Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File:                     bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier:          ZA9CXL7QEi5s88ofmkMPqzdpQF4wzHqSduhAoAxCf0Y=
Subject key identifier:   E9:4F:4E:8A:0C:FB:FE:6E:12:EE:F0:0F:B6:99:D6:3A:D9:ED:4F:9C
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer:       /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial:       019CE5FF52174B489DDB27B6415E7FFDE71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number:          1767
Signing time:             Fri 13 Mar 2026 07:00:40 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:40 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:40 +0000
Files and hashes:         1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
                          2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: BjMY4zxYWB65GC4IxFpWf0Mr3UMp3rSrNqJIntRDa44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:ff:52:17:4b:48:9d:db:27:b6:41:5e:7f:fd:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
        Validity
            Not Before: Mar 13 07:00:40 2026 GMT
            Not After : Mar 14 07:00:40 2026 GMT
        Subject: CN=e94f4e8a0cfbfe6e12eef00fb699d63ad9ed4f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:33:f6:2a:c8:98:d6:71:ec:a6:de:3f:70:
                    de:93:6b:08:c7:a7:66:db:70:e6:b7:7d:97:02:5e:
                    f9:e6:5d:4a:92:ce:7e:13:25:e4:3d:7b:f4:dc:ba:
                    fd:8d:ee:f4:be:32:42:fe:a0:d1:34:d5:b7:d1:23:
                    5b:50:df:e3:5d:5f:a8:d2:c4:29:b0:2f:22:03:d0:
                    06:67:9b:e4:38:c3:fe:91:16:76:5d:40:c1:4b:72:
                    6e:1f:2f:14:cd:0b:5f:89:a3:46:f3:62:d7:c9:7e:
                    50:e3:1e:c7:97:78:dd:9e:94:ef:c2:24:07:09:09:
                    8b:50:13:1d:30:99:2e:49:9e:76:aa:9b:66:74:83:
                    e1:39:58:89:b6:81:63:b5:18:f4:36:59:a8:4b:6b:
                    71:87:c4:e4:45:2e:cd:3c:21:9a:b7:9b:3e:33:90:
                    0d:d0:16:55:73:fb:84:1f:60:7f:d1:c4:2b:b9:8e:
                    ed:ab:81:1b:fc:14:9c:19:d1:a1:8c:db:7e:10:d1:
                    36:93:9d:17:46:8f:7a:d2:6b:22:31:30:67:1a:2d:
                    29:bd:44:6c:bc:69:2f:f9:78:14:42:c5:3b:b7:b4:
                    1a:46:41:92:61:d7:c3:a3:28:a9:98:cc:c6:8b:80:
                    76:7b:df:6b:95:e7:aa:50:4f:e2:9f:be:2b:c1:fe:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:4E:8A:0C:FB:FE:6E:12:EE:F0:0F:B6:99:D6:3A:D9:ED:4F:9C
            X509v3 Authority Key Identifier:
                keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:f2:1d:c7:e4:39:91:70:6c:03:6a:51:b9:39:04:fb:52:
         72:c5:fd:4c:97:dc:9f:62:ea:75:75:01:10:6c:24:41:6d:17:
         40:4d:80:5c:07:64:ad:08:75:7f:b9:ff:ea:3e:7c:79:8f:4f:
         f6:7d:24:27:e1:88:ff:ef:32:3b:3d:84:40:72:23:38:e8:6d:
         e9:c8:3f:5f:79:5f:6f:01:16:b6:98:ea:ca:f4:8a:ad:06:a8:
         19:06:fb:ee:d4:d9:33:7f:a0:37:9c:ac:7e:83:40:21:f7:8a:
         13:fc:7b:65:f7:35:43:7a:52:18:b8:6e:be:ff:04:18:33:a7:
         c4:32:ce:97:9e:76:fd:2d:2b:a6:91:08:9c:c7:4c:16:2f:f4:
         2a:73:04:5a:13:e6:aa:8a:d5:4d:91:90:9e:33:45:4e:c7:42:
         02:28:bd:61:bb:6a:00:ca:79:da:03:12:85:0d:70:1e:2f:60:
         72:e5:83:db:f2:80:47:be:5b:e6:dd:21:d5:f9:18:9c:69:e9:
         d1:b0:92:fa:d6:b8:fc:07:ac:09:37:96:64:da:a8:d8:dc:8f:
         b6:ac:25:2a:27:ba:4f:b8:02:f4:13:ad:08:e1:d9:c2:98:ef:
         40:37:49:f2:ce:45:82:25:92:ca:c2:2f:2d:a0:02:a9:e7:ab:
         28:03:39:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/1IXS0id2ye2QV5//eceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5
ZTg5NzgwHhcNMjYwMzEzMDcwMDQwWhcNMjYwMzE0MDcwMDQwWjAzMTEwLwYDVQQD
EyhlOTRmNGU4YTBjZmJmZTZlMTJlZWYwMGZiNjk5ZDYzYWQ5ZWQ0ZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Mz9irImNZx7KbeP3Dek2sIx6dm
23Dmt32XAl755l1Kks5+EyXkPXv03Lr9je70vjJC/qDRNNW30SNbUN/jXV+o0sQp
sC8iA9AGZ5vkOMP+kRZ2XUDBS3JuHy8UzQtfiaNG82LXyX5Q4x7Hl3jdnpTvwiQH
CQmLUBMdMJkuSZ52qptmdIPhOViJtoFjtRj0NlmoS2txh8TkRS7NPCGat5s+M5AN
0BZVc/uEH2B/0cQruY7tq4Eb/BScGdGhjNt+ENE2k50XRo960msiMTBnGi0pvURs
vGkv+XgUQsU7t7QaRkGSYdfDoyipmMzGi4B2e99rleeqUE/in74rwf5ikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlPTooM+/5uEu7wD7aZ1jrZ7U+cMB8GA1UdIwQY
MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct
YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1
LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+TyHcfk
OZFwbANqUbk5BPtScsX9TJfcn2LqdXUBEGwkQW0XQE2AXAdkrQh1f7n/6j58eY9P
9n0kJ+GI/+8yOz2EQHIjOOht6cg/X3lfbwEWtpjqyvSKrQaoGQb77tTZM3+gN5ys
foNAIfeKE/x7Zfc1Q3pSGLhuvv8EGDOnxDLOl552/S0rppEInMdMFi/0KnMEWhPm
qorVTZGQnjNFTsdCAii9YbtqAMp52gMShQ1wHi9gcuWD2/KAR75b5t0h1fkYnGnp
0bCS+ta4/AesCTeWZNqo2NyPtqwlKie6T7gC9BOtCOHZwpjvQDdJ8s5FgiWSysIv
LaACqeerKAM5XQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:53 2026 by rpki-client