Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          /YRqEYTu/i7DA79VNrMS/2Y5mE86vCNKMLSGXoQ0g4o=
Subject key identifier:   1E:0A:92:4D:77:05:92:A7:09:5A:D1:43:44:56:C7:11:AC:F1:47:A0
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       019D051CA574EF5011D55A87DCCA6484D789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          0A84
Signing time:             Thu 19 Mar 2026 08:00:56 +0000
Manifest this update:     Thu 19 Mar 2026 08:00:56 +0000
Manifest next update:     Fri 20 Mar 2026 08:00:56 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: 6TztQ9vNJm7udwDxHnQzF59vclEVjjiMVb2oO5J7LGU=)
                          2: QfmQSbGn-rduzrFqyr6Sbemoe_M.roa (hash: osfrqMp9JnWBuxKfciaGluVi+EkA7SyhrK0LWIgUKOM=)
                          3: UPMg7rWjV3hDDE0mnmogG2n2blk.roa (hash: JwH0lLPwflRE6ZZP7SZUGCLHGbBuaoFOuDPOldCNPLk=)
                          4: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (hash: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1c:a5:74:ef:50:11:d5:5a:87:dc:ca:64:84:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Mar 19 08:00:56 2026 GMT
            Not After : Mar 20 08:00:56 2026 GMT
        Subject: CN=1e0a924d770592a7095ad1434456c711acf147a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:30:13:a4:5f:3f:1a:9c:88:23:2f:d8:90:
                    69:be:86:da:c4:f8:7e:63:b7:bc:64:6d:91:56:42:
                    e8:c7:18:6e:46:26:71:a0:b7:57:e2:bf:79:6b:fc:
                    8e:70:8e:31:1c:19:0a:4e:45:76:86:3d:45:aa:99:
                    f6:d2:9d:99:ae:0d:ed:be:23:f9:53:5b:a4:62:52:
                    23:9e:0a:e8:e1:b8:17:14:60:2b:b9:5e:32:4d:d4:
                    03:4d:f7:19:69:8a:e1:37:2a:ed:11:f4:97:36:24:
                    71:6a:f8:61:28:f1:b6:f7:ff:19:af:b2:90:30:de:
                    43:64:2b:25:98:59:af:6c:ba:49:00:fd:14:91:1e:
                    5e:21:b6:5b:10:29:f3:84:84:16:f3:2b:60:d9:1f:
                    4c:4a:66:a9:68:e4:37:63:3b:70:50:b3:22:12:c6:
                    70:b3:3e:e1:23:2c:38:13:09:63:43:54:4d:de:3b:
                    3c:fb:8b:80:80:cc:6d:80:55:59:be:5f:f3:a2:22:
                    8a:a5:b3:46:6f:3f:61:ae:e5:8e:87:9b:06:b7:fe:
                    02:cf:df:cb:d1:cb:6c:44:c2:2f:2a:87:5d:d1:fe:
                    42:d0:d2:87:f1:5d:d0:04:c5:1a:b5:5d:e4:25:12:
                    49:70:0e:a3:c4:42:9c:c9:66:12:55:05:64:52:18:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:92:4D:77:05:92:A7:09:5A:D1:43:44:56:C7:11:AC:F1:47:A0
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:21:b7:80:f2:78:10:d9:fc:79:58:74:be:fb:d3:e6:ab:
         fa:3e:f9:b3:38:e7:73:74:12:aa:8e:af:9c:4c:12:da:9e:8b:
         e5:c6:81:1f:f5:1d:56:65:45:00:35:e2:f5:08:ab:7b:16:1b:
         f4:0c:1f:2c:d0:8f:33:af:f1:57:67:54:bd:a2:15:44:56:68:
         6a:86:77:b4:fe:02:ed:d5:54:f7:7b:02:37:dc:d2:52:cd:f8:
         07:35:ba:c3:bc:22:ba:31:26:0b:aa:bd:59:70:c4:30:76:f5:
         8d:3b:0e:95:59:8b:12:92:db:be:f3:92:b6:ae:42:32:98:61:
         a5:30:07:29:81:ec:48:15:76:dc:3a:0a:d4:5b:de:61:84:70:
         ac:98:52:62:c3:a8:ef:33:54:98:fa:36:5c:be:3a:25:1b:5e:
         f1:b4:17:f5:e4:87:2d:15:55:70:ea:b6:20:89:4a:a8:25:54:
         ce:ea:e1:16:c2:51:a8:9f:29:49:22:29:51:c9:31:96:8d:26:
         d4:95:5e:ad:ce:9d:91:b2:5f:ef:64:50:d7:27:32:69:49:e5:
         10:78:be:ad:77:10:f8:55:60:a9:d3:1b:d0:8e:ce:4b:ab:a2:
         d9:d8:57:eb:c6:53:ca:6c:7a:4c:17:b8:81:b8:b9:b3:4d:d9:
         e5:3c:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:01:24 2026 by rpki-client