Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          i4XgS6idypyseHGtVJDWmT7Bsz2Zt2PZdIAAKlQv2c0=
Subject key identifier:   B8:D4:37:2F:D9:BB:E3:6F:26:8B:5B:BF:16:9D:F8:52:57:86:8C:30
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019D2816D70D797377236D58221CC9AB31D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          056F
Signing time:             Thu 26 Mar 2026 03:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:18 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: UAcW4LrZoeSLLuSJ3ggqdfk3HZlNn/+E/08xkHr/AbY=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:d7:0d:79:73:77:23:6d:58:22:1c:c9:ab:31:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Mar 26 03:01:18 2026 GMT
            Not After : Mar 27 03:01:18 2026 GMT
        Subject: CN=b8d4372fd9bbe36f268b5bbf169df85257868c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:fd:cf:32:40:cb:cf:e7:79:43:7a:90:c1:
                    25:b6:60:2a:14:e6:c7:b5:89:23:12:5d:31:68:d5:
                    09:2c:2a:09:89:a5:73:be:9a:54:f1:be:75:45:2b:
                    5f:f8:ad:55:9a:3b:b5:0f:2b:ea:ed:e4:4c:69:ea:
                    3a:c6:99:ea:ce:37:75:1e:9d:89:a0:96:55:54:b5:
                    a2:82:6d:18:8c:d3:95:13:b7:57:a4:84:66:c4:e0:
                    54:3f:6f:9e:97:1c:f8:18:44:79:64:6e:c0:64:80:
                    1b:7f:3e:b9:d4:f7:2a:4f:17:cb:65:09:13:76:97:
                    20:b9:da:26:a5:22:d3:ad:c6:ca:d0:c2:19:a1:22:
                    5e:d2:8b:b8:ae:14:f1:d6:3a:ea:24:d2:e4:f2:01:
                    d5:a4:d7:8a:54:4d:b1:88:ab:46:a0:29:44:44:c6:
                    50:5d:3d:98:b1:dc:53:7d:a8:24:9b:83:a3:f1:98:
                    0b:42:db:02:08:34:a4:13:b7:f9:b7:70:59:6d:08:
                    6d:34:18:f9:51:71:46:ff:c6:35:d7:8b:e3:2b:e2:
                    95:55:2f:5c:23:e7:48:56:3d:68:48:3e:5e:2d:5b:
                    e5:1b:87:6f:40:63:f6:91:9f:3a:d8:cf:11:44:83:
                    eb:94:2c:5a:34:1a:e8:b0:41:d5:41:de:83:0f:37:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:37:2F:D9:BB:E3:6F:26:8B:5B:BF:16:9D:F8:52:57:86:8C:30
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:4d:f7:86:94:3b:e8:09:59:2b:39:f7:b9:2b:d4:c4:9d:
         40:9a:b9:6a:78:06:eb:4c:31:9e:84:b8:d7:11:94:45:9b:5a:
         f3:da:b5:da:b1:f5:9a:99:ca:63:06:e1:33:39:fb:96:e8:f4:
         23:d1:5a:46:51:0b:74:0e:c4:04:ef:45:13:0e:b8:a6:9f:47:
         2b:35:44:b8:dd:45:c6:08:03:ea:7a:8e:c4:e8:15:0a:68:18:
         8f:dd:e4:c9:f0:aa:f9:ec:76:a1:3f:51:8b:e4:8b:2e:a6:c4:
         5a:d9:a1:74:34:be:40:c0:20:d3:5b:50:81:59:09:45:9d:25:
         07:ae:b3:95:d1:ab:08:8a:ba:a1:fc:39:4e:02:ef:21:59:f6:
         e3:e4:e8:1a:a7:d1:28:3d:c5:80:d6:21:f9:94:b6:28:fd:3a:
         8d:5f:f8:88:a5:e6:d7:bd:f0:53:8b:cf:a0:34:36:ee:84:37:
         ed:99:24:cc:a9:22:45:34:cc:54:df:55:ff:a1:e0:aa:01:c0:
         90:df:5b:c7:09:7d:9e:08:ca:17:3b:9c:84:98:c4:95:e7:1d:
         f0:fd:31:6c:b2:08:25:a2:1a:c8:d5:a0:64:22:2e:0f:3d:ce:
         31:88:1d:bc:d7:37:79:e9:d1:9b:77:e4:a0:37:07:9b:33:72:
         e9:f7:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:15:33 2026 by rpki-client