Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
File:                     C6vWgsGo_FA3rb9oFDrnf9APOKs.mft (raw, json)
Hash identifier:          sYJXkdFUqJr2wJyMGEy1LeKUPplsJwr3A5t9B51JJ6M=
Subject key identifier:   B4:C5:D5:CA:B2:10:3C:33:ED:AF:BE:5C:15:A1:B0:2B:1D:65:05:FE
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Certificate issuer:       /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial:       019D284D43DEE779CD77DF4A8245FC6FD697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
Manifest number:          0976
Signing time:             Thu 26 Mar 2026 04:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:45 +0000
Files and hashes:         1: BDUt_AqrF9Z57L3BVIPrb_s9Dsk.roa (hash: 3VlvIEXyrEUz5ocJavFRWJmYihMipyaSbfyHuX90514=)
                          2: BgUi9CSiMfO5dgzkDm9-J262d4Q.roa (hash: zVeqPqGn2wObT7AcmmdBWyGCymnATliHMrGmgsWQkqM=)
                          3: C6vWgsGo_FA3rb9oFDrnf9APOKs.crl (hash: fb67zpWHd2jBsjIiNYaYs7PL0ZjG3IYp8U/uG/v+IdY=)
                          4: EBGrvlwkmcuKwYjdV9vGCqP65Ew.roa (hash: W6egZJFWczdKr4Ta3sytyMq3K3nev0YUBA12bbUGYh4=)
                          5: UAiwwOtSHKg_Uwg-V-1NlpmU_dU.roa (hash: zELOTAhMC2HJGH8Stw4zDI7zr2am/BzXFs2CoFd4+xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:43:de:e7:79:cd:77:df:4a:82:45:fc:6f:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
        Validity
            Not Before: Mar 26 04:00:45 2026 GMT
            Not After : Mar 27 04:00:45 2026 GMT
        Subject: CN=b4c5d5cab2103c33edafbe5c15a1b02b1d6505fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:27:c7:3b:18:5d:aa:ed:d6:97:ec:01:aa:
                    83:bf:72:21:38:18:b2:4c:d4:90:22:55:a9:a8:cd:
                    1b:7d:49:81:c3:38:a4:ba:ff:f8:a3:1b:b1:12:b1:
                    04:42:cf:d8:a1:da:fd:95:cb:43:1e:83:29:22:03:
                    31:83:eb:b8:bd:7a:8e:01:74:50:d4:c5:6e:58:68:
                    70:c2:80:9c:fa:f3:77:73:28:79:a8:55:43:4f:11:
                    c5:ab:38:31:d0:4d:5a:bc:cc:70:b7:4e:e0:e4:0c:
                    19:5f:39:89:f5:71:f6:75:ca:69:1a:16:ab:be:64:
                    94:e8:e5:96:54:16:35:31:68:81:b3:6a:41:57:d6:
                    69:38:6e:e3:f6:6c:84:33:7c:50:fd:9f:57:ca:b4:
                    fd:98:1a:c8:3b:ea:f8:65:1b:75:f6:40:66:bf:9d:
                    5b:22:ea:45:35:2f:0c:7b:0f:76:a4:9e:bc:07:1a:
                    ef:98:1f:86:e3:72:52:04:52:71:94:bc:b4:60:fc:
                    2c:a3:34:2f:68:91:5d:36:92:f7:aa:dd:16:70:e6:
                    0b:5b:2d:e9:1d:60:ea:d6:66:e3:9e:48:f4:64:48:
                    fd:92:18:87:ea:46:9c:6c:bd:ea:d0:a0:7c:8d:0c:
                    d5:fa:33:13:07:89:86:b1:1c:cd:95:b0:fd:79:4e:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:D5:CA:B2:10:3C:33:ED:AF:BE:5C:15:A1:B0:2B:1D:65:05:FE
            X509v3 Authority Key Identifier:
                keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:86:d1:d7:53:38:94:f3:af:b7:ef:de:4d:a0:5f:d9:8a:
         0e:34:bf:b2:30:45:4e:6b:7e:56:e9:1e:aa:60:e5:29:05:20:
         94:68:cd:b7:03:10:eb:41:33:fc:7a:16:a7:0f:2f:3a:74:2e:
         7f:cd:f9:f3:b0:c6:fe:be:e1:78:46:c3:97:1e:25:e9:20:55:
         2e:d0:5f:bf:08:50:e2:b1:6a:0e:3e:cf:82:74:b8:af:86:cc:
         9d:f3:ea:0c:82:11:47:bb:e4:c2:d7:f1:80:14:63:c0:07:10:
         96:5e:bc:b4:3e:95:e9:90:8c:2d:e6:35:be:f7:90:f7:4b:a1:
         dc:54:e9:b5:44:d3:41:fd:67:e6:d4:82:49:05:eb:f7:58:04:
         b8:1e:f7:ac:cc:2e:c2:95:49:7b:51:89:20:91:4f:05:f0:0a:
         d9:b8:a6:00:8b:0b:36:fe:c1:d3:ac:4b:fb:e5:09:89:c2:53:
         1a:6d:65:ca:3b:70:2c:d4:3e:cc:a6:56:11:4d:7d:90:57:18:
         bd:2a:bd:21:46:f0:ce:c5:41:48:f5:bd:aa:95:47:aa:c0:e2:
         b1:a4:b9:d3:9c:a3:90:c2:e2:a7:89:93:6f:44:3f:fb:74:84:
         11:59:b3:7b:d9:bd:33:37:a1:6a:3a:c3:e1:78:e8:e9:eb:57:
         79:ec:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:35 2026 by rpki-client