Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          4E1yZRa0AHvJ6b64Uj/a7EW3JOFeveSkKglQx0+fdbY=
Subject key identifier:   AD:99:81:EA:D6:B2:AF:0E:03:84:1C:06:47:B3:4D:EA:24:94:7C:45
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       019D281652C2AE3F2E2C171975C35EF656DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          141E
Signing time:             Thu 26 Mar 2026 03:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:44 +0000
Files and hashes:         1: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (hash: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac=)
                          2: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: lcsqsiI6aHDJEC+LapKWcOmthuN+gYyXyTJOSn1nTms=)
                          3: U_IVMG7bQBnJVGDLyXYBpWOHB2A.roa (hash: q/ZezPb+HqhfJjhS/MThIaBJugpttbjehqzX0ZM2VRQ=)
                          4: Y28x5IzUI42VFOBvke09KYzr7_U.roa (hash: hhVaUfCtGXTnfymIDdR8UxHA+TnCtopLvOzuoWmW+28=)
                          5: bLR2p3__awZBusTPsasm4YiUzOA.roa (hash: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=)
                          6: rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (hash: Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:52:c2:ae:3f:2e:2c:17:19:75:c3:5e:f6:56:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Mar 26 03:00:44 2026 GMT
            Not After : Mar 27 03:00:44 2026 GMT
        Subject: CN=ad9981ead6b2af0e03841c0647b34dea24947c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:2b:f8:38:0a:0e:f7:ef:ea:ec:d2:9f:ba:
                    44:aa:55:a4:7f:22:cb:04:a1:d6:48:28:54:66:38:
                    64:38:fb:f0:fb:98:8e:c4:77:6d:c2:bc:6d:7a:45:
                    b1:63:ef:9f:aa:d8:f6:c4:60:ec:01:39:b8:6b:64:
                    fe:43:dc:e2:f4:7b:cf:d3:01:c0:72:8d:2f:95:ea:
                    5a:7c:eb:83:22:6d:af:21:4a:4c:35:b1:6b:19:b5:
                    fa:2b:cd:cc:a2:04:48:b4:d6:dd:75:9c:fd:ae:f7:
                    ef:b2:d4:91:71:57:59:4c:fa:68:2b:c4:ee:6a:cd:
                    d9:4a:41:b3:86:bb:3a:8a:e9:85:80:9c:bc:e1:f5:
                    a0:bf:21:a3:4d:2b:cf:99:f9:b7:e4:3b:7b:12:a6:
                    f4:9b:07:34:ff:8c:38:87:8b:28:1a:cb:6e:c9:9a:
                    a6:dc:0e:7a:29:30:2e:ba:cc:53:93:d2:55:a6:2e:
                    78:2f:90:31:6f:14:12:77:84:26:2f:46:ab:b2:e2:
                    94:2c:34:21:35:33:26:5f:bf:f3:46:8e:bd:8b:77:
                    2b:eb:8a:6d:5b:a4:72:90:14:20:dd:9b:d5:f1:8a:
                    26:fc:2a:99:de:43:1c:a5:66:37:cf:c0:d5:72:ca:
                    7c:cc:77:25:40:ff:eb:b4:25:92:4d:47:1e:51:99:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:81:EA:D6:B2:AF:0E:03:84:1C:06:47:B3:4D:EA:24:94:7C:45
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:a1:ce:e8:fc:28:f0:fa:bd:91:29:7e:8c:ac:19:2f:44:
         28:ed:9d:00:17:82:ac:ca:28:f6:d8:dd:23:42:44:dd:5e:f1:
         ce:ef:64:6e:f5:d0:db:4b:7c:fb:f2:0b:45:1a:34:6f:34:4d:
         e8:bc:df:cf:d1:d6:3c:91:f1:d5:52:52:95:0f:0a:82:2a:ac:
         3a:1a:46:58:cf:72:b2:74:e8:c0:a9:e8:d4:92:3d:45:a6:b9:
         8e:ed:5a:b2:f8:db:14:cf:2c:87:cb:4d:db:a4:08:a7:02:6d:
         86:28:d3:3f:d1:ae:78:5c:71:24:6d:05:ad:4c:aa:f0:e6:b8:
         85:c5:e2:b9:4c:fd:7e:25:aa:a6:97:9e:80:7e:30:7e:cc:eb:
         73:7f:af:b1:86:41:1e:06:37:24:e0:b1:ac:e2:fd:55:8e:6a:
         34:df:45:0d:3c:f4:a3:5b:f9:0d:90:04:f5:c3:b1:2f:cd:24:
         f6:ba:93:67:ea:83:17:01:5d:b8:07:33:92:91:ac:e7:b5:cf:
         27:2c:d6:e9:4d:fd:98:05:45:fc:a0:b4:ec:06:64:3d:46:8a:
         f6:d3:5b:03:f8:88:3d:2d:aa:81:86:93:3e:a1:74:9a:1b:51:
         23:9a:62:83:6f:21:55:c6:47:5a:81:b3:eb:b9:92:cd:43:6d:
         5d:c4:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:12 2026 by rpki-client