Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          b//dwEI7Lkq9q/N8ANTHbpsLdvZVXVjgLZeUHmZoWs0=
Subject key identifier:   B5:18:18:1C:C8:9B:4C:54:DC:53:0F:C3:EE:28:BF:B7:B1:14:92:49
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019D277224691C5A3988921ED8C27D7C42B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          0359
Signing time:             Thu 26 Mar 2026 00:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:24 +0000
Files and hashes:         1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
                          2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: pm8bYnmDGWZx6zdbZeDcMm1bqAzKPF2fm17A9ysfl6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:24:69:1c:5a:39:88:92:1e:d8:c2:7d:7c:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Mar 26 00:01:24 2026 GMT
            Not After : Mar 27 00:01:24 2026 GMT
        Subject: CN=b518181cc89b4c54dc530fc3ee28bfb7b1149249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:f0:71:b8:fd:fa:32:3c:e6:ce:ac:47:8e:
                    e2:b9:d3:6f:40:e8:ac:53:2f:27:ab:2f:cf:d0:5b:
                    ee:9e:02:0c:ed:79:0f:ba:7e:5b:9a:c6:52:41:7f:
                    82:f2:31:93:a5:d7:f3:ea:31:50:f7:f4:b5:a8:11:
                    42:23:89:dd:4b:cd:f7:74:28:83:2a:19:eb:c6:e7:
                    ef:a8:b5:00:5e:25:23:1f:09:aa:d2:de:23:ed:c4:
                    d8:eb:8d:fd:98:b5:d2:b4:08:bb:5a:76:da:28:4a:
                    5b:d2:57:05:86:b3:d6:d0:24:97:87:8c:5c:2f:71:
                    27:28:30:2b:b8:bf:31:40:cb:77:8a:10:46:34:1c:
                    b1:10:1c:b5:66:b2:83:7d:0f:31:fe:36:ee:ac:ca:
                    6f:43:7a:25:c4:78:c1:aa:c0:5d:69:bf:0a:85:25:
                    76:d6:57:96:81:94:ad:be:ef:d3:bb:9e:58:9e:ff:
                    61:c8:91:c5:d2:83:75:78:d8:a3:ae:1b:74:df:f6:
                    c7:cf:36:16:f2:a2:5e:30:8b:01:fd:3d:c0:15:a5:
                    b1:fd:58:92:b3:0a:ef:d6:7d:7d:36:8b:3c:5a:c7:
                    aa:c2:14:e8:ee:e1:cc:d0:38:ce:7c:75:e3:ae:02:
                    97:68:1d:9e:16:76:8f:1b:3d:59:6f:6f:87:63:58:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:18:1C:C8:9B:4C:54:DC:53:0F:C3:EE:28:BF:B7:B1:14:92:49
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:2e:74:1e:28:d6:1f:66:60:dc:39:f9:1c:64:5b:2c:52:
         29:41:df:7a:07:51:ba:da:9f:e2:50:6a:27:48:fb:04:3a:cc:
         9f:ba:8c:58:63:5a:ae:80:54:97:a3:72:24:2e:d2:95:f2:8b:
         b9:67:ec:2b:11:98:76:23:1b:d8:bf:95:41:5a:c1:c1:40:45:
         c7:38:bf:82:67:78:41:3d:6a:bd:ec:88:fc:8b:1e:da:9c:87:
         c9:b8:7f:21:f5:52:2a:77:de:e4:04:ec:b1:1a:dd:63:23:a6:
         0c:77:fc:72:3e:67:36:08:8d:8e:55:51:08:80:8a:e5:02:35:
         06:83:82:cd:14:5d:d3:de:91:e8:6b:21:0a:a4:fa:91:48:e6:
         37:86:77:6e:a7:6a:44:07:6b:8c:54:f3:28:2b:4d:09:d7:f9:
         9c:f2:e1:9f:84:bc:d2:65:9c:97:da:84:0e:d5:97:54:e4:ed:
         b1:d1:9f:b9:3e:cc:2d:a1:48:14:15:76:1a:76:b6:f0:50:88:
         0d:1e:2f:13:4d:60:35:99:f3:48:3e:38:27:ad:c5:ec:0b:62:
         e1:7e:41:0a:b6:49:d5:e1:34:de:52:2b:28:0f:1c:ce:ef:8e:
         09:0a:5c:fd:ec:15:3d:de:23:f5:6c:bc:8d:9c:02:ab:fa:37:
         6e:72:37:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciRpHFo5iJIe2MJ9fEK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy
ZTM2ZWYwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
EyhiNTE4MTgxY2M4OWI0YzU0ZGM1MzBmYzNlZTI4YmZiN2IxMTQ5MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu73wcbj9+jI85s6sR47iudNvQOis
Uy8nqy/P0FvungIM7XkPun5bmsZSQX+C8jGTpdfz6jFQ9/S1qBFCI4ndS833dCiD
KhnrxufvqLUAXiUjHwmq0t4j7cTY6439mLXStAi7WnbaKEpb0lcFhrPW0CSXh4xc
L3EnKDAruL8xQMt3ihBGNByxEBy1ZrKDfQ8x/jburMpvQ3olxHjBqsBdab8KhSV2
1leWgZStvu/Tu55Ynv9hyJHF0oN1eNijrht03/bHzzYW8qJeMIsB/T3AFaWx/ViS
swrv1n19Nos8WseqwhTo7uHM0DjOfHXjrgKXaB2eFnaPGz1Zb2+HY1jDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUYGBzIm0xU3FMPw+4ov7exFJJJMB8GA1UdIwQY
MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt
ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4
LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXEudB4o
1h9mYNw5+RxkWyxSKUHfegdRutqf4lBqJ0j7BDrMn7qMWGNaroBUl6NyJC7SlfKL
uWfsKxGYdiMb2L+VQVrBwUBFxzi/gmd4QT1qveyI/Ise2pyHybh/IfVSKnfe5ATs
sRrdYyOmDHf8cj5nNgiNjlVRCICK5QI1BoOCzRRd096R6GshCqT6kUjmN4Z3bqdq
RAdrjFTzKCtNCdf5nPLhn4S80mWcl9qEDtWXVOTtsdGfuT7MLaFIFBV2Gna28FCI
DR4vE01gNZnzSD44J63F7Ati4X5BCrZJ1eE03lIrKA8czu+OCQpc/ewVPd4j9Wy8
jZwCq/o3bnI3lQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:03 2026 by rpki-client