Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          2WQIlV9TAJgoouPXpdQnEWe/MmeCfObm+U/0seFidU0=
Subject key identifier:   E3:A9:89:53:D6:98:8C:F5:20:33:11:B9:CB:2E:3C:59:EC:44:21:34
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       019D281676B181793BDFDF4E41DBD2AA4315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          12C1
Signing time:             Thu 26 Mar 2026 03:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:53 +0000
Files and hashes:         1: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: 3kH1MZLZAIrZc6wTAkQ3MjM5NAsLC7AIcjXkpyJuXlc=)
                          2: DAk9scQvo5DMV_VlSztOmztoUsk.roa (hash: LbZH4yFltHGub7MlaORytCaFKFzBncecl1qi4I5mXh8=)
                          3: KedsxwMx1vS4wxET3Dft1ZVYZdM.roa (hash: absKcImfV1TnjcpSLnLKauDQBXXCFX2CsdZyDNeGTWY=)
                          4: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (hash: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk=)
                          5: wMacMmZmC6K_Z3E-FK6eIoDMt20.roa (hash: hMurJd6LHvL4x1id8j/j+B6VkNrcZEazX5VFQz1CkR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:76:b1:81:79:3b:df:df:4e:41:db:d2:aa:43:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Mar 26 03:00:53 2026 GMT
            Not After : Mar 27 03:00:53 2026 GMT
        Subject: CN=e3a98953d6988cf5203311b9cb2e3c59ec442134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:7e:6b:03:a5:9c:a0:65:9b:c9:3a:d9:a2:
                    ee:2b:b6:b6:30:9b:6c:d1:8e:a9:17:16:09:94:d9:
                    6c:8c:de:36:91:05:c1:ad:ff:42:c4:ff:e7:b6:9b:
                    85:c6:31:a9:41:67:36:7a:dd:3f:76:93:a2:d0:7f:
                    f1:85:ec:95:dc:fa:e7:b5:34:4c:b7:38:23:d0:a5:
                    08:cd:09:fd:43:af:da:48:8f:cb:28:9b:98:52:fe:
                    de:7d:cc:d2:cd:08:eb:5d:ff:de:da:f7:42:c4:9f:
                    ea:23:e5:ed:4e:df:62:ae:9c:b7:66:64:fd:f0:97:
                    67:85:a7:92:60:11:1c:42:f7:a1:04:21:bf:81:15:
                    c5:04:df:24:87:e4:b1:c4:e6:49:46:3f:97:7a:31:
                    98:d7:9b:45:af:fe:63:fe:1f:e9:7c:86:8e:e6:4b:
                    f7:41:db:ac:26:68:18:96:ec:eb:4a:52:39:5b:e0:
                    94:dd:27:0d:70:06:71:43:9d:ce:b7:9b:cd:5a:ba:
                    a4:2f:00:aa:81:ad:de:45:59:be:a8:a3:43:19:30:
                    97:c7:62:a0:1b:14:5f:a9:a2:d8:8a:f9:07:10:0f:
                    18:6f:20:78:5a:74:e7:30:c1:c2:44:17:6a:70:6d:
                    38:71:12:fe:d5:d3:23:12:ba:c4:80:77:35:e2:2e:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A9:89:53:D6:98:8C:F5:20:33:11:B9:CB:2E:3C:59:EC:44:21:34
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:de:5e:b1:3d:1a:29:c3:e3:0e:6d:97:31:1a:e4:e0:f8:
         6f:b4:80:bc:a9:12:13:36:05:c3:e4:09:46:17:01:9f:63:03:
         8c:91:19:2e:ff:5e:7a:a4:01:88:c4:d2:cd:76:f3:3c:f4:c1:
         b2:c0:b0:ea:97:66:0c:c5:96:bf:83:80:a3:b7:cf:79:b2:af:
         44:06:21:89:4b:34:44:17:fc:81:2c:9e:dc:00:63:66:74:3f:
         aa:7e:87:2a:e6:28:78:7b:db:6c:e6:ba:40:7c:c5:8b:b6:87:
         35:d4:ef:8c:3f:9d:11:5e:92:24:80:83:07:4c:37:db:0a:d1:
         16:43:ba:69:ca:55:67:94:bd:61:2e:09:92:0a:0e:b4:bf:d4:
         b4:0c:bb:70:a4:ca:0f:f7:8b:37:f4:f9:86:6c:83:19:c6:ec:
         30:ce:be:b6:6a:ac:5b:ab:42:55:51:e1:db:87:77:bf:b4:13:
         a0:73:bc:1c:16:66:d8:a6:66:64:56:e6:f9:b4:85:89:8c:0a:
         01:db:2c:7b:83:fb:12:dc:e1:d4:1b:12:2b:3a:0d:10:be:1b:
         c1:80:b4:08:27:85:38:d3:25:80:4f:73:41:6a:78:3e:ab:ce:
         7c:46:7d:76:4f:bb:74:41:0b:fc:8e:4f:ac:38:c6:f6:cf:bb:
         14:fe:28:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnaxgXk7399OQdvSqkMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3
M2E0MTMwHhcNMjYwMzI2MDMwMDUzWhcNMjYwMzI3MDMwMDUzWjAzMTEwLwYDVQQD
EyhlM2E5ODk1M2Q2OTg4Y2Y1MjAzMzExYjljYjJlM2M1OWVjNDQyMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeN+awOlnKBlm8k62aLuK7a2MJts
0Y6pFxYJlNlsjN42kQXBrf9CxP/ntpuFxjGpQWc2et0/dpOi0H/xheyV3PrntTRM
tzgj0KUIzQn9Q6/aSI/LKJuYUv7efczSzQjrXf/e2vdCxJ/qI+XtTt9irpy3ZmT9
8JdnhaeSYBEcQvehBCG/gRXFBN8kh+SxxOZJRj+XejGY15tFr/5j/h/pfIaO5kv3
QdusJmgYluzrSlI5W+CU3ScNcAZxQ53Ot5vNWrqkLwCqga3eRVm+qKNDGTCXx2Kg
GxRfqaLYivkHEA8YbyB4WnTnMMHCRBdqcG04cRL+1dMjErrEgHc14i65fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOpiVPWmIz1IDMRucsuPFnsRCE0MB8GA1UdIwQY
MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt
M2JmMDRhMmE5M2Q4LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4
LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYLeXrE9
GinD4w5tlzEa5OD4b7SAvKkSEzYFw+QJRhcBn2MDjJEZLv9eeqQBiMTSzXbzPPTB
ssCw6pdmDMWWv4OAo7fPebKvRAYhiUs0RBf8gSye3ABjZnQ/qn6HKuYoeHvbbOa6
QHzFi7aHNdTvjD+dEV6SJICDB0w32wrRFkO6acpVZ5S9YS4JkgoOtL/UtAy7cKTK
D/eLN/T5hmyDGcbsMM6+tmqsW6tCVVHh24d3v7QToHO8HBZm2KZmZFbm+bSFiYwK
Adsse4P7Etzh1BsSKzoNEL4bwYC0CCeFONMlgE9zQWp4PqvOfEZ9dk+7dEEL/I5P
rDjG9s+7FP4o8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:40 2026 by rpki-client