Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
File:                     BtCToXdsCFomSP94tM4f5BfFY10.mft (raw, json)
Hash identifier:          mGHd3v9gf5tqcMM735YyPe0/ejEkW4ZGY7G36mkcpeE=
Subject key identifier:   8B:15:EF:A0:66:4A:3B:9D:58:52:D5:D0:15:E9:12:C9:BA:FE:BF:A1
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Certificate issuer:       /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial:       019D29615F46B9D8BBE0217601BC18833DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
Manifest number:          1283
Signing time:             Thu 26 Mar 2026 09:02:20 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:20 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:20 +0000
Files and hashes:         1: BtCToXdsCFomSP94tM4f5BfFY10.crl (hash: 7R26Akf7TYLq61DnINXHG/9L+xoE7bOi6m6je1g+cH8=)
                          2: WYjLSaMGcDVPun0w5caUa6SyhAw.roa (hash: anCxFP8+izWbbd8RY7CAFyWBE9Qml7hPuy8Dd9kuR+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:5f:46:b9:d8:bb:e0:21:76:01:bc:18:83:3d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
        Validity
            Not Before: Mar 26 09:02:20 2026 GMT
            Not After : Mar 27 09:02:20 2026 GMT
        Subject: CN=8b15efa0664a3b9d5852d5d015e912c9bafebfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:36:3f:97:5c:78:01:9b:e4:6e:f3:60:5a:a5:
                    90:d8:ee:49:6e:82:2f:1a:70:d2:27:a3:05:33:ac:
                    dc:de:2f:91:3b:52:0e:ba:48:e6:35:88:34:ef:89:
                    a8:f5:f1:c0:2c:13:41:ee:b9:1a:76:5e:cd:98:ac:
                    d1:34:44:15:8b:b9:2a:fe:67:6a:10:cb:60:08:69:
                    c0:a5:e9:28:e7:16:fc:c7:88:e6:cb:5b:5f:5e:61:
                    26:16:ad:4b:9b:95:65:47:2f:b6:b4:29:68:1d:14:
                    e7:ad:d9:b3:37:b6:39:7f:56:c5:31:77:fd:a9:8a:
                    55:42:c9:ba:35:75:d9:cb:ea:bf:4d:a5:f8:bc:86:
                    a6:e5:b7:7f:b5:49:a5:4d:d5:90:57:e2:81:50:11:
                    24:a0:13:41:d1:b7:a4:e5:8b:f6:ac:74:4f:8e:47:
                    af:c9:b1:85:d1:90:7a:63:37:db:20:55:8c:4c:92:
                    fe:1e:2e:06:e8:40:14:81:88:e2:56:b0:9c:07:55:
                    05:43:42:41:87:c9:9d:04:3f:84:01:0f:4d:c0:c8:
                    c7:a0:d8:80:84:af:0d:ed:73:9b:88:92:d2:4b:d2:
                    26:88:5c:02:1f:40:2f:da:23:ab:c8:a9:1e:aa:35:
                    90:41:5c:db:18:43:62:c7:c9:44:e0:a6:ea:fa:8f:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:EF:A0:66:4A:3B:9D:58:52:D5:D0:15:E9:12:C9:BA:FE:BF:A1
            X509v3 Authority Key Identifier:
                keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:6d:3e:c7:00:f1:7b:49:60:b2:a3:77:94:35:47:87:a7:
         19:39:81:de:bc:ec:2a:e0:0a:be:7d:1b:14:b1:a4:e7:80:eb:
         04:df:25:af:5b:c4:72:24:7e:1a:04:94:6f:71:42:1d:f4:7e:
         cf:4c:f3:97:7c:7f:17:63:79:bd:b2:67:2a:36:64:68:14:99:
         21:73:34:e9:1f:7d:3b:27:3b:c8:d2:c9:61:a6:e4:5f:e7:69:
         d0:ac:22:18:17:75:0d:df:e1:f3:42:90:d4:32:d8:bf:35:f5:
         6f:69:11:9f:e2:3e:08:3b:93:6e:94:3e:ad:b2:67:47:87:9b:
         bd:52:cd:16:65:fd:f2:ce:da:23:2f:b3:2b:33:f0:ce:94:90:
         e1:62:26:82:29:6f:13:7a:90:ea:24:86:02:3c:94:d0:22:a6:
         d2:a4:68:de:f4:08:38:cf:ff:ad:69:9e:cb:f3:45:04:5b:16:
         fa:16:60:bb:37:16:44:58:af:b2:47:83:50:75:6f:ae:f0:88:
         34:73:df:0c:66:b2:85:e3:fe:85:1d:b1:67:43:df:46:76:9a:
         ad:fc:7e:03:1d:27:20:da:0a:af:43:f8:af:a3:e5:0e:dc:76:
         c2:ad:06:be:c1:55:fe:3b:1b:79:ba:9f:87:18:e7:35:48:a1:
         a3:b3:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:25 2026 by rpki-client