Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          JncEOsgCUTQ6+0mpG53JGA7zQnZNEgFzXgrYF5QuaZo=
Subject key identifier:   01:DE:BE:89:C8:93:A2:EA:52:2D:9F:60:BF:ED:36:EB:7C:CA:93:FF
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       019D269651B19AD163ED91BF0F0875484DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 20:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:18 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: ILquO+mQYKip70FrcKNwpnTxxMpLVIYEWiFXfz/nWHs=)
                          2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:51:b1:9a:d1:63:ed:91:bf:0f:08:75:48:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: Mar 25 20:01:18 2026 GMT
            Not After : Mar 26 20:01:18 2026 GMT
        Subject: CN=01debe89c893a2ea522d9f60bfed36eb7cca93ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:dd:aa:9d:89:7e:0a:d6:eb:53:16:c3:d4:
                    2e:54:e8:ee:3c:72:04:e1:13:25:ea:e3:ea:95:c0:
                    0a:f5:c9:f1:8a:ac:07:e4:10:c3:63:07:22:a5:7f:
                    10:5f:52:49:31:28:af:5e:cf:dc:db:d7:02:61:5c:
                    a1:b7:33:f9:42:6e:99:ed:41:fa:73:44:df:62:8d:
                    3a:c6:18:57:bb:1b:b3:2e:ff:02:f2:98:44:4a:fa:
                    c8:73:73:e3:17:c5:8b:77:56:21:eb:aa:3f:16:9d:
                    76:ba:4a:ff:4e:b4:dc:fa:a2:3b:c0:4a:68:81:da:
                    22:1d:cf:50:1b:fc:14:0a:59:3b:11:15:62:dd:27:
                    2f:d8:7e:71:91:ca:68:36:af:6f:cd:00:40:a5:e9:
                    ee:dc:2f:e9:76:a1:cd:a4:a9:67:e7:81:40:71:ee:
                    d2:d5:c7:da:d4:bf:9d:21:40:00:19:4b:91:ed:c5:
                    30:ee:5a:3b:6f:87:e1:6b:f6:f8:aa:a0:09:ed:4e:
                    a1:eb:28:56:8e:e3:b0:61:c4:05:f6:7a:05:d2:ac:
                    bd:54:eb:a8:a6:4a:82:b4:dc:dc:69:7e:97:5c:82:
                    a6:14:7a:3f:30:dd:2c:9d:8f:36:ba:fd:43:7e:49:
                    93:d1:0c:ff:2a:c7:95:44:90:d5:eb:83:bd:5e:32:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:BE:89:C8:93:A2:EA:52:2D:9F:60:BF:ED:36:EB:7C:CA:93:FF
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:0d:df:ed:32:c4:d7:99:e1:ed:42:dd:fe:8d:09:af:ec:
         60:cf:2e:f7:06:76:a3:56:9d:99:4d:43:2f:5e:64:ee:08:a5:
         c2:a3:cb:27:f1:ee:a5:a0:2c:fa:83:11:58:ad:42:ee:1c:96:
         b7:f3:6a:c5:2f:1a:49:ef:ad:f3:f6:a2:ae:7e:97:2f:61:97:
         b3:74:24:1e:db:84:41:aa:1a:12:72:73:19:5b:f5:2c:92:4f:
         d4:07:4e:05:f5:56:7e:a7:28:06:ee:42:ed:10:42:ff:51:55:
         90:69:59:d1:16:1f:d6:78:b8:98:74:e2:1b:90:97:bb:a0:51:
         74:6f:78:5d:65:7f:d1:1e:ab:aa:cc:83:11:2f:19:ee:0d:5e:
         f5:6a:a5:84:2a:cf:f4:c2:fa:0f:3c:b2:37:3a:a9:a5:b6:04:
         52:f3:8c:05:2e:dd:af:e7:df:55:ba:b7:5f:fb:1a:20:c1:fa:
         7e:07:90:cc:47:71:2a:71:20:ed:35:76:7c:72:48:7c:4f:6d:
         8c:58:fa:13:46:b9:fb:67:09:a6:98:fd:75:f7:68:6a:e7:b7:
         0a:a4:68:80:9c:98:7b:74:25:0d:43:96:3a:70:cb:0d:d2:dc:
         79:f8:99:31:8e:cd:9d:5b:00:24:49:39:37:a3:0b:f8:b9:43:
         e9:2c:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:10 2026 by rpki-client