Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          84UjEfixgYSBT8pXU4QxobqN75pT4r5KzxXyUvd+3jI=
Subject key identifier:   85:40:41:8A:9B:08:02:AA:FF:79:C2:E5:62:BD:D7:5F:9F:07:F0:14
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019D262875856FA84571F0DA742524ACBB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 18:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:18 +0000
Files and hashes:         1: D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa (hash: tjw3dTvmZmkhSGo/nTvjDlfnKPPhFeeD7BJ95LJU948=)
                          2: UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa (hash: c42wwDGvS0oacLlYOE62P909TTqbzLeL8jdw4PO42z0=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 6IJwrdbFwqAvKEcDtbGp7SNWsESTiXy00rXT/KBv8Ds=)
                          4: kQ09oRNTXVR1xe3b-WsWF5CPy-g.roa (hash: mSM7RpELOqwcQmqGi1wB2iUWIWwoZbiElym83yRxbP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:75:85:6f:a8:45:71:f0:da:74:25:24:ac:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Mar 25 18:01:18 2026 GMT
            Not After : Mar 26 18:01:18 2026 GMT
        Subject: CN=8540418a9b0802aaff79c2e562bdd75f9f07f014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:bf:5e:db:41:1f:52:6e:1f:d2:33:c6:ed:
                    de:42:a0:5e:d3:d8:78:2e:b2:d8:ce:13:4d:0c:56:
                    fe:3b:69:e4:97:e7:b5:78:87:8c:74:c9:d5:f1:08:
                    2a:c7:c7:2f:02:a0:2b:f8:91:80:a9:38:59:80:e7:
                    3c:b7:78:86:b6:63:45:5a:55:29:b1:f6:04:14:db:
                    4b:ad:f6:7e:35:78:2f:20:4f:f3:b1:cb:61:95:37:
                    f8:6e:68:3f:87:da:ca:63:0b:bb:cd:8e:89:57:78:
                    b4:74:72:46:88:6f:dc:68:3d:69:6e:10:b5:52:69:
                    fe:4c:14:38:e9:7f:3f:67:38:4c:3d:1a:20:c8:3c:
                    00:fd:ba:d8:fa:3a:89:82:73:b2:83:a5:6e:c8:8a:
                    70:2e:6c:97:07:43:2f:c3:a1:45:e2:2d:f5:25:a5:
                    2a:16:82:5a:7c:10:06:4b:fd:fe:f2:b9:14:90:ff:
                    76:e2:7b:aa:39:0c:8b:24:70:3b:3d:13:60:7f:05:
                    a5:99:f7:f5:19:37:02:45:c1:14:18:b4:8f:91:73:
                    a2:61:b3:18:77:61:71:c6:04:7d:09:04:25:13:ee:
                    e2:13:5f:fb:ca:24:30:88:bd:cd:81:4b:bc:ef:b7:
                    37:ff:80:86:97:b0:18:61:da:b8:a5:60:f6:51:83:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:41:8A:9B:08:02:AA:FF:79:C2:E5:62:BD:D7:5F:9F:07:F0:14
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:c2:b0:44:86:d5:fc:bb:88:15:07:05:ce:7e:e1:0f:4f:
         f5:8e:4c:19:57:e7:06:4a:40:75:5b:96:89:1f:3f:c3:32:92:
         2d:05:31:26:78:0d:bd:4c:e8:04:f1:ef:ba:59:93:2d:76:56:
         15:3e:92:89:af:e9:6e:68:32:b5:98:04:16:58:f9:ab:bc:51:
         3d:9d:44:ae:51:de:89:04:b1:fd:24:42:05:6a:a6:84:87:4d:
         d8:c9:23:87:81:3f:c0:88:a1:9c:00:5d:da:2a:23:51:bf:d6:
         00:7f:e6:82:f2:12:4a:1a:86:4f:70:93:fe:2b:28:ed:61:b0:
         a4:5a:9b:3d:ad:6b:4a:14:c2:be:8f:2b:84:6d:81:13:1d:6e:
         12:30:ec:ee:bd:5d:9e:19:86:27:33:e5:29:44:4f:29:19:20:
         41:28:a4:f6:ba:60:c9:f2:79:79:16:d1:80:b0:b7:25:fc:04:
         de:9d:67:6a:3a:07:2d:8f:83:60:d0:b6:82:9b:47:09:bc:da:
         c3:9b:c1:52:f6:f9:f6:64:7f:26:0a:57:5e:eb:1d:06:ac:f7:
         34:14:fe:f1:0a:ce:7c:3d:55:a6:33:9f:0e:e4:46:8c:03:54:
         f3:4f:44:18:ee:db:86:86:4b:9d:79:e9:cb:5f:32:3c:5e:7d:
         e6:e2:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:05 2026 by rpki-client