Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File:                     bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier:          QVqBQrcaWTYyo1Y6sppwC1yfd+3eJ3v71cDkQB3/1Kk=
Subject key identifier:   71:1E:9C:50:80:B8:A5:A0:FE:1A:AF:E3:A8:0F:84:E1:7E:D2:E2:6A
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer:       /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial:       019D29CE9313953ADA88183F1F5483C5FC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number:          0979
Signing time:             Thu 26 Mar 2026 11:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:37 +0000
Files and hashes:         1: Xn3cZdoc1oZaLWywlmWWyAyOfWE.roa (hash: 551kHSptW/6M3u7HIciWUsHuNYgd69T++wpfoLJomDU=)
                          2: ZEYC6JLSqxni0uz7DKcSIeVn5Xk.roa (hash: Hu5pf5fH3eE/w+eCyfmBaRutu6BnQiTjm+7RrzLF/6A=)
                          3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: yvpjAAUikTraX2bktcSNBqiNB8+GGnKlnOZ17siY+VY=)
                          4: p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa (hash: 3dV+rW9N+9OA8iBH1axyHdTqUPpTMbGp4N0HyyUoeQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:93:13:95:3a:da:88:18:3f:1f:54:83:c5:fc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
        Validity
            Not Before: Mar 26 11:01:37 2026 GMT
            Not After : Mar 27 11:01:37 2026 GMT
        Subject: CN=711e9c5080b8a5a0fe1aafe3a80f84e17ed2e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:1b:17:ef:1c:10:81:71:94:4b:81:d0:02:
                    59:7a:a6:c6:61:ba:1c:9f:eb:8a:5b:78:21:ed:41:
                    c5:cf:ad:94:eb:35:c3:20:67:2c:10:f1:34:18:d3:
                    03:1d:d9:81:10:01:41:08:d6:ea:23:6b:ee:87:55:
                    f8:0c:c3:8d:5d:a3:23:a2:25:c5:a1:0d:72:3a:54:
                    30:4e:70:f9:c8:5e:56:e1:35:cf:ab:0a:ee:54:94:
                    b5:ad:ac:1f:4b:f7:fe:2a:a3:9c:75:ee:29:b3:6d:
                    09:d9:a2:94:b2:8e:ea:13:41:aa:14:a5:dd:1d:16:
                    60:d0:e4:1f:fd:4d:43:2f:bc:6c:26:b3:7f:0f:a4:
                    dd:b0:a8:90:02:b8:50:4d:8c:0b:33:7f:d6:1c:54:
                    a4:3e:72:51:53:64:ee:6c:c4:35:ac:7f:de:97:56:
                    be:4b:04:25:df:41:9f:46:b6:1e:c6:f3:f8:3e:61:
                    93:70:ab:f4:ce:69:a5:21:fa:dc:17:40:8a:97:d5:
                    ae:fc:72:02:0b:5d:40:37:cf:30:03:4b:e4:ea:13:
                    fe:c8:fc:0f:52:a2:f3:ef:8a:4f:cf:74:b0:51:da:
                    00:ba:76:4c:8a:ff:40:38:ae:ee:82:24:6b:01:53:
                    45:dd:74:44:73:de:6e:ab:6c:49:11:ea:70:c2:6e:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:9C:50:80:B8:A5:A0:FE:1A:AF:E3:A8:0F:84:E1:7E:D2:E2:6A
            X509v3 Authority Key Identifier:
                keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:35:17:cd:c3:a7:8a:25:19:6a:5c:22:de:89:ec:fb:c7:81:
         77:2b:20:f4:3e:f1:bb:ed:73:f7:5f:84:30:81:db:0e:b4:ef:
         8c:fc:1f:8f:57:c9:0b:87:18:be:3f:75:ab:9b:9a:32:ed:47:
         ff:51:b8:09:0c:2d:60:d5:a0:e6:70:2c:9b:f7:39:46:85:ae:
         02:04:16:83:b4:0d:cb:c2:cb:f7:ac:3b:8f:78:c2:06:ab:c9:
         ac:10:96:2e:d1:94:cb:70:fa:f0:5c:d4:4c:76:46:b6:90:61:
         99:33:58:01:0f:a0:0d:9a:03:c3:ea:e7:8b:b9:38:78:6d:02:
         96:83:e4:4a:f3:26:3c:3b:f0:3c:cd:59:a8:c7:d2:8e:35:b1:
         23:67:95:7b:86:d0:99:39:9a:61:62:7d:b4:0e:8d:2b:c9:7d:
         7b:7f:f1:bc:19:02:7d:5a:79:93:3e:6e:dc:16:69:c6:69:71:
         e8:03:59:9e:36:ff:77:81:f7:e9:d5:a9:b1:21:9e:ce:a1:31:
         24:7c:d9:fb:86:f2:61:30:27:e0:4c:e6:3d:e6:fd:fe:d3:46:
         6b:05:71:6d:6e:95:7f:37:af:fa:a1:e9:4a:7d:b4:5a:7b:2a:
         c8:ac:46:47:17:c9:d6:41:d3:94:57:91:b7:96:d1:35:39:a6:
         56:0f:24:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzpMTlTraiBg/H1SDxfxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMWJhNmUxNGQ4M2E4YjE0YjA1MDI2ZTcxMGM4NmM0NmI3
M2MzYTYwHhcNMjYwMzI2MTEwMTM3WhcNMjYwMzI3MTEwMTM3WjAzMTEwLwYDVQQD
Eyg3MTFlOWM1MDgwYjhhNWEwZmUxYWFmZTNhODBmODRlMTdlZDJlMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtwbF+8cEIFxlEuB0AJZeqbGYboc
n+uKW3gh7UHFz62U6zXDIGcsEPE0GNMDHdmBEAFBCNbqI2vuh1X4DMONXaMjoiXF
oQ1yOlQwTnD5yF5W4TXPqwruVJS1rawfS/f+KqOcde4ps20J2aKUso7qE0GqFKXd
HRZg0OQf/U1DL7xsJrN/D6TdsKiQArhQTYwLM3/WHFSkPnJRU2TubMQ1rH/el1a+
SwQl30GfRrYexvP4PmGTcKv0zmmlIfrcF0CKl9Wu/HICC11AN88wA0vk6hP+yPwP
UqLz74pPz3SwUdoAunZMiv9AOK7ugiRrAVNF3XREc95uq2xJEepwwm5tNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEenFCAuKWg/hqv46gPhOF+0uJqMB8GA1UdIwQY
MBaAFG8bpuFNg6ixSwUCbnEMhsRrc8OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmIt
ZGFlOWZiOGJmMGIxLzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jZTgxYjYtYmNlYi00N2JjLWFkZmItZGFlOWZiOGJmMGIx
LzEvYnh1bTRVMkRxTEZMQlFKdWNReUd4R3R6dzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTUXzcOn
iiUZalwi3ons+8eBdysg9D7xu+1z91+EMIHbDrTvjPwfj1fJC4cYvj91q5uaMu1H
/1G4CQwtYNWg5nAsm/c5RoWuAgQWg7QNy8LL96w7j3jCBqvJrBCWLtGUy3D68FzU
THZGtpBhmTNYAQ+gDZoDw+rni7k4eG0CloPkSvMmPDvwPM1ZqMfSjjWxI2eVe4bQ
mTmaYWJ9tA6NK8l9e3/xvBkCfVp5kz5u3BZpxmlx6ANZnjb/d4H36dWpsSGezqEx
JHzZ+4byYTAn4EzmPeb9/tNGawVxbW6Vfzev+qHpSn20WnsqyKxGRxfJ1kHTlFeR
t5bRNTmmVg8kNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:31 2026 by rpki-client