Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          kV7n9l3k45jqIYrlqux906dGsUH96B/FdlK04n1A94U=
Subject key identifier:   5D:77:A3:1C:93:FD:D6:56:0D:A7:51:B5:51:53:9A:CD:D2:BB:27:4D
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       019D2A3BCEF1F1583D0ACCC5D72CD047DAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 13:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:55 +0000
Files and hashes:         1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
                          2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: vm9Zyc0ooBbME227O6jiAKJBI8oOQDqsjM8mKvUNQgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:ce:f1:f1:58:3d:0a:cc:c5:d7:2c:d0:47:da:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Mar 26 13:00:55 2026 GMT
            Not After : Mar 27 13:00:55 2026 GMT
        Subject: CN=5d77a31c93fdd6560da751b551539acdd2bb274d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:1e:86:0a:aa:9f:28:7d:0c:12:9c:7f:44:
                    80:ef:2c:53:40:0c:40:16:87:cf:ba:f3:c8:f0:18:
                    92:49:19:07:61:52:e6:2e:fb:8e:7a:4d:92:fc:13:
                    a5:b1:8b:84:ed:2d:f2:d6:b3:42:34:e8:b1:ff:e3:
                    c4:78:77:55:96:b9:e3:43:05:54:59:ec:b7:e3:24:
                    54:12:66:02:96:06:3c:6d:81:a2:00:27:e0:06:fc:
                    5e:41:28:70:5b:4e:d0:76:f0:11:d8:4b:c7:f8:8a:
                    51:f8:0c:74:bc:1a:bb:8b:fe:24:1a:e1:07:db:17:
                    13:db:28:d1:fe:0a:70:0c:c0:17:89:03:6c:04:72:
                    95:80:27:5a:a2:6d:b7:81:41:6c:e2:58:4b:c9:f1:
                    d6:45:a3:86:e6:0b:57:8b:32:d9:70:50:cc:40:56:
                    ad:50:dc:aa:1c:9c:d1:11:b0:bd:9d:81:09:f8:b2:
                    0d:23:e2:23:af:4b:3c:b6:3d:f6:f4:bc:42:98:15:
                    45:13:58:e6:06:7e:b5:30:86:1d:ba:d7:5e:5c:70:
                    01:30:8b:a2:d7:65:fd:d4:ac:f4:64:78:37:34:22:
                    02:94:ef:35:af:a7:66:d0:78:6d:9b:f3:eb:85:90:
                    d6:e1:14:d6:0b:56:43:a1:40:90:0f:f8:0a:7e:10:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:A3:1C:93:FD:D6:56:0D:A7:51:B5:51:53:9A:CD:D2:BB:27:4D
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:17:63:4b:3e:45:99:7a:20:8d:33:db:bf:0c:70:75:ec:2b:
         8e:1f:e4:db:a7:8a:9d:15:fe:2b:89:72:95:b4:f3:3a:0c:46:
         6c:a6:c1:d2:1e:8b:55:ea:b5:99:7a:d9:dd:44:72:b5:c0:e6:
         65:8a:0d:77:fa:0f:26:12:16:28:0f:bb:d0:72:2a:dd:65:1f:
         cf:92:3b:10:c0:5a:b4:e3:88:7e:d0:3b:14:58:69:1a:b5:62:
         fc:1b:e2:28:60:df:82:5d:ec:57:cb:ad:99:02:2b:a8:a2:31:
         3a:ae:69:a0:ec:42:34:6e:11:37:9b:77:52:69:a2:26:85:3d:
         85:d1:7e:a1:bc:fe:9a:c3:66:10:88:e7:68:9d:a2:b7:3c:66:
         3f:4a:82:3d:de:22:57:5b:d7:96:be:23:13:56:a3:57:20:3f:
         aa:68:9a:f2:79:8a:d7:b1:cb:95:70:b7:77:f8:ef:37:e7:69:
         31:46:44:4a:b2:bb:10:e6:62:76:4d:95:21:4e:e6:36:8f:f4:
         21:9d:c8:c1:38:49:9d:d1:6a:28:69:0d:1d:ff:70:94:e1:52:
         ee:4a:bb:68:8f:84:a8:58:51:33:49:9d:c8:66:9e:7f:b8:0e:
         95:b2:83:b2:68:ab:2e:89:ed:0e:1b:44:20:5d:15:95:a0:89:
         95:b7:78:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO87x8Vg9CszF1yzQR9rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1
YjU1YTMwHhcNMjYwMzI2MTMwMDU1WhcNMjYwMzI3MTMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZDc3YTMxYzkzZmRkNjU2MGRhNzUxYjU1MTUzOWFjZGQyYmIyNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjwehgqqnyh9DBKcf0SA7yxTQAxA
FofPuvPI8BiSSRkHYVLmLvuOek2S/BOlsYuE7S3y1rNCNOix/+PEeHdVlrnjQwVU
Wey34yRUEmYClgY8bYGiACfgBvxeQShwW07QdvAR2EvH+IpR+Ax0vBq7i/4kGuEH
2xcT2yjR/gpwDMAXiQNsBHKVgCdaom23gUFs4lhLyfHWRaOG5gtXizLZcFDMQFat
UNyqHJzREbC9nYEJ+LINI+Ijr0s8tj329LxCmBVFE1jmBn61MIYdutdeXHABMIui
12X91Kz0ZHg3NCIClO81r6dm0Hhtm/PrhZDW4RTWC1ZDoUCQD/gKfhB2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF13oxyT/dZWDadRtVFTms3SuydNMB8GA1UdIwQY
MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt
N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj
LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghdjSz5F
mXogjTPbvwxwdewrjh/k26eKnRX+K4lylbTzOgxGbKbB0h6LVeq1mXrZ3URytcDm
ZYoNd/oPJhIWKA+70HIq3WUfz5I7EMBatOOIftA7FFhpGrVi/BviKGDfgl3sV8ut
mQIrqKIxOq5poOxCNG4RN5t3UmmiJoU9hdF+obz+msNmEIjnaJ2itzxmP0qCPd4i
V1vXlr4jE1ajVyA/qmia8nmK17HLlXC3d/jvN+dpMUZESrK7EOZidk2VIU7mNo/0
IZ3IwThJndFqKGkNHf9wlOFS7kq7aI+EqFhRM0mdyGaef7gOlbKDsmirLontDhtE
IF0VlaCJlbd4gA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:21 2026 by rpki-client