Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          /czXWDBKZrHA813yte3LS3X1Z6V022TuWrdzOynQN2g=
Subject key identifier:   52:B5:DA:AC:49:DD:C8:36:08:A6:76:36:76:23:9B:9C:1E:F2:E4:66
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019D2997435E077B9D9B70FE2A241D14EEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 10:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:12 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: c6mYOSRlthVZJbHeMK2LcrJM6xPg4Lze98PY2UbPrTA=)
                          2: tcbkNHlV278WuPIHWR3nno0tNIU.roa (hash: 06lnHiwHQVCyQQPbik2oG2DAxVKNgLZC3M/2kyqLgGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:43:5e:07:7b:9d:9b:70:fe:2a:24:1d:14:ee:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Mar 26 10:01:12 2026 GMT
            Not After : Mar 27 10:01:12 2026 GMT
        Subject: CN=52b5daac49ddc83608a6763676239b9c1ef2e466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:30:6b:e9:f4:2e:f5:e4:6a:7d:e7:f5:94:
                    6c:52:a9:0e:f5:44:0b:f1:31:7d:0e:30:6d:d6:0a:
                    19:bc:fb:57:30:b1:49:94:af:62:c2:9d:ff:1e:04:
                    b5:33:33:1c:da:7a:ca:35:a0:86:38:64:4e:95:bd:
                    20:64:9d:a7:26:72:bc:c5:7e:9b:d3:f1:a7:23:e4:
                    30:bb:22:b6:11:a3:73:c9:2f:fe:00:56:a4:1e:49:
                    84:36:d8:e0:34:b3:05:47:38:c0:8f:5e:b0:69:a4:
                    cf:2e:16:17:e3:cb:2c:b9:26:f3:28:8e:8b:99:94:
                    e3:68:74:80:ee:b9:87:13:4a:fe:73:bc:2a:a0:47:
                    86:b5:17:4e:21:17:10:52:3f:1d:ec:00:ad:11:7d:
                    ff:cb:c4:65:87:dd:f9:a6:fb:5b:da:d7:c4:f7:b2:
                    16:00:b8:95:60:19:51:c4:32:4d:40:94:03:31:ae:
                    e2:4f:68:9f:8d:e7:c0:62:23:6e:9f:28:00:b2:ec:
                    12:bb:59:23:ff:7f:93:bf:43:a3:79:06:a0:44:85:
                    12:40:bc:cc:c1:ea:04:35:2e:56:c9:64:d6:c7:34:
                    18:a5:ff:29:22:3f:ba:20:cd:60:63:41:6d:ae:e3:
                    d1:1e:6e:b9:57:da:68:ea:9d:1e:02:57:fe:e8:6a:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:DA:AC:49:DD:C8:36:08:A6:76:36:76:23:9B:9C:1E:F2:E4:66
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:32:36:1c:4f:37:bf:3f:b2:ac:32:c1:b2:91:d4:36:31:
         c9:6f:6d:bd:99:70:e4:71:92:1a:d4:ee:c1:1c:88:cb:cd:69:
         b0:25:38:1a:75:d2:04:ef:71:cf:9c:a3:b8:3a:46:d3:67:eb:
         46:0e:a7:3f:4f:69:b1:54:85:ac:af:a1:76:fb:12:c3:03:8d:
         fa:ce:17:78:7f:f7:7a:e3:3a:42:73:d4:aa:e9:6f:09:b0:44:
         69:f1:e8:1c:9d:15:e5:a3:b9:50:3d:f3:41:29:1d:ae:2b:41:
         bf:28:b8:89:43:44:18:ed:cd:d2:0a:35:24:cb:8f:16:b7:5f:
         ea:ab:ad:4a:ab:45:d9:a2:eb:18:7e:a0:83:9f:51:ba:8b:3a:
         bd:00:96:a9:43:fa:0a:76:c0:67:f8:62:0c:9f:61:9c:e6:0b:
         ca:05:3c:20:55:1c:69:70:6e:48:35:9f:64:82:c4:9b:5e:dc:
         a0:a9:4a:1b:58:f8:54:c7:65:13:aa:99:fc:f9:95:13:7d:ed:
         2a:03:e3:56:4d:7b:db:f3:70:a8:ec:77:fd:6f:2f:b8:67:35:
         e1:c6:08:98:13:ce:6b:fb:a7:d9:73:db:66:d1:d8:83:fc:8e:
         f2:0a:1c:ad:de:d5:b5:f1:81:d6:49:03:06:14:fb:10:b7:ee:
         5f:95:2d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl0NeB3udm3D+KiQdFO79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZmVhZWZlYTgyYjYxMDNkYzJiODk3MWU5YmRkYTAxNjY5
YTEzNTcwHhcNMjYwMzI2MTAwMTEyWhcNMjYwMzI3MTAwMTEyWjAzMTEwLwYDVQQD
Eyg1MmI1ZGFhYzQ5ZGRjODM2MDhhNjc2MzY3NjIzOWI5YzFlZjJlNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJcwa+n0LvXkan3n9ZRsUqkO9UQL
8TF9DjBt1goZvPtXMLFJlK9iwp3/HgS1MzMc2nrKNaCGOGROlb0gZJ2nJnK8xX6b
0/GnI+QwuyK2EaNzyS/+AFakHkmENtjgNLMFRzjAj16waaTPLhYX48ssuSbzKI6L
mZTjaHSA7rmHE0r+c7wqoEeGtRdOIRcQUj8d7ACtEX3/y8Rlh935pvtb2tfE97IW
ALiVYBlRxDJNQJQDMa7iT2ifjefAYiNunygAsuwSu1kj/3+Tv0OjeQagRIUSQLzM
weoENS5WyWTWxzQYpf8pIj+6IM1gY0FtruPRHm65V9po6p0eAlf+6GqcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK12qxJ3cg2CKZ2NnYjm5we8uRmMB8GA1UdIwQY
MBaAFAT+rv6oK2ED3CuJcem92gFmmhNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQt
OGVlYjA4OWI1Y2FmLzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZjk1MjktNzE3Mi00M2Y4LTg5NWQtOGVlYjA4OWI1Y2Fm
LzEvQlA2dV9xZ3JZUVBjSzRseDZiM2FBV2FhRTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkkyNhxP
N78/sqwywbKR1DYxyW9tvZlw5HGSGtTuwRyIy81psCU4GnXSBO9xz5yjuDpG02fr
Rg6nP09psVSFrK+hdvsSwwON+s4XeH/3euM6QnPUqulvCbBEafHoHJ0V5aO5UD3z
QSkdritBvyi4iUNEGO3N0go1JMuPFrdf6qutSqtF2aLrGH6gg59Ruos6vQCWqUP6
CnbAZ/hiDJ9hnOYLygU8IFUcaXBuSDWfZILEm17coKlKG1j4VMdlE6qZ/PmVE33t
KgPjVk172/NwqOx3/W8vuGc14cYImBPOa/un2XPbZtHYg/yO8gocrd7VtfGB1kkD
BhT7ELfuX5Utwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:00 2026 by rpki-client