Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File:                     BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier:          WUpGUXS4eljbHkuNVqs46McFcMlxtQU8p33JsGK0Xow=
Subject key identifier:   89:2E:5F:74:38:39:A5:EE:1A:65:AE:6F:9B:C6:A0:32:D4:92:B5:4E
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer:       /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial:       019D26CCD3D2483ED8793331B133A05C2FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number:          0792
Signing time:             Wed 25 Mar 2026 21:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:50 +0000
Files and hashes:         1: BP7qr8M9Z23XLTlfDphHEhcjcxU.roa (hash: 85o8Pl3rmdVnUnMaY3hy2eaNf9gxwwkYG9yKslohFoM=)
                          2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: hAYiADAPd8GoJLQqLvqW9P5fO95eetbTIYB8yuXYUSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:d3:d2:48:3e:d8:79:33:31:b1:33:a0:5c:2f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
        Validity
            Not Before: Mar 25 21:00:50 2026 GMT
            Not After : Mar 26 21:00:50 2026 GMT
        Subject: CN=892e5f743839a5ee1a65ae6f9bc6a032d492b54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a4:e7:29:5c:7a:df:4c:10:ef:4c:ef:9c:7d:
                    74:89:b6:d7:6c:7d:31:7b:7e:94:1f:92:c7:b3:f4:
                    80:ff:95:46:58:86:0b:c9:82:7e:85:a8:91:f1:79:
                    d9:77:e8:22:d3:cc:4b:e9:80:dd:3d:66:6c:cd:32:
                    ce:f8:a9:68:bd:8d:ed:b2:ba:0a:42:9a:3e:0f:fe:
                    0e:23:68:97:a4:5f:16:fe:bd:1a:ad:11:9c:82:83:
                    bf:af:d7:ac:7d:4e:52:8c:05:ab:7f:fc:4d:7e:0f:
                    93:c6:9d:e3:63:79:c5:8a:7a:f9:b7:58:bc:98:ae:
                    40:55:a8:9c:37:5b:a6:97:26:66:5d:2c:88:15:0c:
                    2c:70:9b:55:b1:5f:d6:c6:36:74:20:59:12:4e:b5:
                    c9:61:b2:9f:00:05:9c:62:98:5a:58:5c:d4:b7:da:
                    8c:32:c2:4d:62:37:ce:e8:1b:f5:f6:ef:56:da:dd:
                    dc:e4:ea:10:f2:ed:41:12:0f:4e:e4:d0:8a:b2:0b:
                    2a:6d:ce:91:0e:c7:2b:96:e2:6a:83:1f:76:65:a3:
                    08:63:bf:eb:48:cc:a3:41:0d:0d:0d:e5:32:e6:d7:
                    1d:69:bf:b3:83:01:2a:b2:2b:3e:b4:19:aa:f5:40:
                    74:85:58:53:44:a1:e9:18:b5:d4:18:d5:34:a9:b2:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:5F:74:38:39:A5:EE:1A:65:AE:6F:9B:C6:A0:32:D4:92:B5:4E
            X509v3 Authority Key Identifier:
                keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:87:0a:ad:ac:ab:78:7e:77:69:1e:03:fb:4b:94:dc:bc:99:
         44:11:c5:f6:f2:15:56:58:3d:ef:59:73:d0:f8:5b:50:72:06:
         ad:03:35:0a:bf:a1:b0:29:a8:40:2e:dd:10:b9:00:6c:4b:b3:
         a8:7e:4b:07:2c:ba:25:aa:6c:f9:bc:9e:e3:ff:fc:28:46:61:
         21:02:fa:63:4d:bd:1d:22:19:a6:c5:58:b9:93:a9:b7:82:c6:
         ce:e5:d4:a2:bf:75:2e:0a:71:69:be:e2:68:22:c3:2b:c4:bf:
         99:d3:c5:34:85:60:9a:80:1c:43:4a:42:8e:6f:65:fd:f5:1e:
         72:ac:cb:c4:e7:09:9a:5b:88:a0:26:cf:58:3b:3a:f8:fe:9c:
         12:48:25:c8:e2:ba:99:1d:8b:53:eb:62:a6:d5:6d:95:43:e6:
         69:52:ac:90:2b:4d:e1:56:44:1a:25:9f:df:3f:59:eb:4f:a8:
         61:04:89:77:d5:96:98:d9:20:ad:e5:94:e4:b6:1a:7a:e6:61:
         9e:04:89:ae:9f:b5:b1:33:8d:f5:79:2d:36:6e:9e:20:54:bc:
         29:43:62:e3:09:bf:0d:d1:d9:36:f9:96:72:05:f3:d1:82:e0:
         c9:46:27:52:b8:39:a1:27:6d:39:73:b5:2e:ba:7b:33:7e:b0:
         94:c7:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:41 2026 by rpki-client