Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          zIdjTbwkEJ7dGorpquUDsVVw7e1mhhOhuzOgYgHThqo=
Subject key identifier:   92:34:9C:7D:8D:F6:40:3C:76:F8:89:8B:17:4D:8D:84:B7:37:CB:1A
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       019D2AA982D3F03F77E6D17211AF7A4D7907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          0CD7
Signing time:             Thu 26 Mar 2026 15:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:45 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: 4NWNrYB8J2LmWM/8bZ8tFVeRiqqJkbkV1aXrOy51N5o=)
                          2: amJeDHvWP-ETK0yoiLHExz0KUe8.roa (hash: IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:82:d3:f0:3f:77:e6:d1:72:11:af:7a:4d:79:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Mar 26 15:00:45 2026 GMT
            Not After : Mar 27 15:00:45 2026 GMT
        Subject: CN=92349c7d8df6403c76f8898b174d8d84b737cb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:68:41:f3:1e:76:0f:17:9b:01:ea:d4:28:
                    02:53:83:bf:87:63:6e:43:02:4e:40:8e:2c:b6:fa:
                    96:23:1d:cf:8a:b7:1b:9f:ad:70:af:ce:0c:8c:19:
                    9d:80:f1:ac:67:98:20:f4:17:97:98:fc:f9:09:cb:
                    c6:49:3a:d1:ef:0c:a0:d7:4c:fe:54:a6:f3:01:1e:
                    91:01:96:ab:8b:de:fd:fa:93:65:02:54:26:ed:51:
                    a2:a2:64:0b:95:30:17:b8:0c:9f:4f:2e:13:85:8b:
                    b0:87:d8:d7:c4:ac:32:fd:e9:84:eb:13:67:a4:38:
                    a2:f3:d2:ce:2e:8b:d3:7f:c7:78:e0:01:21:6f:e9:
                    e1:df:5b:30:e6:ed:ba:5c:8f:16:db:2a:ef:0e:47:
                    48:d3:9c:b8:09:48:ea:07:70:e6:c4:bb:39:b8:89:
                    20:67:f8:4b:fc:dc:b0:55:90:41:b7:c6:56:23:e8:
                    55:49:a3:ed:57:3e:75:c1:10:4a:3c:61:57:f8:2d:
                    94:cd:89:be:1f:c1:4a:96:32:e7:a0:20:6e:3b:79:
                    58:8a:86:cb:ab:74:28:c4:e2:dc:eb:7d:ab:be:2f:
                    1f:29:29:58:a2:e7:b2:22:0e:79:05:e9:7f:bf:19:
                    9f:64:b8:3f:7c:4d:d0:91:4a:e2:c5:28:71:88:d9:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:9C:7D:8D:F6:40:3C:76:F8:89:8B:17:4D:8D:84:B7:37:CB:1A
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:4f:fc:2e:22:be:d9:a7:60:fe:68:8b:19:ac:c4:d3:e6:
         96:42:f1:3f:76:d8:25:da:28:64:e1:55:98:cb:11:7f:0e:ae:
         47:f8:74:34:8c:0e:a4:e1:d3:0a:80:c0:f8:da:c7:1f:5f:ab:
         9c:62:a5:ce:d9:61:21:dc:4f:bc:fb:73:00:73:a8:6a:bf:70:
         e8:ad:19:a7:14:e3:3f:e5:b9:58:01:11:21:5f:22:ff:d5:ea:
         09:17:f6:07:0e:95:9a:00:46:5c:a9:db:38:af:a8:6e:83:29:
         7d:c2:b7:b8:0f:69:68:4d:8a:bb:af:3d:5f:1f:41:9a:a2:14:
         82:65:9f:64:a6:16:f8:bf:85:c6:bd:5d:e5:59:34:fc:4d:4c:
         fb:08:75:2e:31:c1:40:23:25:3d:83:87:29:17:fc:f2:62:31:
         f2:63:68:82:ce:85:77:47:1c:7c:b5:d0:4a:56:fe:15:85:15:
         c2:42:c9:da:04:8b:84:6d:03:27:5d:3a:2d:e7:45:e8:92:a1:
         d1:ec:93:e0:a2:8e:47:cc:4c:9a:fd:92:eb:42:32:95:df:bc:
         6d:1a:38:b1:64:76:e9:db:b6:56:e9:be:44:62:b2:fe:d4:78:
         58:b1:4a:f9:41:25:ea:7f:b1:d9:31:58:84:53:b5:ec:35:97:
         37:35:4f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqYLT8D935tFyEa96TXkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDA4OWE3MTQ4YjI2MWEwNTllNjY2ZmViYTU5ZjkyYTI2
OGMxNmMwHhcNMjYwMzI2MTUwMDQ1WhcNMjYwMzI3MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg5MjM0OWM3ZDhkZjY0MDNjNzZmODg5OGIxNzRkOGQ4NGI3MzdjYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBoQfMedg8XmwHq1CgCU4O/h2Nu
QwJOQI4stvqWIx3Pircbn61wr84MjBmdgPGsZ5gg9BeXmPz5CcvGSTrR7wyg10z+
VKbzAR6RAZari979+pNlAlQm7VGiomQLlTAXuAyfTy4ThYuwh9jXxKwy/emE6xNn
pDii89LOLovTf8d44AEhb+nh31sw5u26XI8W2yrvDkdI05y4CUjqB3DmxLs5uIkg
Z/hL/NywVZBBt8ZWI+hVSaPtVz51wRBKPGFX+C2UzYm+H8FKljLnoCBuO3lYiobL
q3QoxOLc632rvi8fKSlYoueyIg55Bel/vxmfZLg/fE3QkUrixShxiNl0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI0nH2N9kA8dviJixdNjYS3N8saMB8GA1UdIwQY
MBaAFAXQiacUiyYaBZ5mb+uln5KiaMFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEt
MWVhYTNmMjJkZjUyLzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMTAzODgtNmNmNC00NTVkLWI1NTEtMWVhYTNmMjJkZjUy
LzEvQmRDSnB4U0xKaG9Gbm1adjY2V2ZrcUpvd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgNP/C4i
vtmnYP5oixmsxNPmlkLxP3bYJdooZOFVmMsRfw6uR/h0NIwOpOHTCoDA+NrHH1+r
nGKlztlhIdxPvPtzAHOoar9w6K0ZpxTjP+W5WAERIV8i/9XqCRf2Bw6VmgBGXKnb
OK+oboMpfcK3uA9paE2Ku689Xx9BmqIUgmWfZKYW+L+Fxr1d5Vk0/E1M+wh1LjHB
QCMlPYOHKRf88mIx8mNogs6Fd0ccfLXQSlb+FYUVwkLJ2gSLhG0DJ106LedF6JKh
0eyT4KKOR8xMmv2S60Iyld+8bRo4sWR26du2Vum+RGKy/tR4WLFK+UEl6n+x2TFY
hFO17DWXNzVPcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:42 2026 by rpki-client