Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File:                     bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier:          JrGowy85WEtB+9RXecKjfRZ4RXW6GXCl4hAYbtL5BVY=
Subject key identifier:   2C:E0:E6:69:4A:54:98:E4:12:0B:91:39:16:B3:F7:59:6E:C1:FC:69
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer:       /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial:       019D2B4EB2ACD82D7B81069A3BDC6EF268B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number:          A0
Signing time:             Thu 26 Mar 2026 18:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:10 +0000
Files and hashes:         1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: rcmHKtRnLRSQr9eL3PcN9gIcCBxLhG9TsluSxCQr63g=)
                          2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:b2:ac:d8:2d:7b:81:06:9a:3b:dc:6e:f2:68:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
        Validity
            Not Before: Mar 26 18:01:10 2026 GMT
            Not After : Mar 27 18:01:10 2026 GMT
        Subject: CN=2ce0e6694a5498e4120b913916b3f7596ec1fc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:dd:ed:11:b8:1b:43:00:7c:56:04:22:eb:
                    37:18:1b:21:c0:4f:f9:2e:68:c8:e6:a1:16:37:f1:
                    d1:13:d7:d8:f3:b8:92:dd:fc:24:31:6d:8e:67:d5:
                    f0:29:91:ba:b5:8f:7f:7f:12:21:dd:db:6f:49:7e:
                    91:20:11:55:20:e9:22:fa:9e:92:10:fe:0d:36:c5:
                    b4:38:5b:54:43:60:d3:98:57:ab:72:c6:72:37:71:
                    49:f3:dc:87:93:a5:a9:19:6a:4b:58:eb:46:fb:b5:
                    e6:5f:51:63:93:4a:2f:33:a9:a0:31:a6:96:52:51:
                    ce:0a:ff:58:31:10:83:df:a6:c8:e9:fa:b9:d3:30:
                    e1:89:fd:43:a4:77:4a:17:91:37:40:51:a9:06:88:
                    14:3c:25:e0:64:b3:cc:c8:f6:6a:cc:d5:78:3d:d6:
                    2d:13:24:55:6d:0c:13:5c:95:a0:27:bb:d6:a0:57:
                    b8:5d:a1:d2:66:7e:84:96:e9:86:23:3a:1e:75:72:
                    1e:b4:93:e3:06:87:64:da:55:5d:ac:28:a4:41:a5:
                    4f:10:e7:16:df:6e:dc:a9:b5:b4:4f:f6:d6:7c:5b:
                    b5:9f:c4:40:58:60:da:b5:2d:ba:b1:91:70:e4:b9:
                    62:2d:cf:52:54:50:a9:5f:b3:07:e9:a3:93:4d:12:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:E6:69:4A:54:98:E4:12:0B:91:39:16:B3:F7:59:6E:C1:FC:69
            X509v3 Authority Key Identifier:
                keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:2e:44:17:dd:cc:33:24:31:75:92:6e:dc:5f:b1:18:50:
         20:8f:d4:bd:a8:94:6e:0c:8c:db:73:36:1f:57:6b:41:d9:24:
         89:17:24:00:f2:4c:80:ac:96:78:4a:a1:cc:46:17:d0:71:79:
         3c:cd:1f:34:af:38:f7:ab:f5:93:fe:b8:4f:d4:5f:c2:ed:b1:
         6d:1a:8c:f6:5c:e2:5d:09:c6:ee:2c:38:8d:7a:73:4c:db:8b:
         04:b4:5f:9a:fc:e9:44:c8:17:3d:aa:1c:b8:eb:de:90:f4:6d:
         33:00:d0:0f:8f:f8:f5:b2:86:e2:e1:62:4e:84:a8:14:20:e2:
         be:a6:27:4c:c7:cb:b8:5c:35:68:61:45:77:bc:e5:03:34:f2:
         1f:56:89:69:93:6a:91:09:75:91:57:b7:0f:cc:7d:ab:a3:16:
         78:15:dc:e3:b8:9d:5f:54:05:36:4e:8c:56:62:e3:29:96:a4:
         ef:d0:5a:56:bb:37:f8:f3:5f:ea:b3:6a:86:f1:32:a5:18:f9:
         34:c1:b7:3e:fc:d8:19:a9:35:cd:21:72:a0:97:96:d7:c0:94:
         92:37:6b:b1:51:fc:20:ea:ee:57:cb:2e:3b:6a:6d:76:92:b2:
         d9:99:b7:61:33:db:36:d2:45:31:76:57:d9:62:55:38:3d:6a:
         e4:43:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:00 2026 by rpki-client