Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          f7tln7vg9GCoEzyB9Go0OjX39g5H1/xT7Tg+Tcvo79I=
Subject key identifier:   6C:F1:F7:DB:4F:93:04:AA:55:39:43:E8:A3:E2:B3:E4:8F:1C:92:7F
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       019D27A92385C8A78F9DE59094D50E2339E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          080B
Signing time:             Thu 26 Mar 2026 01:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:29 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: on70SV/byqlINj8l8NFrfFtHPorE9N1/st6yE2CyJUw=)
                          2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:23:85:c8:a7:8f:9d:e5:90:94:d5:0e:23:39:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Mar 26 01:01:29 2026 GMT
            Not After : Mar 27 01:01:29 2026 GMT
        Subject: CN=6cf1f7db4f9304aa553943e8a3e2b3e48f1c927f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:7e:1b:70:30:37:cf:bd:57:03:30:2b:97:
                    23:6a:16:51:13:85:3a:fe:97:29:ac:36:b9:94:f0:
                    d4:17:1e:33:b8:9d:15:d9:12:7f:1b:ff:21:69:05:
                    e1:63:59:ad:fe:8c:68:4c:d7:9e:50:15:65:3c:c4:
                    9c:93:35:cf:8c:dd:36:15:4c:21:f4:85:45:b1:33:
                    8f:71:be:83:f3:15:09:55:ef:5f:17:54:d1:23:c7:
                    00:62:23:1f:f5:e5:6a:c2:0b:43:56:c5:b6:0a:fd:
                    55:7d:4f:cd:4a:81:33:be:0e:52:91:c1:c1:38:c5:
                    9d:23:d4:52:bb:85:61:62:da:98:2b:fe:73:63:3a:
                    fe:59:7e:97:08:9b:b2:64:37:38:40:08:7f:3b:94:
                    ed:2b:f7:be:e4:32:f8:83:47:6f:c5:76:a3:78:93:
                    bb:66:9e:43:6c:44:e1:59:71:48:f2:b8:b6:6a:e0:
                    ff:55:1a:9f:73:2e:07:3e:36:c8:ce:f3:8c:5d:1a:
                    cf:3d:56:3c:c5:00:69:5b:bf:95:2f:09:c2:45:36:
                    fa:8f:7c:58:f9:c7:1d:af:b1:b9:60:8f:1a:49:7d:
                    4b:3f:bc:79:1b:d3:f5:6c:a6:f1:54:41:a5:be:b3:
                    8d:b9:f1:35:d0:65:25:09:11:ff:43:3c:b0:89:70:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:F7:DB:4F:93:04:AA:55:39:43:E8:A3:E2:B3:E4:8F:1C:92:7F
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:42:3d:f0:33:b2:ea:fa:05:f1:70:fa:d8:48:f5:98:cb:
         62:63:a6:6f:cf:66:42:0e:7d:c7:fb:68:78:36:12:48:03:d3:
         bc:d4:57:b2:b4:eb:70:b9:56:71:bf:df:bf:42:a0:0a:a0:a0:
         ef:d7:c2:1a:40:00:ee:e6:2a:e8:89:78:f6:be:c9:d6:43:11:
         71:c3:5b:de:b8:25:12:0f:c2:9e:98:a5:53:f7:ae:a3:f9:55:
         7a:1d:a1:f5:bb:d4:cb:cb:d3:0b:eb:1b:d2:18:ad:be:8c:3d:
         a3:d8:ec:f4:42:70:c3:49:c1:b4:08:5a:5f:ca:4a:22:f3:e4:
         e0:93:fb:c7:5e:ee:c5:a5:dd:c3:90:78:bf:06:57:43:2a:b0:
         47:91:d0:6c:29:d4:d6:04:14:94:c9:75:7c:95:76:04:ed:7a:
         fd:16:ca:e2:24:68:cb:93:b1:c0:3b:ef:91:f5:bd:55:52:b2:
         f8:da:a1:e5:8e:80:1d:f8:54:8d:28:79:b3:0d:da:c8:de:5a:
         1d:79:9e:46:b3:b8:80:94:65:b3:7a:e0:e0:79:00:85:cf:34:
         85:04:20:ca:11:ef:b2:82:d0:3e:7d:0c:90:9d:37:77:dc:7d:
         0f:31:da:63:8c:35:81:49:32:15:41:23:70:fc:5b:17:6b:53:
         14:33:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:19 2026 by rpki-client