Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          FXGsHUCOJu+Fw7hWLLM6ELK3yqr8teNM3zpFFz4b/uE=
Subject key identifier:   A6:0C:93:4E:49:94:28:0D:80:6F:4B:84:09:11:E5:C4:B6:27:9E:68
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       019D25BA2E8094CE3589799CB678C8F5DB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 16:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:51 +0000
Files and hashes:         1: 03RMwUui42i5Kl2iOyIjy6uUllk.asa (hash: d0WtNqsS+gSSoX4EFhK8B1GHLgiLRboivnde42wiSxg=)
                          2: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
                          3: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: ZwSc4HbJABsEITRN1n93UuG7sWSxluz/3cCpaFLGjdw=)
                          4: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
                          5: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:2e:80:94:ce:35:89:79:9c:b6:78:c8:f5:db:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Mar 25 16:00:51 2026 GMT
            Not After : Mar 26 16:00:51 2026 GMT
        Subject: CN=a60c934e4994280d806f4b840911e5c4b6279e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:ec:a0:da:37:57:70:c8:4e:81:ff:f3:7f:
                    18:9a:0f:49:7d:3e:2a:f6:3a:05:2f:42:7a:bd:09:
                    9f:49:d2:1c:d4:7a:f3:94:1e:24:7f:ad:68:d1:30:
                    ff:80:aa:e3:2d:bc:ae:00:a5:f7:4b:8f:81:14:e8:
                    36:4b:e1:00:0d:59:24:bb:4f:69:8b:c3:c8:9c:68:
                    a8:0c:b6:0b:67:66:8e:0d:b1:3c:ff:fc:59:4a:c7:
                    14:22:3a:aa:ea:67:49:6b:00:9c:d1:0b:6a:9d:f1:
                    6a:f9:bd:0a:2c:8a:4a:32:1b:ed:f1:04:f1:e3:fb:
                    cc:8e:73:b6:ad:7e:27:79:5a:a2:4e:70:fb:82:5d:
                    0c:ea:bf:9c:c2:44:24:15:90:06:92:06:49:f7:b8:
                    81:b6:d0:a0:b3:08:0d:8e:e4:e0:29:6c:93:fa:0c:
                    c4:99:9a:d6:70:0e:b8:20:9b:96:8b:98:9e:fe:69:
                    71:fe:53:4a:0c:b5:a6:11:d8:fc:46:cd:8f:e8:39:
                    c7:14:57:ac:3d:4c:0f:7a:0d:69:ee:d6:b9:f2:29:
                    0b:b7:be:bd:22:26:71:3d:06:28:2f:b3:f3:44:b9:
                    ef:af:40:f6:33:cb:aa:a4:d4:df:71:23:ca:a0:1c:
                    87:2c:d2:12:0d:a8:ed:38:35:1b:6a:60:7a:5d:29:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0C:93:4E:49:94:28:0D:80:6F:4B:84:09:11:E5:C4:B6:27:9E:68
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:fa:08:51:0a:b0:17:14:24:fe:8b:ff:e7:82:21:1d:ce:
         7b:88:a9:1b:b0:96:a0:07:d6:b4:6e:ce:98:95:a2:9d:2b:76:
         67:21:da:c5:6e:28:2d:1a:b6:6f:02:26:40:e0:f2:d1:ef:c9:
         dc:04:38:b2:dc:ae:2c:b5:bf:b1:ef:d7:bd:df:56:90:3d:64:
         0a:42:79:44:5f:95:09:3c:15:8e:63:63:50:4f:62:fa:6c:e0:
         86:cf:35:ad:82:59:36:a4:cb:4c:d9:7a:4b:03:46:79:4b:75:
         28:5d:26:4f:c1:99:51:de:d8:94:b7:f7:38:2a:41:ba:a3:fb:
         e7:8c:5c:d2:87:27:c9:cc:11:23:03:1c:54:fa:a2:48:e8:58:
         58:60:79:81:0b:7b:83:a1:3a:1d:c8:78:de:42:4a:4c:d6:b2:
         64:43:00:02:7e:f3:38:37:76:0e:65:13:64:0f:7a:3a:c2:2a:
         b7:a6:99:ce:f9:60:e4:16:5b:92:51:a2:b1:fc:aa:ec:7a:a4:
         f8:71:8b:7b:f5:90:5b:ce:13:56:c8:e6:ea:1e:bf:33:ce:4e:
         5a:84:0d:d3:52:fc:c3:2b:f0:e6:df:91:00:e4:2c:07:55:c0:
         ca:04:b2:9a:2a:cd:7e:77:e8:38:52:e1:c1:0e:e8:da:74:73:
         33:72:6b:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lui6AlM41iXmctnjI9dsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4
MDZjOTEwHhcNMjYwMzI1MTYwMDUxWhcNMjYwMzI2MTYwMDUxWjAzMTEwLwYDVQQD
EyhhNjBjOTM0ZTQ5OTQyODBkODA2ZjRiODQwOTExZTVjNGI2Mjc5ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05vsoNo3V3DIToH/838Ymg9JfT4q
9joFL0J6vQmfSdIc1HrzlB4kf61o0TD/gKrjLbyuAKX3S4+BFOg2S+EADVkku09p
i8PInGioDLYLZ2aODbE8//xZSscUIjqq6mdJawCc0QtqnfFq+b0KLIpKMhvt8QTx
4/vMjnO2rX4neVqiTnD7gl0M6r+cwkQkFZAGkgZJ97iBttCgswgNjuTgKWyT+gzE
mZrWcA64IJuWi5ie/mlx/lNKDLWmEdj8Rs2P6DnHFFesPUwPeg1p7ta58ikLt769
IiZxPQYoL7PzRLnvr0D2M8uqpNTfcSPKoByHLNISDajtODUbamB6XSkgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYMk05JlCgNgG9LhAkR5cS2J55oMB8GA1UdIwQY
MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt
NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2
LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9n6CFEK
sBcUJP6L/+eCIR3Oe4ipG7CWoAfWtG7OmJWinSt2ZyHaxW4oLRq2bwImQODy0e/J
3AQ4styuLLW/se/Xvd9WkD1kCkJ5RF+VCTwVjmNjUE9i+mzghs81rYJZNqTLTNl6
SwNGeUt1KF0mT8GZUd7YlLf3OCpBuqP754xc0ocnycwRIwMcVPqiSOhYWGB5gQt7
g6E6Hch43kJKTNayZEMAAn7zODd2DmUTZA96OsIqt6aZzvlg5BZbklGisfyq7Hqk
+HGLe/WQW84TVsjm6h6/M85OWoQN01L8wyvw5t+RAOQsB1XAygSymirNfnfoOFLh
wQ7o2nRzM3JrEA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:54 2026 by rpki-client