Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          aR+TWnIF5Qw80JTAN/4hPFxRHNHglbwx2IGjNYy6K8Q=
Subject key identifier:   AF:6D:24:FB:B9:32:FC:EB:18:F1:47:37:2E:24:BA:90:65:3A:87:E2
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019CEA816C47BAB5A09D8DBB739531821D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          1870
Signing time:             Sat 14 Mar 2026 04:01:16 +0000
Manifest this update:     Sat 14 Mar 2026 04:01:16 +0000
Manifest next update:     Sun 15 Mar 2026 04:01:16 +0000
Files and hashes:         1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=)
                          2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: uhhsLzytlfGq7gJ40FG8ANea0AcOKmJ92xhdgjnHs+M=)
                          4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=)
                          5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:81:6c:47:ba:b5:a0:9d:8d:bb:73:95:31:82:1d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Mar 14 04:01:16 2026 GMT
            Not After : Mar 15 04:01:16 2026 GMT
        Subject: CN=af6d24fbb932fceb18f147372e24ba90653a87e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:28:d6:9c:9f:54:a6:c6:b4:67:65:10:5f:
                    ff:12:09:99:0b:61:bb:9e:47:f4:80:0b:ca:9f:d3:
                    f8:2c:d4:88:9c:bc:4c:98:6a:3e:c2:bc:2b:b2:d3:
                    bb:9e:2b:0f:19:f5:c8:a5:53:bf:1f:04:77:ed:9f:
                    7d:99:5f:0d:4d:93:99:1d:bd:c9:80:6e:40:01:e9:
                    0f:a1:5e:ef:69:d3:21:e3:36:02:45:8d:29:e6:f8:
                    32:12:c8:92:c7:4d:99:00:0f:2f:d9:84:1d:f8:b6:
                    f7:fa:be:bb:6f:26:a1:6a:a2:c9:6a:b3:42:d3:27:
                    cf:e5:47:2e:c5:cb:ad:43:7a:87:16:a0:e8:af:3b:
                    dd:3f:6c:e9:5a:a3:5c:8f:4a:96:91:17:5e:3d:62:
                    ee:82:66:29:77:82:37:11:99:18:e6:f2:55:a2:af:
                    cf:a1:9b:fa:53:85:d7:ad:d7:ef:6b:28:47:69:14:
                    a1:51:35:6c:b5:6b:e6:3e:2f:21:0a:9f:4e:66:1d:
                    47:9e:43:4c:6a:59:f0:a8:e6:2a:77:57:23:61:a2:
                    0a:c9:2a:e6:75:c9:11:98:7f:f1:dc:d4:9c:e1:78:
                    19:a5:71:ef:2e:e4:ea:57:9c:b9:67:1d:a3:bb:ab:
                    a0:e3:f7:67:ca:4a:16:c5:02:dc:24:e2:9c:f3:ac:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:24:FB:B9:32:FC:EB:18:F1:47:37:2E:24:BA:90:65:3A:87:E2
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:f2:e2:87:94:d9:41:2a:61:3c:93:c9:9c:96:7b:8e:0c:
         bb:60:d3:a2:bb:9e:9e:60:50:66:5e:aa:c9:17:95:6c:4b:83:
         a3:b8:bb:00:1c:73:b9:06:88:28:0f:fe:5a:f0:57:6b:ab:1d:
         8f:ba:2b:f2:67:2c:e4:21:57:52:01:53:92:80:30:33:e5:aa:
         59:48:2a:bd:76:7a:c8:3d:0e:df:7a:9e:23:0a:9d:42:08:0f:
         ec:29:ed:2b:b2:c3:8b:f9:e9:39:15:cb:81:df:25:24:1b:98:
         5f:5c:2d:12:23:73:cb:9a:0e:e1:bb:1f:ee:28:5d:7e:ee:56:
         b5:bb:a4:82:d2:ba:33:ce:38:b1:46:1c:c0:0b:a9:bb:79:05:
         ca:a8:02:93:54:46:66:61:69:5b:fd:77:b3:27:ad:96:b0:a9:
         03:fd:49:1f:ea:35:e3:5b:7b:4c:ec:a7:e6:c0:0e:a5:a8:8e:
         bf:4d:3a:70:5e:e6:e5:65:ba:d7:c4:c5:96:4b:1a:e3:b1:ef:
         05:b0:bd:92:10:93:38:3f:8f:89:e7:36:19:f2:2e:ce:41:cb:
         cc:c1:f5:15:d6:c7:71:5a:4a:fa:54:a6:5d:a6:6f:79:a7:be:
         da:c4:41:ab:7f:0f:f1:5c:39:1f:b6:e4:c9:b3:fe:76:42:59:
         1f:32:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:27:55 2026 by rpki-client