Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          6MwnzIPSODxr+WftE9VQuZH331u1FbhsdRreogRAlzw=
Subject key identifier:   21:C7:BD:95:B2:FF:BA:73:03:7F:39:3D:EF:91:9D:84:F7:92:5A:52
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019CE447BBB7674C37F3EDBADFEA1A9A9BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          1869
Signing time:             Thu 12 Mar 2026 23:00:32 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:32 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:32 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: 32Ym66NNRri2H19kGE49j0FBrmF43efAV7z0f2rAotc=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:bb:b7:67:4c:37:f3:ed:ba:df:ea:1a:9a:9b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Mar 12 23:00:32 2026 GMT
            Not After : Mar 13 23:00:32 2026 GMT
        Subject: CN=21c7bd95b2ffba73037f393def919d84f7925a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:9d:1d:f2:9c:a3:4d:0c:de:dc:2a:ef:fb:
                    1c:2d:5c:56:c5:90:a3:24:1c:9d:08:0a:70:ac:fd:
                    56:be:8e:68:74:8e:20:d3:d5:a3:b7:4d:80:ba:8f:
                    1a:5b:a7:e9:15:66:a7:82:9c:cb:92:46:40:5e:31:
                    88:63:ab:5a:1d:84:76:5f:0a:54:bb:3f:25:d4:4a:
                    33:30:9c:59:67:7d:30:b1:3f:f4:2d:0b:7a:ca:1a:
                    e2:23:59:67:27:22:60:df:5e:47:7b:e1:8b:b6:5d:
                    b3:d3:c8:f6:46:98:1d:95:dc:7e:71:0f:a3:02:21:
                    61:b3:0a:80:bd:28:cf:e1:a6:27:00:d8:55:0c:00:
                    be:39:3b:d1:e0:af:2c:07:12:2f:56:df:3f:a5:bb:
                    5b:04:73:41:8e:04:e2:bc:9e:9e:a8:c6:bb:5e:6e:
                    01:19:b1:96:37:47:cf:59:bd:04:53:48:46:26:0c:
                    4f:36:d5:f6:13:34:49:94:2f:ad:3e:21:6c:b5:c7:
                    44:a9:3d:d8:34:df:70:65:66:31:7c:7f:82:c3:87:
                    25:56:a9:17:d2:67:4b:90:e1:b5:97:f7:26:94:75:
                    ad:13:28:ca:54:fb:01:e4:0a:4f:f9:82:2d:c5:fb:
                    73:66:e9:34:65:63:a3:8c:70:f5:25:6e:c3:36:c5:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C7:BD:95:B2:FF:BA:73:03:7F:39:3D:EF:91:9D:84:F7:92:5A:52
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:74:74:cc:84:e1:49:ac:4d:92:30:72:6d:79:02:aa:29:
         3d:74:0d:c6:46:a9:0e:b2:08:35:e4:64:c1:0c:b2:5f:c8:a8:
         65:65:34:f7:3f:b0:2d:b4:e3:2d:14:2f:01:7f:9a:49:70:5b:
         d9:a9:f7:41:a1:8e:7e:50:3f:3e:fd:89:8c:e0:4b:36:30:1d:
         7b:17:53:ea:a2:b4:75:97:44:ce:da:11:83:02:09:77:0b:9c:
         1a:4d:2c:ff:9f:6e:25:85:b0:cb:99:d0:c0:e8:a7:4d:c9:4f:
         88:4a:13:ed:0a:4a:f6:38:72:fa:49:d3:e6:9a:ae:22:12:a5:
         96:4b:f0:2f:82:b3:4b:4c:f7:c6:f9:dd:9f:5f:7d:07:0d:62:
         bf:8e:c4:9f:c0:61:41:ac:49:db:93:be:95:99:6f:0d:a5:c2:
         4b:a8:dc:7a:9a:76:35:da:01:d4:9c:ee:da:17:82:f4:3b:cb:
         2c:96:31:43:64:6a:87:39:3b:a7:c9:af:7f:53:90:11:b3:0d:
         07:0b:ee:97:ac:0f:75:86:c9:a9:3f:95:f5:04:6f:c6:cc:13:
         1f:f4:82:d4:03:2d:02:f1:f3:ef:39:f1:4e:1f:bc:3b:87:a7:
         10:65:0f:89:3b:ae:ff:5f:cc:58:3a:9a:a0:91:9d:63:38:f1:
         7c:c8:c8:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkR7u3Z0w38+263+oampvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm
YzliMzAwHhcNMjYwMzEyMjMwMDMyWhcNMjYwMzEzMjMwMDMyWjAzMTEwLwYDVQQD
EygyMWM3YmQ5NWIyZmZiYTczMDM3ZjM5M2RlZjkxOWQ4NGY3OTI1YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqdHfKco00M3twq7/scLVxWxZCj
JBydCApwrP1Wvo5odI4g09Wjt02Auo8aW6fpFWangpzLkkZAXjGIY6taHYR2XwpU
uz8l1EozMJxZZ30wsT/0LQt6yhriI1lnJyJg315He+GLtl2z08j2Rpgdldx+cQ+j
AiFhswqAvSjP4aYnANhVDAC+OTvR4K8sBxIvVt8/pbtbBHNBjgTivJ6eqMa7Xm4B
GbGWN0fPWb0EU0hGJgxPNtX2EzRJlC+tPiFstcdEqT3YNN9wZWYxfH+Cw4clVqkX
0mdLkOG1l/cmlHWtEyjKVPsB5ApP+YItxftzZuk0ZWOjjHD1JW7DNsX8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHHvZWy/7pzA385Pe+RnYT3klpSMB8GA1UdIwQY
MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt
NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm
LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCV0dMyE
4UmsTZIwcm15AqopPXQNxkapDrIINeRkwQyyX8ioZWU09z+wLbTjLRQvAX+aSXBb
2an3QaGOflA/Pv2JjOBLNjAdexdT6qK0dZdEztoRgwIJdwucGk0s/59uJYWwy5nQ
wOinTclPiEoT7QpK9jhy+knT5pquIhKllkvwL4KzS0z3xvndn199Bw1iv47En8Bh
QaxJ25O+lZlvDaXCS6jcepp2NdoB1Jzu2heC9DvLLJYxQ2Rqhzk7p8mvf1OQEbMN
Bwvul6wPdYbJqT+V9QRvxswTH/SC1AMtAvHz7znxTh+8O4enEGUPiTuu/1/MWDqa
oJGdYzjxfMjIug==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:02 2026 by rpki-client