Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File:                     bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier:          9DR9/dVTZCAUhIQO3UxLJXEhdlOwNZzSKf5IXVRljZM=
Subject key identifier:   AB:2B:28:38:27:2E:94:DD:88:C9:8C:1D:63:8E:F4:5D:F6:B1:CE:2C
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer:       /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial:       019D3307BEF0D27768E6CEA7E1EE23D9841B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number:          0518
Signing time:             Sat 28 Mar 2026 06:00:38 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:38 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:38 +0000
Files and hashes:         1: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: cfuj93WnHn0WxUT4nrK86a+6/IGfm323/FXwzL0b0mQ=)
                          2: cAdpnRDHC0c0lgzjSQj995F3FvA.roa (hash: yMSL1cAwqcIkeNN7ndGsh3tpbDr4P3TD+Wcr+gEqkks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:be:f0:d2:77:68:e6:ce:a7:e1:ee:23:d9:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
        Validity
            Not Before: Mar 28 06:00:38 2026 GMT
            Not After : Mar 29 06:00:38 2026 GMT
        Subject: CN=ab2b2838272e94dd88c98c1d638ef45df6b1ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:39:96:8b:8a:84:27:61:ba:ad:f9:78:2e:
                    73:a9:da:ab:0e:d9:6d:25:75:b3:ac:cf:4c:6f:49:
                    f8:fa:cc:c6:75:4e:24:39:1f:87:82:c5:09:27:d7:
                    e9:be:de:cd:37:40:5b:9e:f5:f3:18:eb:f4:2b:77:
                    b9:d1:57:57:f9:85:26:77:12:4b:97:7e:4e:fa:5d:
                    ab:35:92:c8:c7:e2:bd:9f:47:21:5f:3c:cf:7c:b5:
                    96:d1:d8:45:6c:c0:f6:e9:e7:aa:3b:82:2f:65:e1:
                    fa:42:e1:90:74:85:c5:a1:c5:dc:c3:2a:57:f6:f3:
                    72:81:71:e1:ae:69:e2:20:ee:ab:99:00:b4:c3:34:
                    f4:5e:63:ac:d0:b2:07:b2:88:fb:85:cf:18:9e:45:
                    6a:2f:87:4b:c1:c3:3d:07:20:34:68:a9:a0:8b:7a:
                    64:3a:bc:cc:30:d5:56:fb:7e:61:48:db:66:df:49:
                    5d:66:22:b1:0d:fd:6e:11:c4:1b:2f:cb:8f:e8:ab:
                    8b:11:b5:82:1a:70:e3:9c:b2:f6:6e:70:30:16:74:
                    08:20:06:c9:4a:c9:e2:73:77:e5:ad:6f:c7:43:78:
                    86:1e:1d:83:0f:20:f1:ae:e5:20:04:31:9e:64:94:
                    cb:5d:a3:64:45:dd:bc:15:93:88:22:22:4b:4d:9f:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:28:38:27:2E:94:DD:88:C9:8C:1D:63:8E:F4:5D:F6:B1:CE:2C
            X509v3 Authority Key Identifier:
                keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:7f:b1:4b:24:a6:5e:d0:5d:16:62:e6:24:df:c7:13:64:
         b3:50:de:73:b5:fb:af:5a:1c:2f:b7:33:be:c8:c9:cd:0b:7c:
         10:fe:49:2c:bd:8d:ee:83:a1:19:4c:b8:b8:cc:80:e0:1f:cd:
         7e:bc:ca:2d:b6:79:56:53:13:d0:f4:2a:55:5a:b0:c1:d1:a7:
         7c:49:12:33:4f:a1:21:31:21:db:7d:06:81:51:35:40:45:09:
         ec:3d:d8:8b:24:82:5e:b4:73:3d:96:7b:fc:dd:2e:dc:ab:c0:
         c1:1e:70:59:7c:f5:ac:5f:38:c2:69:13:24:cf:75:f8:44:a2:
         23:0f:c9:cc:8e:65:38:30:5b:19:c5:36:28:ca:62:0a:57:06:
         ee:05:92:56:eb:35:10:b7:cd:ac:9a:60:63:16:8c:a5:80:ae:
         3e:c7:02:c0:03:d1:e0:4d:0e:b2:09:f6:cf:c9:4e:f7:8a:92:
         16:e2:dd:52:5a:67:8d:36:3e:b0:c7:88:6e:fe:c1:2e:78:ca:
         58:03:21:d4:ad:5a:b3:48:86:4d:ab:67:48:51:4d:a1:47:79:
         95:2b:4a:6f:e7:81:de:d2:20:99:77:70:ee:08:18:9d:df:d6:
         ea:b3:15:46:22:94:19:ae:27:cf:f5:1e:e1:07:dd:f0:f4:74:
         1d:42:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:11 2026 by rpki-client