Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          sD6C/ZWlk1gHuyKANpQC1Hfra2F2gPXVHjZI2Bo/vnM=
Subject key identifier:   6D:8F:F4:1E:68:C0:82:8B:05:9A:97:BE:C6:17:FA:0D:7F:B8:B6:D9
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019D39E5DD598DFE8B175A6F32E7200298A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          189A
Signing time:             Sun 29 Mar 2026 14:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:58 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: rHSpNaoHVCuxLaAust/faP10YtlcCVPBUDMcWZ2XbwI=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:dd:59:8d:fe:8b:17:5a:6f:32:e7:20:02:98:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Mar 29 14:00:58 2026 GMT
            Not After : Mar 30 14:00:58 2026 GMT
        Subject: CN=6d8ff41e68c0828b059a97bec617fa0d7fb8b6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:c2:b2:f9:d8:c0:e6:4b:d8:a0:0d:c8:7c:
                    ec:59:d1:15:de:e3:88:c9:f4:5f:d1:0d:cf:39:f5:
                    77:6f:eb:74:4c:fb:20:3f:55:82:4f:d2:b3:9b:71:
                    df:66:1c:db:66:44:4f:99:69:dc:36:dd:df:81:17:
                    08:1e:62:b1:fe:c7:62:b7:fe:9c:34:2b:55:0b:2c:
                    d1:a1:80:22:ed:3b:a0:d4:67:3b:49:e0:27:af:a9:
                    76:a6:b9:8a:ce:21:b6:f8:b6:df:91:54:24:46:9e:
                    62:2d:74:09:b3:34:2e:6a:88:a1:71:8a:3d:95:a2:
                    dd:f1:f3:c8:80:cc:20:e7:eb:b4:6b:36:a1:84:fd:
                    9f:98:e9:00:85:fb:35:7f:d9:25:15:5e:8c:54:eb:
                    e6:2f:92:e3:e4:a7:ad:3c:91:ba:92:ea:a1:03:f9:
                    24:11:d6:46:6d:96:f2:0b:a1:10:df:ac:26:c7:fd:
                    a4:1c:9d:fc:03:ff:c9:c9:5b:30:ba:b4:eb:c2:1b:
                    89:aa:58:07:bd:af:6a:be:c9:6d:57:bc:64:a0:f4:
                    0b:c7:c6:c3:9f:9e:38:55:b6:d0:15:88:14:b9:ae:
                    b1:ff:95:2b:d9:0e:76:6e:da:28:47:bf:e4:0b:b8:
                    51:eb:4d:0b:21:ae:3a:6e:28:f5:50:2a:7e:a7:1b:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:F4:1E:68:C0:82:8B:05:9A:97:BE:C6:17:FA:0D:7F:B8:B6:D9
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:0a:1d:af:c2:04:56:1c:68:ab:45:6e:34:e5:70:2d:8c:
         8b:15:20:82:fe:fb:70:88:6f:da:ab:d1:1f:b5:40:fb:ac:d7:
         f9:ec:1a:2f:21:60:83:2e:c7:cd:52:1f:46:12:59:64:3e:d7:
         4c:fc:32:ea:98:b9:6c:4d:1c:10:36:a3:6a:21:06:c0:4b:b6:
         d5:5b:ae:2f:89:61:51:c3:54:60:b9:15:9d:8c:78:24:37:ea:
         03:8b:fe:1c:ce:23:6f:63:b7:7a:8a:c0:cb:11:fb:2b:74:38:
         ae:ab:6d:89:87:a3:69:11:e4:29:5d:1d:7a:d7:1c:70:cf:fb:
         c6:74:92:3d:52:e7:eb:f4:8c:90:7c:4f:48:f7:67:61:3b:5c:
         9b:9b:28:37:5f:cd:1b:c7:76:a7:2e:e8:be:e9:2d:66:b7:c0:
         0f:1c:c4:9f:e1:40:a2:40:2f:d3:3e:5c:3d:ac:9d:48:f0:e5:
         27:52:97:7a:c1:05:97:ca:96:58:3a:a5:39:ef:6b:8e:26:72:
         bb:5a:33:49:4e:e9:b7:1d:c9:32:59:d9:0c:94:72:3e:d2:a1:
         fe:97:f5:e4:d1:e0:ca:a5:7e:67:a2:f4:d9:be:aa:43:d7:cf:
         75:32:1b:ca:38:a8:be:6d:48:95:de:61:f7:26:6b:8f:f2:68:
         cb:2f:27:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055d1Zjf6LF1pvMucgApinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy
NDZmYTUwHhcNMjYwMzI5MTQwMDU4WhcNMjYwMzMwMTQwMDU4WjAzMTEwLwYDVQQD
Eyg2ZDhmZjQxZTY4YzA4MjhiMDU5YTk3YmVjNjE3ZmEwZDdmYjhiNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXLCsvnYwOZL2KANyHzsWdEV3uOI
yfRf0Q3POfV3b+t0TPsgP1WCT9Kzm3HfZhzbZkRPmWncNt3fgRcIHmKx/sdit/6c
NCtVCyzRoYAi7Tug1Gc7SeAnr6l2prmKziG2+LbfkVQkRp5iLXQJszQuaoihcYo9
laLd8fPIgMwg5+u0azahhP2fmOkAhfs1f9klFV6MVOvmL5Lj5KetPJG6kuqhA/kk
EdZGbZbyC6EQ36wmx/2kHJ38A//JyVswurTrwhuJqlgHva9qvsltV7xkoPQLx8bD
n544VbbQFYgUua6x/5Ur2Q52btooR7/kC7hR600LIa46bij1UCp+pxvelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2P9B5owIKLBZqXvsYX+g1/uLbZMB8GA1UdIwQY
MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt
NDVlYjczOGNiOWM4LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4
LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYboKHa/C
BFYcaKtFbjTlcC2MixUggv77cIhv2qvRH7VA+6zX+ewaLyFggy7HzVIfRhJZZD7X
TPwy6pi5bE0cEDajaiEGwEu21VuuL4lhUcNUYLkVnYx4JDfqA4v+HM4jb2O3eorA
yxH7K3Q4rqttiYejaRHkKV0detcccM/7xnSSPVLn6/SMkHxPSPdnYTtcm5soN1/N
G8d2py7ovuktZrfADxzEn+FAokAv0z5cPaydSPDlJ1KXesEFl8qWWDqlOe9rjiZy
u1ozSU7ptx3JMlnZDJRyPtKh/pf15NHgyqV+Z6L02b6qQ9fPdTIbyjiovm1Ild5h
9yZrj/Joyy8n2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:28:52 2026 by rpki-client