Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File:                     BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier:          HWBwLcmNaoZjFSQa2RyicP+DpWFplpDW9FnojWWzd2I=
Subject key identifier:   0F:E0:D3:2A:53:E2:F0:1C:95:AF:0A:4A:DF:8F:D0:F6:67:BF:E6:14
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer:       /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial:       019F194344966930E1E90546E382E2530203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number:          1983
Signing time:             Tue 30 Jun 2026 16:01:06 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:06 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:06 +0000
Files and hashes:         1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: gbiXWcEAtf7ly2MWtGmWlPxGCkFMQBIvrGAq/9jkrNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:44:96:69:30:e1:e9:05:46:e3:82:e2:53:02:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
        Validity
            Not Before: Jun 30 16:01:06 2026 GMT
            Not After : Jul  1 16:01:06 2026 GMT
        Subject: CN=0fe0d32a53e2f01c95af0a4adf8fd0f667bfe614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:87:a5:a1:2b:7e:2e:73:0c:58:2f:ea:3f:
                    1c:07:26:17:cf:c9:b9:35:4c:97:64:2c:06:50:86:
                    2e:4e:19:6c:67:e3:fb:65:cb:f9:7d:fe:cb:c1:10:
                    85:61:3e:89:94:5c:22:ea:ea:e9:a6:21:5d:4b:23:
                    b1:a6:4f:20:1c:40:c9:e8:4a:f7:fc:8a:cc:a1:e3:
                    81:98:90:a3:bc:f8:b9:06:bb:d4:2f:74:9a:bd:ce:
                    c6:a8:e5:65:70:7c:a9:b3:16:f1:86:7c:fe:d4:e2:
                    d3:af:3e:89:c9:a6:05:7e:5b:20:04:4f:e1:fa:4e:
                    9e:f1:95:83:03:9c:38:4b:1d:50:fc:b6:06:c9:d8:
                    eb:b1:34:6f:df:5c:49:31:38:40:87:0c:d3:f1:13:
                    aa:f5:e7:9d:ed:10:94:ec:bc:33:6d:be:24:37:eb:
                    d6:50:5d:a0:3d:1d:ea:eb:f3:b6:fb:67:0b:15:41:
                    0a:1c:ab:d7:48:66:39:5d:31:d8:87:97:3f:0f:ec:
                    df:a8:0c:01:39:1f:55:4a:83:60:7d:7e:34:85:9d:
                    08:f6:1a:d8:a3:2a:3f:67:2b:6e:c6:ab:09:f9:c1:
                    d6:d4:06:66:10:83:a8:b8:a4:51:27:c9:50:a5:2a:
                    dd:71:14:64:92:43:0e:ef:48:68:87:8a:2d:f2:e1:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E0:D3:2A:53:E2:F0:1C:95:AF:0A:4A:DF:8F:D0:F6:67:BF:E6:14
            X509v3 Authority Key Identifier:
                keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:29:15:3f:3d:f9:1c:53:a4:f9:1e:cb:c1:37:1e:ae:a3:75:
         fc:d8:20:11:77:6e:17:0e:3c:e6:df:08:f4:fb:1b:bc:86:97:
         8f:d7:1b:30:af:79:02:3d:c8:70:4a:90:28:8b:13:bc:1f:1d:
         cc:85:42:54:c9:99:71:e2:31:f0:80:24:78:e9:e7:c2:4e:0d:
         40:6f:63:c5:92:a6:7a:fc:bc:10:23:67:d9:15:43:5c:28:2a:
         37:3d:7b:78:b6:4a:ed:49:46:f7:6e:b3:94:1e:ad:e7:bf:48:
         ff:27:e7:e1:5f:ab:d9:cb:e3:c4:b6:4b:97:8e:b8:37:a3:cc:
         fa:68:67:46:a7:85:b5:d9:73:ad:3a:e5:84:d4:73:40:72:4a:
         60:75:22:71:d5:1b:6d:d7:fc:12:20:e9:77:1e:ce:78:50:12:
         a7:e9:e2:94:d5:af:40:70:63:01:0c:4b:0c:1f:6e:ef:24:fd:
         f9:7d:4b:5b:fa:62:73:c7:6e:9f:f4:04:08:cd:77:aa:ff:44:
         8c:6e:f3:f2:f9:47:32:df:70:dd:f3:b3:2b:7d:fb:18:16:56:
         5c:fd:f3:db:8e:3b:bb:58:3f:e2:e9:f1:9b:3f:67:6e:97:93:
         66:99:c9:e8:94:ed:9a:38:a3:77:3c:5e:89:c5:7b:4e:70:5a:
         40:fc:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:33 2026 by rpki-client