Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File:                     bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier:          GDPMY0OfDzkVCgV26cwKeiHdJz8H+LW7UnFTO2AiQfQ=
Subject key identifier:   F6:92:EB:14:4D:C0:97:8C:2B:2D:66:B8:09:AB:CB:83:6F:F1:42:D5
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer:       /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial:       019D28F319299A1C8B73735B0F30657E40CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number:          1816
Signing time:             Thu 26 Mar 2026 07:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:53 +0000
Files and hashes:         1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
                          2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: DsgwQTnbvKDkP0uoL1Vh/t+1fBLSyc79f+0I9L+K+nA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:19:29:9a:1c:8b:73:73:5b:0f:30:65:7e:40:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
        Validity
            Not Before: Mar 26 07:01:53 2026 GMT
            Not After : Mar 27 07:01:53 2026 GMT
        Subject: CN=f692eb144dc0978c2b2d66b809abcb836ff142d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:d8:66:9a:f2:06:aa:b7:26:e3:ec:e7:78:
                    0d:ec:3f:90:45:92:a4:fd:62:4f:14:18:54:15:63:
                    bb:8e:c4:fc:c6:57:b1:6e:25:8f:1d:19:56:c6:92:
                    74:56:be:d2:3f:5b:aa:03:b1:8d:42:e4:b0:39:66:
                    4b:e6:70:db:d8:52:fb:2d:b9:1f:ee:9f:22:a6:25:
                    b3:59:02:a6:17:68:84:17:95:38:21:7c:e1:f1:68:
                    cc:3d:61:04:51:8f:89:f6:d5:d6:32:5a:ad:97:8d:
                    14:f7:58:97:a4:7c:08:87:e9:bc:92:44:2b:06:12:
                    78:a6:5b:06:74:69:09:6d:3e:76:fc:77:a2:33:b0:
                    a6:d6:d5:cf:88:64:76:20:dd:1d:6f:3f:9c:90:4c:
                    1a:a1:10:23:a3:91:53:d8:8c:0a:96:3c:56:4d:36:
                    16:48:91:dd:f9:cf:9f:d0:30:00:6f:8e:c2:c1:2b:
                    23:a5:de:f0:5b:07:26:5c:5b:f7:42:d7:ca:6a:07:
                    d1:3d:62:29:52:e0:0f:f8:4d:38:3a:f3:9c:75:c6:
                    fd:01:0a:4a:00:de:4c:4a:12:19:bc:c6:f1:7d:89:
                    10:4b:2c:ef:3a:22:19:99:c8:3d:d5:2a:42:3b:a5:
                    04:ff:a4:04:c9:73:37:21:49:47:27:96:52:2d:f1:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:EB:14:4D:C0:97:8C:2B:2D:66:B8:09:AB:CB:83:6F:F1:42:D5
            X509v3 Authority Key Identifier:
                keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:20:7e:47:8d:54:2f:ed:68:2e:25:c6:11:ec:39:8b:bd:
         41:3e:19:16:c7:28:b2:43:cf:56:8e:6a:b5:87:0e:9f:b7:c2:
         f2:71:c7:15:85:dd:c4:42:5e:7a:c1:12:cc:da:43:08:11:52:
         d9:04:d6:b7:b5:e1:63:25:2f:fa:68:bf:dd:49:cf:c4:a5:08:
         e2:84:d6:cf:eb:f6:a0:52:48:17:5f:8c:9c:a6:2b:53:eb:6d:
         b6:e6:e5:55:06:0e:3e:3d:70:5b:3e:ac:f2:56:1b:55:80:e5:
         3e:fc:18:ed:d8:4f:81:78:34:2d:f8:0b:7d:91:a1:45:8c:d0:
         7c:b5:54:86:81:3f:7b:88:7f:00:d9:04:67:76:aa:db:88:b2:
         09:bf:97:47:fd:f3:df:ea:9b:cd:49:a0:d2:a7:74:1b:ff:ce:
         79:78:ab:f8:9f:87:be:cb:09:f5:09:72:e0:e2:3d:d6:4d:34:
         ce:c9:9a:ae:37:ba:c4:64:77:76:63:2c:73:25:7f:3d:86:fa:
         7b:aa:a1:50:ec:33:82:c9:0a:7e:58:d2:1c:4c:be:f9:d9:86:
         1f:aa:21:85:81:60:55:61:af:74:b3:d0:85:f3:64:41:8e:24:
         4d:19:46:12:89:85:16:82:66:dc:1f:5f:e9:5f:5d:cd:f3:1f:
         9d:29:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:08 2026 by rpki-client