Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          L3WywlBmWzDhICOCDsRrgbINHBcO6Ci525uA21hTbBY=
Subject key identifier:   15:CA:45:17:F5:01:EA:19:16:13:DA:7A:9F:80:98:15:09:50:DF:C7
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019D2996F5983C2A82CD1153A9435C20AEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          14C0
Signing time:             Thu 26 Mar 2026 10:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:52 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: WnEMAqdAFVNZGfGTyWUSFpY5L+1PfSM8kfoKfpajx6E=)
                          2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:f5:98:3c:2a:82:cd:11:53:a9:43:5c:20:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Mar 26 10:00:52 2026 GMT
            Not After : Mar 27 10:00:52 2026 GMT
        Subject: CN=15ca4517f501ea191613da7a9f8098150950dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:ab:ed:ac:69:c6:fc:30:d1:1f:eb:33:56:
                    53:26:70:14:27:60:8a:81:36:3b:c5:f0:c2:3f:6c:
                    00:d4:0e:85:fe:e5:6c:d3:c5:09:fa:fa:3a:a7:ed:
                    8e:b1:8e:b4:af:11:10:b5:0e:43:de:9c:01:e9:aa:
                    0a:3e:f0:5f:4d:78:7b:b9:04:76:18:d0:29:5f:59:
                    ff:0e:74:72:fc:c2:2f:68:f2:47:a5:6d:10:f6:ce:
                    e1:e1:ed:b7:7f:7b:c1:d1:4c:fc:84:b5:ac:48:ee:
                    5f:fc:10:f3:25:6f:5d:62:b2:e6:4b:99:9e:e6:fc:
                    f7:b4:db:35:f6:68:88:df:f5:d2:3d:e3:00:d2:1d:
                    09:fb:e6:e0:98:fd:1a:f6:37:9b:e2:a4:66:a4:36:
                    de:c4:8c:18:13:22:d6:db:08:03:a1:2d:71:a1:2b:
                    13:83:1f:36:95:26:15:45:ef:4b:38:ef:0d:cc:4d:
                    e1:b8:3f:c6:ac:d1:ad:74:cc:78:81:e6:7b:c3:92:
                    48:df:38:f4:68:fd:65:16:58:1d:69:01:f3:4b:dd:
                    ec:8d:49:8d:52:ab:6f:fe:ee:3a:a1:67:29:6c:61:
                    df:c9:5c:4f:85:c6:d2:63:06:0c:4b:65:91:2e:09:
                    00:68:a7:c0:c7:28:05:44:a1:c1:e4:dc:c6:f5:0a:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:45:17:F5:01:EA:19:16:13:DA:7A:9F:80:98:15:09:50:DF:C7
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a8:e7:2b:ba:be:21:95:db:08:36:ef:d9:40:13:80:95:1d:
         9e:cc:d7:c7:80:81:dc:17:a0:10:44:7a:6f:ec:0f:2e:93:31:
         7f:bc:e5:c1:31:fe:27:14:16:37:40:94:d5:c3:8e:65:c3:fe:
         f0:58:b4:f1:16:67:5c:1d:1b:51:21:29:b3:9a:40:23:ae:d1:
         4a:50:a3:ee:4c:9e:3f:b2:5f:32:3b:a1:3f:43:6e:cd:ec:dd:
         52:c7:18:54:42:de:35:a7:e9:28:d1:9f:20:98:3a:e6:e6:fb:
         95:3e:81:6a:e2:15:25:79:24:a0:28:58:92:69:32:8a:8d:f8:
         d2:4f:66:00:69:ef:75:8b:5b:a4:77:26:fd:e0:36:4e:9d:3d:
         a4:94:e6:7b:f0:48:d6:d2:b1:57:f4:dd:d6:bb:55:4e:40:dc:
         79:0c:25:53:8d:e1:74:4c:ab:fc:f4:36:bf:f9:da:21:da:32:
         ae:40:11:6c:fc:bc:5f:73:be:52:bd:44:b9:92:ab:ed:af:99:
         b9:84:2e:2f:be:e8:8b:0d:50:be:3e:19:07:ea:6d:cb:06:3c:
         fc:9d:77:97:46:d6:65:c7:5c:e1:b8:78:1d:e8:da:d9:7f:de:
         35:ed:e3:50:66:cb:32:6e:59:af:f9:d6:0d:a9:79:57:50:76:
         ef:7a:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:07 2026 by rpki-client