Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File:                     bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier:          jvWUH6K+esbu17zyvobaSL6qQBpRaGDjhYNr8Aiq7Yk=
Subject key identifier:   06:05:30:8A:CC:51:BF:76:0D:A2:2C:3B:47:F2:C0:11:0B:30:84:AC
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer:       /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial:       019D26963260B076B298BA15B95343BAA87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 20:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:10 +0000
Files and hashes:         1: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: mUldTwQvCn3um3HZQa1Vhbm5yWHAHppg/hGKioPjv80=)
                          2: zMOvlAxBWsTKC4R-FDCxda38PNI.roa (hash: RZ8FhnDSP7KxAKJv1pV2jn4fr5uOUX+zk+OqfCpNUKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:32:60:b0:76:b2:98:ba:15:b9:53:43:ba:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
        Validity
            Not Before: Mar 25 20:01:10 2026 GMT
            Not After : Mar 26 20:01:10 2026 GMT
        Subject: CN=0605308acc51bf760da22c3b47f2c0110b3084ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:87:71:f4:82:32:30:a4:3f:c6:be:7d:b7:
                    41:74:5f:b7:f3:7e:e7:b4:5c:e8:bf:d3:f5:5f:fe:
                    9e:61:11:40:d0:4f:af:eb:8b:83:9a:85:e9:01:ae:
                    e8:2d:91:94:4f:86:5f:92:9e:fd:ab:94:68:eb:85:
                    ab:3a:b5:5c:2f:c1:1a:20:5c:32:d5:ea:4c:b9:2f:
                    0f:5a:a5:16:4f:fa:9f:91:27:c2:fa:2e:49:57:34:
                    15:4c:32:2c:6a:3e:40:91:57:75:4a:24:60:aa:9a:
                    2c:75:23:16:4f:9b:59:24:79:09:40:21:33:00:60:
                    84:63:e4:81:76:bb:c5:64:f4:4f:09:48:06:63:be:
                    ee:55:01:40:cb:90:0b:09:ec:41:ea:7c:27:e6:5f:
                    14:f2:95:43:ec:59:c5:2e:1c:ff:08:6b:f6:93:5a:
                    09:cd:90:15:bd:73:5f:e2:ca:1e:e9:17:78:f8:6e:
                    0b:59:43:39:2f:f5:19:c3:11:92:74:ee:5e:c3:9b:
                    98:96:b7:53:94:95:e1:fd:36:25:29:61:1d:7d:c7:
                    ea:89:be:e1:dc:ab:de:05:f2:eb:d9:3a:34:12:e0:
                    de:c4:c7:33:29:eb:61:29:3d:59:5b:7d:42:99:c7:
                    69:49:28:af:88:0f:d2:49:04:9c:20:c4:fb:b2:99:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:30:8A:CC:51:BF:76:0D:A2:2C:3B:47:F2:C0:11:0B:30:84:AC
            X509v3 Authority Key Identifier:
                keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:aa:e8:ae:f8:a0:4e:d4:52:5a:e0:2e:15:5b:1f:f5:0e:08:
         26:37:48:2c:11:2a:4f:ec:a3:b4:89:a7:af:12:69:8c:a9:a9:
         c0:ac:9c:5a:ec:71:52:95:cf:41:4f:79:46:72:bf:ea:c1:13:
         b5:bc:62:45:83:b4:59:1c:ab:4d:c1:1c:bc:86:2e:45:42:1d:
         b3:86:fa:2a:a2:c4:90:76:48:6b:5a:10:a3:69:97:14:80:c2:
         98:7c:0f:6b:ed:6f:2f:cf:6f:bf:b9:f9:18:99:55:9e:85:4d:
         7b:e7:fb:1a:9e:b4:72:ed:3e:b5:d6:ba:cf:b2:fb:a0:1f:6f:
         42:23:b7:83:ef:c7:74:5a:08:44:cb:8b:4a:d3:e7:2c:34:15:
         ad:f7:11:eb:5e:c8:f8:32:9e:35:f3:41:7f:d5:8f:af:78:ab:
         6c:7e:2b:f7:07:b1:f4:99:9e:cf:d4:6d:36:48:f5:b2:0d:af:
         26:ce:f9:9f:1d:fd:9d:70:15:82:4d:03:f9:d0:4d:97:48:c8:
         c1:21:10:e9:ec:c2:5c:4d:a5:d3:16:8a:95:1e:f9:67:37:d7:
         ea:b2:ca:f9:de:29:40:f5:4c:c7:2d:3a:79:24:da:9f:2f:e5:
         79:14:c1:c7:7b:d8:4d:2b:76:51:7e:b4:32:cc:e3:18:01:09:
         a3:7e:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:50 2026 by rpki-client