Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          WNmyiI4l+wkaYg88YxyLTRG7dCOWcR6Q2su9eJMwvD0=
Subject key identifier:   76:07:B1:0B:CE:7E:1F:D6:5C:DA:B4:64:63:01:B3:1B:F7:40:55:F4
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       019F1A1FF00CD902C8FF51C38AC1C1D3D632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          0682
Signing time:             Tue 30 Jun 2026 20:02:08 +0000
Manifest this update:     Tue 30 Jun 2026 20:02:08 +0000
Manifest next update:     Wed 01 Jul 2026 20:02:08 +0000
Files and hashes:         1: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (hash: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ=)
                          2: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: EmYtHpLR9LR8p6XEtDw+4cdY0zIl9QnUPSgupfCOPVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:f0:0c:d9:02:c8:ff:51:c3:8a:c1:c1:d3:d6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: Jun 30 20:02:08 2026 GMT
            Not After : Jul  1 20:02:08 2026 GMT
        Subject: CN=7607b10bce7e1fd65cdab4646301b31bf74055f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:f1:6e:f8:3a:95:1f:ab:01:05:49:2c:d2:
                    fd:e7:fe:31:94:b0:51:34:64:23:71:3b:93:9c:ad:
                    12:38:45:fb:16:aa:17:e1:4b:a6:3d:25:fa:b6:25:
                    cc:fd:f1:3b:ec:74:4e:c2:53:0a:bf:86:ff:3b:93:
                    00:52:bc:a6:20:aa:26:35:26:1a:23:08:1b:d2:0f:
                    c6:fa:be:04:f5:81:28:fa:6e:18:2d:01:3f:e6:70:
                    60:ab:b7:42:f5:9f:ae:6e:10:e6:09:24:02:1b:3c:
                    87:98:d0:df:da:e4:49:4d:2b:19:2d:c4:ca:bb:fa:
                    07:e5:bd:7b:db:0f:c1:76:68:cd:54:39:f4:bc:2f:
                    e3:ee:8a:97:2b:0f:e2:a4:dc:df:cb:ac:54:f0:5b:
                    d3:f5:a4:6f:6b:49:6d:c9:b1:30:a5:5c:dc:0c:17:
                    84:4e:d2:d7:03:0b:2d:8f:77:6d:aa:b5:8a:ea:64:
                    ce:9f:78:a9:8b:5a:63:06:cd:d2:e2:37:50:e9:87:
                    60:e6:f0:19:62:c8:11:38:b3:fc:ea:86:43:42:1a:
                    c1:e8:b4:1d:3d:11:8b:c0:f5:6d:3b:ec:45:6e:f4:
                    c4:34:71:55:68:55:08:a2:cd:dd:b2:ad:2a:84:cf:
                    b7:d5:99:e0:63:c5:09:55:86:50:0d:37:de:42:96:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:07:B1:0B:CE:7E:1F:D6:5C:DA:B4:64:63:01:B3:1B:F7:40:55:F4
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:f1:5f:22:c1:fd:f3:d5:cb:ce:90:8d:28:05:40:ca:9e:
         1a:57:39:6c:26:83:48:3b:c8:cd:76:35:4b:13:49:0e:ed:af:
         ce:b0:ee:2c:4b:e1:2e:4c:38:db:5f:78:df:ad:ff:a4:07:39:
         9c:13:e6:fb:34:13:f4:ad:3a:3c:10:b5:2a:3b:23:62:7c:68:
         87:38:7e:fe:46:5f:05:4d:54:99:83:37:4e:14:45:c4:76:d2:
         44:b6:0d:58:81:f6:33:da:0a:03:6b:ec:ea:63:df:02:de:48:
         15:d6:99:8a:37:9f:7b:53:5e:96:05:4d:b6:b1:89:67:58:e6:
         8a:b3:14:f3:72:14:6d:ca:5a:21:b0:3a:41:72:50:5e:3d:71:
         6b:f0:24:04:7a:c9:4b:e8:60:6f:07:58:8d:71:64:eb:e5:64:
         6f:23:e7:86:42:c2:70:6b:5e:2d:95:2f:0f:f2:d8:6c:74:b7:
         4b:10:ae:cf:33:b6:bc:32:38:3f:24:90:f6:c5:dd:07:cd:f6:
         16:4f:80:ba:27:26:0f:62:ba:b4:be:b8:51:72:17:93:0e:7c:
         04:4f:29:16:c3:8c:01:25:57:1c:56:cb:d1:3f:80:82:af:34:
         5d:ae:7d:de:d4:ef:c9:87:85:17:82:f5:b2:20:a1:fe:ec:7a:
         f7:e2:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:58 2026 by rpki-client