Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          xdnfqROKIo5aiSggFBPpRBNAFO0ZcyJTPcMzptaF8Zw=
Subject key identifier:   80:05:2C:18:BA:55:93:7C:A6:A3:C9:45:1B:52:7D:E4:FF:C7:1C:AA
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019D28BB5E77115E68F130037CE26D7CBB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 06:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:00 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: ZtIkKoce5Brh4xEPuw46jA887FA5gjxBOrAGMnsQqBk=)
                          3: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          4: dToYhaIhncI2M7qUF8E5Z-MUY1M.roa (hash: i3+aszgM830eFR0OQiZivcXRqqvq84jEAI5IvwlypUE=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:5e:77:11:5e:68:f1:30:03:7c:e2:6d:7c:bb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Mar 26 06:01:00 2026 GMT
            Not After : Mar 27 06:01:00 2026 GMT
        Subject: CN=80052c18ba55937ca6a3c9451b527de4ffc71caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:db:e0:95:a3:a5:87:f4:e1:40:75:39:38:
                    bf:eb:38:1a:04:1d:9e:3f:24:c6:9e:9d:aa:e3:80:
                    28:2c:c6:82:38:1c:62:b0:7a:b6:9a:fc:63:b7:ae:
                    be:34:e0:ff:cd:e2:0e:c6:2b:e6:20:88:cb:3c:d5:
                    2c:4f:78:d9:b5:26:3b:df:40:d7:ee:77:36:8d:3f:
                    2b:da:1b:08:cf:3f:90:ca:cb:da:72:1c:6d:a8:a5:
                    10:fd:c4:5b:d9:8a:68:1a:c4:f4:6b:d7:79:57:db:
                    83:2d:5d:0a:e8:9c:1b:e0:f7:50:f3:08:7d:dd:43:
                    43:61:2b:bb:1c:b5:9b:d4:e3:84:af:7d:98:ad:94:
                    f2:80:c1:74:4a:a3:42:f2:4b:e6:7a:65:7b:91:b1:
                    e2:05:03:e7:38:f8:0a:a5:af:b6:6e:2a:b4:b3:7c:
                    4b:aa:f9:74:d7:34:da:28:38:44:87:05:70:89:2a:
                    40:8e:6e:98:b3:4b:c7:3b:eb:8b:5c:6a:47:fb:84:
                    32:7b:82:20:ca:3a:af:4a:66:78:96:bf:c6:a9:04:
                    9b:ed:3b:67:d5:27:00:c3:ba:20:e9:c5:6f:aa:2f:
                    ed:f4:f6:37:44:9e:97:7e:39:2e:06:86:32:73:03:
                    ea:0a:57:25:fd:6d:c4:81:02:d8:76:fe:be:26:63:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:2C:18:BA:55:93:7C:A6:A3:C9:45:1B:52:7D:E4:FF:C7:1C:AA
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:1c:54:b2:00:99:20:4e:6a:8b:8d:8c:6c:cb:4f:07:44:
         b0:f7:d2:a8:1e:0c:80:e9:bd:a1:f6:b1:12:0a:c3:00:17:52:
         82:2e:be:18:38:e4:d1:0d:d1:d8:05:f6:a2:92:dc:e1:d5:b8:
         15:af:d2:a0:c0:fe:9a:28:fa:05:dd:c4:1f:1c:0d:41:30:7d:
         27:f2:1e:19:16:d7:1e:07:61:9c:87:ef:78:59:df:96:52:2a:
         c0:5b:1b:73:9a:ca:0a:cc:4a:6e:51:9f:41:83:2c:76:65:58:
         6f:87:cb:3c:79:f6:8f:2b:0c:c3:7c:16:5b:a0:4c:91:e2:0d:
         d4:e3:f0:08:8f:c8:29:e2:94:f3:a0:bb:1a:f5:25:2a:ce:65:
         9a:f2:2b:b4:39:21:78:f0:20:24:db:8e:c4:d4:27:ff:03:0b:
         d5:36:df:a2:bc:6b:86:6f:64:8b:6d:99:3d:6d:d3:40:84:61:
         8b:a7:13:64:19:0d:2f:f9:93:1b:8d:ed:59:6f:6d:5f:a6:fb:
         54:6c:01:e4:bb:7c:8b:13:7f:f2:dc:51:02:fb:fd:21:48:cf:
         eb:8d:7a:d1:d7:32:05:52:74:e3:04:7b:40:58:31:ab:76:67:
         30:a2:33:64:94:5c:91:08:09:cc:6f:d5:20:00:9b:49:84:1f:
         f6:0c:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:49 2026 by rpki-client