Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          iMjIw9y8WHdQ7+z28Ok9Jz5mAibjzuRWgeYjuQ7IKXY=
Subject key identifier:   D0:5C:25:4F:40:FF:BD:30:F4:D7:55:9F:87:A8:AA:8D:A8:73:D0:75
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019F3A18552856D4F64A29830E5CCFC47B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          1694
Signing time:             Tue 07 Jul 2026 01:01:40 +0000
Manifest this update:     Tue 07 Jul 2026 01:01:40 +0000
Manifest next update:     Wed 08 Jul 2026 01:01:40 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 7fZ9g8qzcCXluAZFw1rV+n9epHR1jLTrKIbJCYwFfAA=)
                          2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:18:55:28:56:d4:f6:4a:29:83:0e:5c:cf:c4:7b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Jul  7 01:01:40 2026 GMT
            Not After : Jul  8 01:01:40 2026 GMT
        Subject: CN=d05c254f40ffbd30f4d7559f87a8aa8da873d075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:e5:d8:de:38:50:92:6d:e0:e3:d0:1e:21:
                    49:53:56:8f:7b:56:67:62:0d:1b:bb:8b:41:69:ea:
                    fe:dd:19:8c:55:36:6f:3a:8a:28:e7:16:0f:b3:ea:
                    47:1b:cb:48:b1:ca:1e:03:0c:31:27:a1:bb:06:7e:
                    ae:c0:3c:3b:38:63:01:9e:3b:a1:ba:9e:b3:21:f8:
                    e6:dd:41:16:1b:56:f4:cc:de:74:54:ee:7e:e7:6d:
                    2a:b9:d9:84:59:2c:22:b8:f4:85:40:4f:89:be:30:
                    11:86:95:3b:7f:1f:d5:b1:89:c5:0d:54:40:3e:c1:
                    62:b6:37:69:c9:1b:61:5e:a0:61:34:23:30:1f:72:
                    0c:b4:b4:ce:18:4f:38:c2:8f:9f:96:73:90:ce:5f:
                    03:43:29:02:c9:a5:40:e5:0a:62:a6:e2:a1:fd:61:
                    0b:ce:f2:74:6f:dc:6b:0a:02:88:c9:3a:b6:ad:ab:
                    f4:d8:58:50:1d:44:5d:11:20:49:19:16:ca:63:07:
                    0b:a1:92:80:48:91:7f:2b:b3:22:26:96:cc:3c:21:
                    f4:e8:ad:14:76:7f:2f:a0:27:87:18:ad:eb:5c:80:
                    cd:ab:de:25:ea:8a:ed:01:b0:2f:dc:09:d7:82:08:
                    7c:8e:6b:16:0c:15:af:d2:97:ee:88:0b:4d:7f:d6:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:25:4F:40:FF:BD:30:F4:D7:55:9F:87:A8:AA:8D:A8:73:D0:75
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:db:05:26:1f:62:d7:f0:71:7b:ed:78:ed:d0:6a:06:3a:
         e0:2f:7f:3d:8b:c7:4a:6b:6a:02:6b:1b:f2:63:3c:93:62:11:
         96:63:20:95:7b:54:c3:b9:3a:51:6b:d3:f2:af:0b:d6:20:20:
         64:cd:98:c3:07:0d:71:2b:b5:45:e5:3c:06:18:f9:c5:7b:98:
         d6:71:76:37:f7:b9:04:27:fe:ac:b1:49:33:e2:c1:dd:d0:35:
         f7:17:ad:9a:0f:d2:78:9c:d1:45:6d:7f:5b:87:0d:94:a4:e5:
         2b:b7:39:2c:8e:e5:02:cd:0c:03:2d:19:cc:b2:11:32:83:95:
         64:0a:79:a8:55:32:84:45:a0:a4:d9:ab:93:0d:bb:0e:0c:28:
         93:24:cb:5c:56:a2:f0:3d:03:45:77:93:b0:0a:87:7e:fa:c6:
         09:82:d1:8b:83:1b:6a:2c:42:af:8c:28:8c:1a:5e:b9:07:49:
         ae:11:68:b3:21:d2:bc:89:52:38:4f:71:4d:08:f7:8d:dc:7e:
         bc:de:87:8b:aa:9d:e8:c9:a7:26:e8:62:2c:35:1b:b9:5d:34:
         87:6a:e5:89:88:f1:8f:bb:18:34:99:63:45:91:3a:ce:e1:c6:
         3f:8d:4f:05:80:c0:11:a2:c4:9f:d6:fd:68:c6:67:55:70:c0:
         35:fc:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 07:34:54 2026 by rpki-client