Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          J7uqa1N3dQGc4ZiAB99EtpF05GOwFsoNt8zfCW+Ilcg=
Subject key identifier:   9C:0C:71:3A:D3:5E:B6:83:4C:0D:FD:19:9B:51:3D:A7:E2:6D:94:A3
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       019D27DF5315D58E1B2E6C3DD9BAD189234C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          158C
Signing time:             Thu 26 Mar 2026 02:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:40 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: 4/q2drCMem4ORQ1IRGtSkuGE0Pj486JlDIDVp3fvmEI=)
                          2: pMi_2iDmt-lT6pAwyjWuQDGa_O0.roa (hash: ZC+lvMGM7K+2aRAYs06T+FrjbLH1je+sqYWK1p3NT+U=)
                          3: xMlLO5Rf6Jgjr2cHkSM6Ud-wAXQ.roa (hash: RK/wvilLdjBC0dYnwxHCUjXesiJZYcmAP7/mpKcFofs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:53:15:d5:8e:1b:2e:6c:3d:d9:ba:d1:89:23:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Mar 26 02:00:40 2026 GMT
            Not After : Mar 27 02:00:40 2026 GMT
        Subject: CN=9c0c713ad35eb6834c0dfd199b513da7e26d94a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:46:42:45:f7:58:ac:97:58:7a:74:6a:c3:
                    45:70:60:79:31:14:8e:03:f6:87:8a:15:52:6b:55:
                    c1:16:3c:c4:80:69:88:6a:32:29:02:7d:6c:40:50:
                    a7:ff:2b:2b:c9:fd:09:32:de:03:6e:17:ab:25:24:
                    e1:74:66:d9:4a:4b:23:77:ec:0b:63:b5:6d:45:c6:
                    96:64:84:c7:3e:d0:ce:a9:d2:1f:ff:dc:47:97:0e:
                    d0:52:85:dd:9b:de:6d:10:9c:cd:3f:e5:25:69:95:
                    f4:88:40:0f:68:e8:62:97:e2:d2:12:72:62:88:a0:
                    1b:f1:3a:17:f8:0b:3c:9e:b4:89:09:51:3d:eb:5d:
                    f0:f1:d6:ce:4b:e3:38:0c:f3:c7:13:8c:16:d8:14:
                    8a:b2:41:07:8d:fa:2c:4a:7c:cf:c2:46:b6:ad:f1:
                    43:f3:a1:a7:3d:a1:4a:96:11:60:1b:5a:2c:2f:83:
                    c9:46:7f:e8:35:f0:26:5b:0b:be:c1:13:8f:02:09:
                    5e:e4:d4:ec:db:c8:94:1a:ce:d0:bf:49:f5:fc:c9:
                    a7:11:0e:5f:a2:5f:45:d5:0c:37:cf:1b:21:f7:4f:
                    57:ba:85:71:9e:03:b6:69:08:1b:cf:6d:a8:48:b7:
                    e6:fc:ab:c5:85:57:1e:a6:25:ad:db:53:87:85:f2:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:71:3A:D3:5E:B6:83:4C:0D:FD:19:9B:51:3D:A7:E2:6D:94:A3
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:03:79:a7:3c:af:ea:bc:90:39:52:b3:84:c9:f4:47:e7:
         74:7e:a6:20:f6:78:8e:20:2b:73:6c:79:24:6a:8e:c3:19:65:
         20:06:20:b1:16:ed:ce:49:b1:16:ea:f3:44:7e:37:b3:7f:6d:
         e3:0d:cb:e5:99:ea:ed:40:31:c7:21:7c:d9:49:48:72:64:9a:
         74:81:46:69:f3:94:81:ad:a3:88:4c:61:9b:62:44:6e:6f:66:
         77:67:3d:a6:c3:f8:30:39:82:e8:00:3e:e2:0d:63:44:e3:9e:
         5f:77:1b:f7:e2:55:10:4d:d5:c7:a6:26:84:88:a0:e8:27:1c:
         fd:64:21:ae:b7:5a:0a:08:f5:7c:c2:43:48:c5:5e:c8:7e:76:
         99:f0:b7:33:56:58:93:db:09:d7:2e:e9:ff:c4:87:75:b2:45:
         2c:17:95:7d:61:7c:73:13:c4:68:a2:eb:7c:f7:f8:95:fd:b4:
         17:14:2f:80:bc:5b:5e:2e:96:da:19:6c:9e:31:d9:6d:bf:a0:
         36:48:69:b8:0b:b0:4e:83:50:d2:e5:d5:7f:21:17:c3:5b:31:
         2f:98:36:1d:b7:16:fc:1d:2c:4f:a2:9c:c5:d4:27:43:94:f8:
         15:c7:21:3e:40:96:87:86:18:ef:14:c7:10:d3:4d:3a:d0:52:
         92:51:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:42 2026 by rpki-client