Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File:                     bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier:          CVnKtBSzqU9ZkjEaiXLIYRWIHJlnz3k9/yTzCMKOf3Q=
Subject key identifier:   BC:17:AA:93:4F:62:95:26:FD:82:EA:F1:78:FC:53:2C:59:B3:42:EB
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer:       /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial:       019D28F321DAB220F8F172B6E27427A73C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 07:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:55 +0000
Files and hashes:         1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: RsJ5cE/g1nAsOWdpJPUHXeNZ5JGMeXr55q5gBoPMTzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:21:da:b2:20:f8:f1:72:b6:e2:74:27:a7:3c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
        Validity
            Not Before: Mar 26 07:01:55 2026 GMT
            Not After : Mar 27 07:01:55 2026 GMT
        Subject: CN=bc17aa934f629526fd82eaf178fc532c59b342eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:d4:cb:2a:a6:56:6e:25:21:40:47:14:df:
                    7e:4b:7c:da:d7:b2:ff:8d:d3:33:f0:c9:16:3f:0b:
                    3c:c7:ad:c5:07:8b:ff:b9:dd:b7:d7:9b:56:1c:3f:
                    29:ae:f3:32:41:c3:83:fc:e2:4d:e4:62:17:f5:c5:
                    08:1b:98:22:2d:1d:47:35:b9:d8:b0:23:a9:e2:33:
                    87:b0:a8:72:af:1d:30:f4:8c:b3:55:55:9e:10:6b:
                    a3:9c:af:88:f9:e9:a2:b9:f1:d4:1b:4c:12:a4:8f:
                    af:b3:b1:75:91:e4:cb:a0:c3:ec:12:d3:d2:5f:d2:
                    1a:2c:bc:5f:a9:e9:02:95:d4:5c:93:d0:26:ed:53:
                    01:e3:57:25:be:82:85:3e:92:31:9d:5e:04:7a:d9:
                    6e:82:56:9c:92:87:38:7e:76:2a:93:f8:d3:73:54:
                    95:05:7c:f8:5b:98:aa:f5:af:44:ee:cb:c0:25:f2:
                    ba:46:b6:56:26:80:5f:35:15:71:a6:40:b2:c1:f9:
                    f6:a0:1b:a5:10:cf:3e:9a:5e:59:e7:fd:cb:c8:e1:
                    16:e7:b2:6c:f6:6d:81:a6:2b:bf:dc:29:4f:30:fb:
                    17:af:1d:68:cb:53:16:f8:4d:a6:df:8f:02:fa:cf:
                    15:fb:b4:60:fe:b5:33:18:ba:d4:f8:c4:ff:cf:cc:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:AA:93:4F:62:95:26:FD:82:EA:F1:78:FC:53:2C:59:B3:42:EB
            X509v3 Authority Key Identifier:
                keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:90:f0:9a:ad:57:75:9c:f2:2b:9f:43:fd:e8:2f:13:22:f3:
         50:64:c3:da:f7:59:a9:16:aa:6c:59:df:d3:b3:8d:f4:01:09:
         37:26:ce:46:4c:bf:d0:2a:90:c5:b5:97:e4:06:dd:00:28:0f:
         38:39:20:46:66:9c:53:0b:31:f0:85:30:20:00:d2:d9:fb:f6:
         3c:42:5a:6e:ba:de:b9:73:36:2e:83:8f:ab:af:16:c5:15:a8:
         a0:7a:8d:60:47:95:99:c9:86:cd:cf:34:49:53:9b:17:bc:e1:
         61:df:8f:d8:b3:c4:4b:1c:62:67:0a:bc:dd:46:83:8a:99:94:
         2e:ce:38:a2:27:c5:51:75:d8:fa:cd:fa:a5:19:3f:dd:04:90:
         4b:82:1e:cd:cb:e0:6a:91:61:48:3c:5b:85:1d:ae:5f:13:ec:
         09:ca:f0:15:8d:00:8b:c5:07:95:a3:a4:f4:91:75:87:a2:93:
         37:06:c2:84:9d:53:51:31:cc:bc:53:c4:56:17:0f:0c:47:f5:
         5f:8b:56:e9:cf:9f:f3:9f:31:20:e7:93:14:7a:95:b8:d3:dd:
         5f:8d:ba:2d:49:57:15:82:14:93:b3:f4:31:8b:fb:9e:ba:81:
         55:35:38:7d:f3:a4:4c:b1:3e:dd:dd:46:75:00:90:09:08:2a:
         46:74:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:09 2026 by rpki-client