Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          9yfY8ABkmzmcB8YwXSxcZGCrMiijKXag4KXSogllfb8=
Subject key identifier:   D2:61:70:37:CA:07:E5:BD:60:C2:E7:D5:5D:4B:7C:A2:24:1A:97:F4
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       019D270423BB0D07E2AC7826D933CCF4993D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          053F
Signing time:             Wed 25 Mar 2026 22:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:15 +0000
Files and hashes:         1: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: O/hnZkqxc5wdmqioqmpxvuTR+Nj3Gziq0vWqrv4DDoM=)
                          2: BtnTg3UVtCotLWbUTHeLsZgdhVE.roa (hash: Sz+ixKVwiOEIj7coiYEtqiN5kz/+2rKd3V8d+a0dElE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:23:bb:0d:07:e2:ac:78:26:d9:33:cc:f4:99:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Mar 25 22:01:15 2026 GMT
            Not After : Mar 26 22:01:15 2026 GMT
        Subject: CN=d2617037ca07e5bd60c2e7d55d4b7ca2241a97f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:a3:02:67:27:a5:91:b6:17:f4:f8:96:24:
                    2d:69:b5:c3:a1:34:9e:17:75:f0:26:67:41:89:42:
                    8b:e1:10:18:f4:a4:58:eb:64:be:bb:52:62:55:ac:
                    9d:45:5e:06:32:90:35:6c:ba:e4:9a:57:7e:39:7a:
                    c3:65:fa:cc:a4:fd:7d:c8:42:4c:06:25:a0:cd:4a:
                    32:41:94:49:33:0c:18:15:18:b1:66:8e:3c:0e:d3:
                    d1:9e:06:2c:19:24:50:0d:26:c5:b1:d4:95:ea:77:
                    b8:f1:15:ac:b7:fe:53:dd:15:59:c8:4d:c0:54:5d:
                    e4:8e:b7:40:95:08:c4:8a:cf:99:84:6c:91:98:e2:
                    4b:0e:38:e4:4a:db:0f:9d:cf:a6:eb:6d:7a:8c:b3:
                    52:eb:7c:47:39:da:14:6c:3a:1b:5a:78:4b:6b:67:
                    82:42:31:63:80:1c:e6:94:cc:9a:db:79:c4:59:2f:
                    90:95:fe:50:d6:e6:9e:30:dd:02:a4:40:3b:e6:07:
                    c6:c9:82:84:d3:b5:d9:b7:10:f2:27:ec:08:8f:f7:
                    3c:39:7c:74:ca:78:3d:82:36:df:b3:73:60:3d:97:
                    bf:02:16:57:f1:74:59:a7:25:2c:6a:4f:41:63:9c:
                    4f:d2:0e:8d:ea:34:89:78:55:1f:34:de:d0:36:42:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:70:37:CA:07:E5:BD:60:C2:E7:D5:5D:4B:7C:A2:24:1A:97:F4
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:20:d1:44:28:79:19:21:66:04:a4:4e:0e:a8:5d:0c:3b:62:
         b0:62:9a:52:58:34:4a:f8:88:71:a6:5e:c9:08:62:ab:a2:ba:
         d6:9c:61:71:0f:fe:e8:8d:07:ff:59:9b:22:b1:02:b8:83:33:
         2a:07:76:74:20:31:e2:d3:5d:b3:c0:e6:67:a4:f2:9f:2d:c5:
         e6:18:96:07:87:0c:fa:e2:71:ff:e6:1b:f7:8e:a3:b8:df:1a:
         f6:f0:12:b3:56:e3:86:51:9b:af:11:14:7f:60:b8:ed:79:98:
         f1:ff:42:9b:3c:06:04:a2:66:7f:0d:09:47:52:d5:fc:3c:a3:
         0c:7b:3f:7f:59:9c:47:64:ff:7a:f3:ac:e8:b5:cd:18:39:4e:
         61:0f:d8:16:3e:43:12:93:c0:33:d1:ce:b7:e0:f4:82:88:c8:
         8f:65:72:19:ad:c9:d1:02:40:15:20:90:d9:4b:99:d5:f4:00:
         b6:72:81:4e:71:60:34:69:bb:58:0c:59:7a:47:f3:a6:1d:21:
         57:9a:ba:74:0f:5e:33:ff:66:53:90:1e:92:bb:45:6b:17:f2:
         c2:5e:02:58:09:22:f0:f8:b1:34:e2:a2:17:95:9f:a2:e0:34:
         f5:4d:aa:5b:cd:f1:52:4b:8a:d5:8b:21:12:12:3a:51:0b:23:
         7a:a7:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:43 2026 by rpki-client