c1:39:ac:
         93:0c:a5:2b:b4:f3:a8:7b:9d:1c:7d:00:a7:f0:14:4b:88:4d:
         da:65:86:dd:57:ca:5a:52:0d:9a:f2:a4:75:e4:44:9e:2e:97:
         06:aa:46:14:3b:f1:d2:ca:21:b5:7a:85:1c:27:85:2a:3d:56:
         e0:bd:27:52:73:68:d7:54:61:8b:58:9e:90:e5:d3:b7:5e:f2:
         39:a0:ab:68:f0:67:19:1e:0a:32:2a:d1:3b:df:f9:46:44:0d:
         00:3f:05:a2:78:00:01:18:be:73:f2:49:ba:76:54:c1:93:e4:
         64:24:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:50:09 2026 by rpki-client