Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          mY/MgrhEOCP8Xscvf2he2f8fllujwGNHa4eH1B4J0RA=
Subject key identifier:   BC:B9:A8:05:27:A1:08:7B:F8:49:2B:84:CB:44:F4:46:44:56:CF:2C
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       019D273B47264E789A64C546F693F660043D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          020E
Signing time:             Wed 25 Mar 2026 23:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:29 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: gRgyFsauR0T37DKghjGs5LxkirKdmXfU2HLHioqnfWs=)
                          2: vSLbgxeH91r7M2JRpNUpQwdC5-I.roa (hash: AdNOFRCrmnc/Q9ZTTzxNg6TKfbh1MeWTSjQqXPic1XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:47:26:4e:78:9a:64:c5:46:f6:93:f6:60:04:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Mar 25 23:01:29 2026 GMT
            Not After : Mar 26 23:01:29 2026 GMT
        Subject: CN=bcb9a80527a1087bf8492b84cb44f4464456cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:35:fb:54:17:1a:24:c0:90:2b:44:25:d8:
                    f8:61:5e:78:b1:98:43:04:90:ed:2a:bd:15:dc:e2:
                    81:0f:90:19:8c:4b:3a:4d:82:bd:02:f5:37:7f:bf:
                    93:f9:39:1f:02:cf:4c:a9:b0:18:af:6c:30:b0:b3:
                    24:fb:8a:e7:36:8f:1e:44:dd:0f:81:36:f5:ad:62:
                    f6:a6:cc:51:6c:cf:ec:30:7a:b7:a6:2f:57:7f:c4:
                    a7:cc:68:d0:da:fe:80:30:39:81:73:bf:13:de:df:
                    10:bd:12:e2:da:cd:fd:3a:d1:af:99:fd:f2:9d:30:
                    e4:3e:63:af:3e:82:4a:89:0b:f3:ba:12:43:8f:e4:
                    0b:28:a8:84:ed:37:d1:6e:5c:7d:4d:62:af:d0:f3:
                    d9:0e:fd:c9:5c:94:e7:aa:cd:96:50:87:3e:2b:1a:
                    41:84:0d:60:e8:8b:76:e0:fb:1b:79:8b:b1:71:5f:
                    83:ee:66:df:8f:21:26:5d:98:b6:71:74:a9:c8:b8:
                    0a:12:66:eb:25:4c:f5:98:63:cd:6a:8b:da:ad:57:
                    4a:a7:4b:31:cb:15:b1:6c:de:c4:6e:bc:b4:26:db:
                    f7:37:af:dc:8f:71:7b:9d:50:60:5c:b0:ce:c2:58:
                    77:d4:15:c8:2b:02:a4:6e:e9:a5:50:08:3d:90:ad:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B9:A8:05:27:A1:08:7B:F8:49:2B:84:CB:44:F4:46:44:56:CF:2C
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:7d:17:ed:e4:7d:87:1c:f0:d2:25:75:fc:98:63:3b:40:
         b4:05:47:33:b0:2b:03:b8:7b:02:a1:f5:52:5a:1c:0b:cb:72:
         8a:b7:fc:43:30:a8:78:6d:2d:cc:a3:05:11:ce:78:d9:f4:cd:
         f9:b1:72:cb:75:1c:9f:90:7b:95:4d:0b:5f:3c:4a:da:bd:82:
         95:4e:b0:48:13:46:e5:03:fb:94:0a:3f:10:26:2d:68:db:d1:
         38:6e:bb:1a:ec:90:b8:44:47:c2:29:5e:5b:48:0d:69:c5:3d:
         ec:e2:a0:1f:12:f5:2e:04:64:55:df:1d:4b:1a:9a:72:fb:84:
         d0:24:a9:db:21:87:94:14:5a:e3:2d:6f:91:8a:14:09:4e:0d:
         c6:b2:cc:79:be:eb:cd:a5:c5:e7:c8:8f:70:cc:ec:b9:dc:32:
         5c:5f:d4:e0:f6:2c:46:c0:1e:ea:68:4a:bc:27:93:f2:d9:35:
         b9:f1:ec:65:bd:30:01:ba:64:52:8c:2b:f5:d1:af:84:fa:83:
         96:7a:3d:c6:03:dc:c8:7b:f5:3a:dd:da:26:d1:d3:d9:03:06:
         1f:42:07:31:53:1c:4a:24:77:98:13:b5:34:c4:8e:50:19:a1:
         35:3c:84:c0:97:cc:50:7c:98:18:04:be:4a:57:05:bc:77:10:
         cb:a0:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:35 2026 by rpki-client