Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          rYNReKK8RPGHhIHuO/DWmdUCa5ac7eBvipJCQbroDUw=
Subject key identifier:   BD:14:FD:8E:EB:F2:19:B3:4A:67:9A:64:60:A8:C8:95:92:9D:7E:FF
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       019D265F9E33DF423A93502A98DFB9C3120E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 19:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:33 +0000
Files and hashes:         1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=)
                          2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: HTEG0htT6LTPcBQeEIGDKPf2QYA153dvaDn0HtI9F0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:9e:33:df:42:3a:93:50:2a:98:df:b9:c3:12:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Mar 25 19:01:33 2026 GMT
            Not After : Mar 26 19:01:33 2026 GMT
        Subject: CN=bd14fd8eebf219b34a679a6460a8c895929d7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:fd:5d:ee:d7:db:10:ac:ec:04:19:c7:ed:
                    b3:f4:df:6c:ee:b4:67:05:bc:34:13:52:2b:2c:55:
                    4f:55:51:e3:67:57:57:d9:b8:70:e7:f7:12:79:63:
                    dc:66:4a:2f:44:07:31:70:c6:6b:e8:d9:39:7b:a0:
                    cb:df:99:6e:85:35:a2:86:54:8f:c3:e7:57:07:8b:
                    fd:a0:75:47:b5:c8:23:c2:ba:23:60:00:c7:4d:54:
                    53:8e:9c:de:d2:22:77:65:8f:37:aa:02:08:83:76:
                    bc:b3:39:cf:71:0f:26:45:80:83:53:11:29:7c:3b:
                    83:41:b6:b3:c0:5e:2d:47:94:5a:6a:72:26:a3:4e:
                    c2:aa:10:77:39:59:a1:3d:53:f4:d2:e3:69:f7:0b:
                    58:f5:08:25:11:e4:fc:da:85:3a:d4:28:7e:d0:92:
                    2a:c9:52:08:ce:d1:6b:8b:7e:db:0a:09:34:88:f1:
                    76:6a:fd:81:6d:29:f9:09:80:4c:16:0b:72:3a:ff:
                    0d:85:e7:53:6d:74:9b:50:02:0f:73:46:3a:97:e7:
                    c6:50:de:0d:c0:4b:49:e1:43:fc:54:76:a2:ba:90:
                    5a:bb:b6:94:60:0c:f2:ed:ba:12:79:aa:27:8f:79:
                    1c:13:15:d5:6e:01:09:22:23:51:3e:47:bc:22:56:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:FD:8E:EB:F2:19:B3:4A:67:9A:64:60:A8:C8:95:92:9D:7E:FF
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:9c:49:e0:6e:7d:eb:f2:dd:4a:fb:95:d5:6b:66:65:de:
         fe:eb:5c:20:a7:9d:7f:c1:ae:0a:d4:e2:d2:09:d2:92:9a:51:
         9e:2c:9d:85:cf:88:7a:cd:94:3c:da:78:e7:3d:0d:8b:71:f4:
         dd:6a:82:97:42:b5:79:36:82:c5:19:f8:86:cc:2a:8f:e3:8d:
         43:2a:8e:ab:04:be:26:1b:b5:e7:5d:a4:f7:99:62:84:2b:e7:
         7d:f6:1b:6d:5b:81:43:d5:fe:a9:7c:28:79:c8:a8:b0:54:79:
         ce:7e:6c:e3:59:55:22:ba:ff:bb:35:52:d9:e7:5d:70:46:7f:
         1e:71:7d:09:7b:26:11:e1:28:8a:bc:bc:29:5a:be:25:e5:e5:
         94:70:2a:1e:55:55:45:26:57:75:9f:8a:2d:7f:23:2f:75:e6:
         41:b1:f9:c7:cc:5d:71:85:6c:ed:9e:a2:45:b8:21:52:78:9d:
         50:e5:10:e8:47:40:a6:52:a4:b9:fa:58:99:a9:ff:c5:2c:c1:
         98:9a:b3:10:4c:0b:20:5e:16:c6:cb:c6:79:5a:a4:14:c6:6c:
         e4:40:59:04:04:0b:cc:d1:60:c1:22:19:c2:28:6e:5c:37:96:
         e7:1b:cb:63:f9:5f:2e:6b:fc:36:08:a1:8f:9b:44:6e:45:9b:
         9f:05:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:02 2026 by rpki-client