Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          7Jjv/yu4AQJZvwAQsFHgoVEC7aY3SX3DqNxxSMnNAN0=
Subject key identifier:   4A:C3:46:CB:0D:39:A5:C8:43:20:95:D3:C1:63:D3:5F:76:4D:30:D3
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       019D2703C42B81EC4EB504B5A02CAD72EF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          1736
Signing time:             Wed 25 Mar 2026 22:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:51 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: k8kMd76xjno/7l8Tva0Ti3iRCsbdlOQ/IsSaJAYGTeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c4:2b:81:ec:4e:b5:04:b5:a0:2c:ad:72:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Mar 25 22:00:51 2026 GMT
            Not After : Mar 26 22:00:51 2026 GMT
        Subject: CN=4ac346cb0d39a5c8432095d3c163d35f764d30d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:42:ed:8d:09:ed:ed:0c:0e:68:d2:0d:8f:
                    7a:ad:d8:8b:11:c4:03:50:7e:b9:fa:17:c1:ee:26:
                    06:8a:1e:ac:2c:58:23:20:83:f5:9c:5c:b6:34:1f:
                    65:dd:cf:67:c8:b6:08:35:21:31:39:f0:3c:ea:cf:
                    ee:09:00:84:04:1b:46:2e:e8:a0:17:91:b7:f3:1e:
                    40:f6:06:b5:8c:3c:09:e8:43:a5:fd:ee:c5:06:b8:
                    3f:da:d3:13:76:3d:64:f8:15:35:1f:75:de:33:93:
                    85:e8:b3:d3:4f:31:f1:ee:bd:09:94:0d:60:9b:b9:
                    22:52:3d:7a:37:06:88:48:a0:c4:65:26:07:ea:23:
                    65:5f:37:9e:bf:de:57:2c:a0:69:d0:d3:a5:43:e4:
                    0c:68:60:8e:22:90:b4:f8:c2:42:4b:24:6c:78:dc:
                    b3:11:21:e6:cb:f8:72:a7:7f:4f:1a:a3:f7:de:a5:
                    b1:43:06:2d:ff:cc:86:89:22:74:3f:46:ec:9e:79:
                    8b:bd:85:ad:e0:30:6a:49:3e:d9:c0:96:a8:c8:23:
                    37:99:21:2a:3f:28:62:e2:26:4d:5f:55:d3:75:57:
                    20:75:2a:e4:b7:05:6a:8b:01:10:fe:65:11:d3:46:
                    f1:3e:91:f7:cf:55:3e:ed:50:87:82:6f:c3:63:f5:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C3:46:CB:0D:39:A5:C8:43:20:95:D3:C1:63:D3:5F:76:4D:30:D3
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:3f:1b:12:e6:95:4a:24:80:1f:20:cb:8c:0e:21:92:2e:
         56:39:66:50:ea:f7:50:45:93:6b:71:11:aa:57:4a:89:d6:eb:
         26:34:e1:68:4f:23:c8:ef:41:27:f6:b2:83:35:6d:c2:30:35:
         3b:1d:cb:ad:b3:be:08:05:e3:ba:ed:b2:3f:85:c7:de:91:65:
         0f:8b:1c:a9:6b:76:4e:7f:b1:8f:20:9c:c0:cc:a4:f5:2e:21:
         74:bc:0e:16:de:9f:24:8e:fa:d8:c8:1f:39:1e:98:80:47:f9:
         a1:9f:c8:6b:24:74:dd:03:c5:bf:99:74:bc:af:b9:25:d1:5a:
         fd:5d:ad:dc:15:b6:9b:6a:f0:17:5b:cd:25:6c:b0:57:47:63:
         41:2f:40:f9:32:81:7e:07:e2:84:e6:1a:63:17:11:6e:23:2c:
         76:14:7a:02:a8:f4:96:6d:0d:5d:3b:c2:fb:31:f5:e2:ed:88:
         fe:8a:38:75:0f:07:c6:e9:00:42:d2:40:22:58:48:c6:23:b9:
         ae:f8:66:4f:7a:60:82:ad:77:ce:d9:73:b3:d1:b8:59:da:e2:
         c3:68:2a:2d:63:64:00:a6:04:75:90:a3:d3:bf:7f:c5:69:00:
         7a:1c:04:9f:ad:62:e0:dd:7f:bd:9b:20:24:38:01:3a:f1:be:
         92:f6:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:56 2026 by rpki-client