Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          4OOzhGq8foJYa3D88DVpazA4rdVJJz8JXJyq72iTohw=
Subject key identifier:   42:B6:B8:B4:F7:3A:4E:8E:F6:5E:76:D8:39:59:50:D6:1A:02:6C:A1
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019D25832C24C3F808974183D738C70434EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 15:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:46 +0000
Files and hashes:         1: 3JZHqPsWutux5J8tHXPSTpnIdjE.asa (hash: VJyftmErWIHuJi9O9+UcgaAO+btvOOaS+hqj+dP6C7o=)
                          2: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: 3noJMZMoyB8/e7lK0DQZjFSzUVcr8hfYSbZLjhWrY/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:2c:24:c3:f8:08:97:41:83:d7:38:c7:04:34:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Mar 25 15:00:46 2026 GMT
            Not After : Mar 26 15:00:46 2026 GMT
        Subject: CN=42b6b8b4f73a4e8ef65e76d8395950d61a026ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:23:1d:90:57:f4:bc:ac:4f:f4:a8:e3:7b:
                    af:1d:0d:77:ee:77:2d:22:64:0f:e0:9c:35:ff:22:
                    5d:42:61:43:28:2c:b7:9e:c7:b1:f7:35:1a:8c:f2:
                    5b:9c:03:c0:09:d2:d4:05:99:89:f4:ad:2c:64:c7:
                    c8:86:31:fa:8a:0d:af:7d:b2:89:2c:8f:75:b2:bf:
                    8a:1b:f9:fa:1b:7a:73:69:e8:25:fa:1e:01:b8:25:
                    79:fa:a6:2a:16:e6:e6:a4:2a:3a:7f:a4:db:60:ef:
                    ae:89:ad:f5:4c:f4:1f:2e:d2:e8:b6:f2:67:d9:97:
                    f9:1b:e5:0e:e9:47:76:e1:94:43:5a:2b:8f:9b:6e:
                    ff:0f:b1:21:82:1b:a7:7d:01:75:dd:96:4d:3c:7e:
                    c7:c7:a5:8b:58:1d:93:06:42:96:b8:4b:88:24:4f:
                    1a:88:8d:f2:07:c3:99:76:bb:d9:a7:68:5b:c8:ae:
                    20:d5:32:58:1e:45:dd:60:11:4c:5a:e6:33:c1:a4:
                    f3:17:87:62:4e:60:3b:28:c7:ec:10:82:d0:0e:fa:
                    99:98:6d:f5:75:23:64:f7:47:09:5f:8c:c1:09:42:
                    c4:ab:b1:47:9f:a8:a6:7a:07:9b:22:31:dd:f1:40:
                    f2:ce:ac:3b:9a:a5:d5:e5:ed:7a:1e:c8:45:09:46:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B6:B8:B4:F7:3A:4E:8E:F6:5E:76:D8:39:59:50:D6:1A:02:6C:A1
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:12:38:6b:1e:04:fd:15:92:a1:9a:62:85:02:2f:bb:1c:
         f6:1c:cb:50:f5:0e:c4:f7:85:a2:49:9c:11:45:9e:7b:a9:72:
         f9:2e:24:8c:4e:83:49:fe:ec:13:82:04:3e:45:62:d9:df:48:
         ad:10:8c:54:fe:4d:8e:50:d4:52:72:b6:33:ed:ed:d8:29:7a:
         b5:5c:65:b7:06:ec:9c:60:5b:8c:65:76:fb:4d:7c:f9:fd:4d:
         bc:f6:2e:6d:46:20:f8:b8:07:79:c8:ec:28:9b:bc:13:34:e1:
         c7:b1:dd:88:cc:d1:80:3e:2f:d1:a6:30:08:e4:e6:64:41:49:
         ed:92:5a:47:b4:55:96:d5:57:70:72:20:d1:6f:ca:86:e5:42:
         8f:00:2a:80:f6:73:82:6c:f7:a9:12:82:49:a4:9b:86:3f:a7:
         32:7c:b9:4d:08:f9:bf:a5:b5:d2:42:a0:41:7a:0c:34:79:46:
         9a:22:23:0b:30:19:c8:c4:6f:00:63:87:09:a3:6c:61:d4:67:
         c9:b2:7e:f8:53:be:d2:86:8b:3f:f5:d6:25:77:07:fb:3e:69:
         d1:61:13:5b:72:16:32:95:2b:cd:0a:1d:35:69:63:65:d7:20:
         89:17:35:3b:5d:be:04:2a:b6:7a:4d:94:53:b8:e3:e1:f8:e2:
         4c:53:f0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgywkw/gIl0GD1zjHBDTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjYwMzI1MTUwMDQ2WhcNMjYwMzI2MTUwMDQ2WjAzMTEwLwYDVQQD
Eyg0MmI2YjhiNGY3M2E0ZThlZjY1ZTc2ZDgzOTU5NTBkNjFhMDI2Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHMjHZBX9LysT/So43uvHQ137nct
ImQP4Jw1/yJdQmFDKCy3nsex9zUajPJbnAPACdLUBZmJ9K0sZMfIhjH6ig2vfbKJ
LI91sr+KG/n6G3pzaegl+h4BuCV5+qYqFubmpCo6f6TbYO+uia31TPQfLtLotvJn
2Zf5G+UO6Ud24ZRDWiuPm27/D7EhghunfQF13ZZNPH7Hx6WLWB2TBkKWuEuIJE8a
iI3yB8OZdrvZp2hbyK4g1TJYHkXdYBFMWuYzwaTzF4diTmA7KMfsEILQDvqZmG31
dSNk90cJX4zBCULEq7FHn6imegebIjHd8UDyzqw7mqXV5e16HshFCUYa6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK2uLT3Ok6O9l522DlZUNYaAmyhMB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIwSOGse
BP0VkqGaYoUCL7sc9hzLUPUOxPeFokmcEUWee6ly+S4kjE6DSf7sE4IEPkVi2d9I
rRCMVP5NjlDUUnK2M+3t2Cl6tVxltwbsnGBbjGV2+018+f1NvPYubUYg+LgHecjs
KJu8EzThx7HdiMzRgD4v0aYwCOTmZEFJ7ZJaR7RVltVXcHIg0W/KhuVCjwAqgPZz
gmz3qRKCSaSbhj+nMny5TQj5v6W10kKgQXoMNHlGmiIjCzAZyMRvAGOHCaNsYdRn
ybJ++FO+0oaLP/XWJXcH+z5p0WETW3IWMpUrzQodNWljZdcgiRc1O12+BCq2ek2U
U7jj4fjiTFPwnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:38 2026 by rpki-client