Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          pyOqrALywT8E4o4wCVx/+yadNUsnLqiR0B6rAYcoO6Q=
Subject key identifier:   82:F2:B8:29:38:F6:78:C4:3D:A9:76:34:D7:B6:C7:CE:60:9A:3D:5C
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       019D27A88A7B9E17FC0244B342B3836A9593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 01:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:50 +0000
Files and hashes:         1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
                          2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: opF5HZ+hQPXT5Mq1HEecVkK3lsaiQn6imWS/Er0bHwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:8a:7b:9e:17:fc:02:44:b3:42:b3:83:6a:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: Mar 26 01:00:50 2026 GMT
            Not After : Mar 27 01:00:50 2026 GMT
        Subject: CN=82f2b82938f678c43da97634d7b6c7ce609a3d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:4b:dd:58:44:62:90:fb:18:d4:c7:09:8b:
                    75:41:b1:1b:21:2a:05:b3:7d:9c:ab:68:c2:e8:be:
                    ef:4a:c2:b1:b9:c2:74:0e:8d:d4:9a:ed:35:14:1a:
                    38:e5:b7:f2:cc:d0:e5:68:0b:7b:c3:d0:09:54:37:
                    3e:b4:27:5b:9a:66:1b:4a:33:7f:95:f7:8a:46:95:
                    58:ea:4c:b8:ef:e0:33:84:d7:2a:f0:3c:28:86:81:
                    08:a3:e9:e5:91:96:48:b2:c0:a3:12:96:f7:27:63:
                    07:b7:e5:42:c7:33:43:5e:49:2e:1d:65:ac:27:ce:
                    25:69:f0:4e:fd:3e:e1:45:8d:df:36:e5:d1:34:9a:
                    e3:67:eb:c3:7b:31:92:a7:92:23:48:96:fb:58:31:
                    e8:3f:a2:af:b7:fb:9e:32:e4:2b:19:46:b4:e6:10:
                    90:96:b4:71:d2:2d:78:95:95:12:25:b8:37:b5:92:
                    c9:81:98:3e:4d:0e:6d:d9:b1:94:bc:9a:37:29:27:
                    1b:89:4e:26:28:cb:fa:d0:ab:4e:01:9b:82:de:eb:
                    c3:6d:8e:81:2f:89:04:75:3a:42:0a:23:c3:5b:ee:
                    e9:ec:f3:5e:42:7e:e9:62:88:37:11:2e:10:03:8f:
                    3f:2d:0b:55:2b:ee:57:10:12:40:7b:c0:2d:6d:50:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:B8:29:38:F6:78:C4:3D:A9:76:34:D7:B6:C7:CE:60:9A:3D:5C
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:39:f7:b8:62:da:31:37:c2:6d:29:76:69:a6:cb:f5:60:de:
         06:a1:09:fd:ee:9e:b3:89:aa:d8:e6:be:2a:2c:67:59:b6:68:
         c6:3a:27:fa:7f:3d:9d:2f:a7:cb:c1:7e:4b:11:04:8e:1e:b6:
         c2:ca:cb:21:03:a5:d0:c8:32:03:b4:8f:1d:67:1f:29:ee:66:
         5c:d1:78:98:9c:d7:6d:ab:65:97:99:e0:46:7f:7c:4c:a8:30:
         ba:a8:5b:87:0e:6e:f8:17:cd:85:07:1e:0e:ce:db:11:39:0c:
         86:ce:8c:17:97:be:e1:9f:ec:81:2b:23:c5:06:63:ce:0c:11:
         5d:a5:ec:9a:c3:e9:64:67:9a:96:ef:c2:b1:4e:fb:2a:a6:e2:
         34:b8:6d:52:18:94:b6:54:a2:db:ce:7c:dc:53:c6:18:24:aa:
         4f:3a:51:3b:c5:35:27:69:87:a3:59:37:10:f6:49:11:bc:ca:
         a4:bc:bc:cd:9b:e5:a6:17:b3:19:93:68:3b:79:2e:97:e6:09:
         98:cf:76:d7:cc:06:ec:dc:68:e5:f7:38:a4:1a:58:77:9c:c8:
         0b:92:79:28:37:db:17:8b:76:03:0c:f8:13:43:da:d2:ae:cc:
         84:86:28:9d:b2:9a:85:55:8c:f2:fb:01:e4:b5:e8:56:89:0a:
         58:d6:f3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqIp7nhf8AkSzQrODapWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjYwMzI2MDEwMDUwWhcNMjYwMzI3MDEwMDUwWjAzMTEwLwYDVQQD
Eyg4MmYyYjgyOTM4ZjY3OGM0M2RhOTc2MzRkN2I2YzdjZTYwOWEzZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ5L3VhEYpD7GNTHCYt1QbEbISoF
s32cq2jC6L7vSsKxucJ0Do3Umu01FBo45bfyzNDlaAt7w9AJVDc+tCdbmmYbSjN/
lfeKRpVY6ky47+AzhNcq8DwohoEIo+nlkZZIssCjEpb3J2MHt+VCxzNDXkkuHWWs
J84lafBO/T7hRY3fNuXRNJrjZ+vDezGSp5IjSJb7WDHoP6Kvt/ueMuQrGUa05hCQ
lrRx0i14lZUSJbg3tZLJgZg+TQ5t2bGUvJo3KScbiU4mKMv60KtOAZuC3uvDbY6B
L4kEdTpCCiPDW+7p7PNeQn7pYog3ES4QA48/LQtVK+5XEBJAe8AtbVAmHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILyuCk49njEPal2NNe2x85gmj1cMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDn3uGLa
MTfCbSl2aabL9WDeBqEJ/e6es4mq2Oa+KixnWbZoxjon+n89nS+ny8F+SxEEjh62
wsrLIQOl0MgyA7SPHWcfKe5mXNF4mJzXbatll5ngRn98TKgwuqhbhw5u+BfNhQce
Ds7bETkMhs6MF5e+4Z/sgSsjxQZjzgwRXaXsmsPpZGealu/CsU77KqbiNLhtUhiU
tlSi28583FPGGCSqTzpRO8U1J2mHo1k3EPZJEbzKpLy8zZvlphezGZNoO3kul+YJ
mM9218wG7Nxo5fc4pBpYd5zIC5J5KDfbF4t2Awz4E0Pa0q7MhIYonbKahVWM8vsB
5LXoVokKWNbzxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:21 2026 by rpki-client