Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          JAK6fDgQqMH9PYOIyBombfJ29JdiNpOlrOu5ovB1coE=
Subject key identifier:   54:DC:4B:9C:5C:FD:F2:F0:6C:5C:68:B0:19:EC:B8:C8:7B:9A:A4:3E
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       019D2772D70D7399C1A69C67BE624D900E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0E76
Signing time:             Thu 26 Mar 2026 00:02:10 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:10 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:10 +0000
Files and hashes:         1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
                          2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: KEjsqZSIACrX7d359pk/ubBKdiGm13OY8akir8Kw3LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:d7:0d:73:99:c1:a6:9c:67:be:62:4d:90:0e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Mar 26 00:02:10 2026 GMT
            Not After : Mar 27 00:02:10 2026 GMT
        Subject: CN=54dc4b9c5cfdf2f06c5c68b019ecb8c87b9aa43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:90:78:fd:fc:e4:1e:58:d9:7f:d8:8a:71:
                    83:20:8e:87:40:d6:59:34:50:16:a2:22:9e:43:99:
                    60:6c:59:e7:cb:89:e4:86:95:13:28:f4:f8:d6:16:
                    be:ba:a4:de:66:4d:91:c7:e5:c4:03:1b:7a:24:87:
                    f1:51:ab:f8:6c:a9:e2:6e:8a:6a:1d:6a:81:c2:47:
                    ab:33:fd:de:f8:0e:dd:ba:1e:f8:5e:8c:e6:7e:f3:
                    6a:5b:c1:48:3d:5a:2d:1d:ce:f1:28:89:b8:48:82:
                    3a:c9:41:ac:53:7b:08:9d:0e:2c:df:c0:01:25:aa:
                    27:c6:f6:3c:08:78:e2:16:3e:8f:92:aa:b8:07:8a:
                    b2:7f:e3:23:eb:ac:d8:5e:33:b0:aa:58:b4:fe:69:
                    96:9c:b5:94:de:e2:0c:98:b7:1d:3c:9c:3a:a6:b0:
                    a8:de:b3:7d:ad:13:25:dd:3c:a9:4f:f8:dc:0f:e9:
                    9b:1e:66:41:09:12:f5:d3:13:04:ff:c6:26:ec:ea:
                    ff:47:47:b8:59:54:c9:9b:55:87:45:16:fb:17:2f:
                    09:60:46:ec:55:d9:22:c1:fa:bb:27:4c:a0:c4:64:
                    f9:e2:87:f8:47:f2:a5:82:58:c8:b5:68:f6:b4:2f:
                    41:c5:2d:af:80:c0:23:a4:8d:c2:64:3e:bb:a9:d9:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:4B:9C:5C:FD:F2:F0:6C:5C:68:B0:19:EC:B8:C8:7B:9A:A4:3E
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:d1:ec:8d:c2:56:e9:7c:1f:a9:0e:db:12:5e:1d:6b:08:
         2e:4e:86:85:06:7b:03:26:84:ad:e5:e5:2a:8e:2b:02:bf:bf:
         ab:72:58:20:f4:3e:43:f3:98:8c:54:cb:d6:31:e3:d1:5b:03:
         91:5c:10:b4:43:ed:d7:9e:ea:02:97:4b:b1:5a:90:2a:ae:9f:
         87:eb:e1:1f:3d:be:1b:22:3c:e7:78:c1:54:b8:be:23:fb:f0:
         fb:f2:dc:e0:7f:51:91:4b:19:11:6d:2c:0e:e9:d2:fe:7c:0b:
         e7:84:70:00:37:6a:24:9f:36:44:e0:f2:a6:43:52:95:de:da:
         74:63:05:6c:2f:37:eb:42:b5:13:52:de:b3:f3:dd:b0:45:71:
         5d:e0:4c:03:95:e4:f0:c3:cd:d5:c9:58:c7:c5:dc:d7:31:f2:
         d5:a0:49:e5:50:a3:e3:e4:e5:ac:47:0b:e9:68:e2:30:11:1d:
         f9:d8:21:18:98:08:6c:bb:00:6f:39:5a:28:12:d3:bb:e8:e0:
         d9:de:ce:83:dc:81:1d:62:1e:b4:9d:af:da:60:a2:cc:0d:d0:
         6c:d7:f3:dd:d5:30:24:24:cd:68:00:be:8f:e9:81:b5:4b:ef:
         f2:7e:40:f6:1c:c7:da:2c:e7:99:d4:25:26:1b:76:6c:a1:0e:
         6a:c3:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:22 2026 by rpki-client