Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          GbHEtHKtTAiCdSnazEjzj9wkUE1XMGPOk20qNdIAoIc=
Subject key identifier:   07:57:22:CB:43:AE:10:AC:06:2A:A5:57:21:1F:5B:19:31:A2:50:11
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       019D2AE10DA63B4FEF85C794EC5A892FCBB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          189C
Signing time:             Thu 26 Mar 2026 16:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:25 +0000
Files and hashes:         1: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: DzEAZSXaCFYH8pUHCIm5cT7zjB4c1Ui+NgQzzb0F+oQ=)
                          2: BmlFckoCLbkIU9v1cSTyLfBhbrE.roa (hash: P9gavT0xq2zbiSHjEpukS24GWUotqHWhdlBaj5KptM4=)
                          3: U5jUW6kVQANcgdkSZF0_o8Z5HxM.roa (hash: ee+UkpqCqWusUiwf+8/nqwTSBqyDv29ReVKx7hNeR3o=)
                          4: gvw5yUDT8VkcGYmB4FemcY9F6Z0.roa (hash: qjzJbkJHWatioGBZd8+uDjCJfFJ0vYZMyqtFG/SE1vc=)
                          5: ik7u88vvQure_hmyfv2aPlBN51g.roa (hash: Za5igbseCwEjO0FVNgJPI4UYbQ+lIai1c6CapUYIbzA=)
                          6: jkHAenTpuidnXByxveNkRSju7uY.roa (hash: cpn+ySzKd4iMnG4Jk2/pb+mw+Adqpv3Wll4fkTbcVt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:0d:a6:3b:4f:ef:85:c7:94:ec:5a:89:2f:cb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Mar 26 16:01:25 2026 GMT
            Not After : Mar 27 16:01:25 2026 GMT
        Subject: CN=075722cb43ae10ac062aa557211f5b1931a25011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:4f:58:2a:eb:c4:54:56:a7:26:aa:84:99:
                    d7:0a:92:b3:1a:45:7d:55:ea:ca:79:e4:af:c3:a2:
                    67:52:99:93:77:db:ab:1d:10:6d:57:50:e6:eb:41:
                    e6:9a:55:e0:a2:5c:4f:02:f5:40:a6:44:03:26:ae:
                    db:b7:03:ca:13:96:45:91:76:8d:34:dc:8b:ac:8d:
                    5e:a8:90:be:a4:9f:5d:39:5b:9a:04:72:b9:71:10:
                    14:29:92:d1:d6:06:87:ec:9e:20:1a:7a:6b:bd:28:
                    8a:42:36:44:3c:4a:e8:79:48:72:f7:ef:c6:b8:51:
                    89:a2:ed:17:68:d1:89:3b:f7:13:83:02:c0:68:cb:
                    8f:0f:e8:d3:98:dc:5f:3f:36:5a:2b:22:27:77:b7:
                    44:93:36:32:8b:51:18:be:29:4b:b6:b5:9c:53:62:
                    c9:7f:23:7a:96:17:a7:9d:f7:5b:0a:33:ed:72:ec:
                    23:31:6c:89:91:5e:f2:7b:4d:fb:95:bf:f4:b9:7b:
                    7d:98:bd:41:58:87:df:6c:b7:e7:75:d0:4c:07:08:
                    1c:40:d3:36:86:5e:66:d8:fd:c0:54:14:a3:77:7b:
                    b6:40:0f:0a:56:f3:f1:43:0e:f9:a9:e9:41:c8:c9:
                    da:87:e7:08:66:e5:4d:9e:10:2a:ae:4a:24:0d:bc:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:22:CB:43:AE:10:AC:06:2A:A5:57:21:1F:5B:19:31:A2:50:11
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:68:71:f7:18:48:5f:7d:48:97:35:78:75:0f:a0:8f:d5:
         91:5a:23:c2:67:2a:c4:cf:16:ac:47:b6:65:29:c3:f5:7c:38:
         9c:a4:24:53:66:87:19:c9:33:c5:40:93:3c:4f:54:ea:8a:12:
         81:4b:21:81:ca:b0:94:90:07:e2:ba:62:96:e8:84:56:e0:9e:
         c3:1c:86:ee:72:05:94:5c:09:ae:60:36:ed:6e:4b:c9:d3:fd:
         2c:f6:34:aa:55:94:3b:19:7b:88:70:12:f8:60:ca:20:a6:fb:
         32:f2:31:7d:a7:c5:32:3b:e1:ff:93:b4:e5:db:44:dd:17:ba:
         cc:04:8c:eb:2e:8f:47:db:4e:a6:2c:9f:bf:cb:fc:66:86:e0:
         d4:f5:22:d6:6b:34:1b:14:66:62:64:49:be:36:6a:7d:a1:4c:
         d9:6b:1f:99:87:3b:37:43:1e:a5:e7:f3:55:57:33:ab:31:39:
         17:66:b1:09:9a:f8:74:9a:85:ba:36:51:11:d2:6c:06:65:f0:
         86:98:ce:31:83:c0:10:96:21:21:23:8d:e6:79:97:3c:99:15:
         4f:90:9a:a0:4c:f7:4e:97:74:61:a7:52:d5:42:96:4a:6f:a3:
         63:b1:ff:e4:41:76:9e:fe:d3:77:93:1a:3f:65:7b:73:67:44:
         32:e8:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:27 2026 by rpki-client