Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          YOhpAPh3xP++ezmTnm2qogWmqm4oEm3RbAk/4eFmOyM=
Subject key identifier:   77:BD:70:C8:6A:34:1D:29:57:BC:D8:F2:F4:24:45:A5:76:12:15:A6
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       019D3A8B099C5212AF21AB1A93F353E2DE1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          0218
Signing time:             Sun 29 Mar 2026 17:01:23 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:23 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:23 +0000
Files and hashes:         1: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: 3vWrZE+OYPQ97WVzW8JXpSz/CZe5SBVtD4vsUz7cwL4=)
                          2: vSLbgxeH91r7M2JRpNUpQwdC5-I.roa (hash: AdNOFRCrmnc/Q9ZTTzxNg6TKfbh1MeWTSjQqXPic1XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8b:09:9c:52:12:af:21:ab:1a:93:f3:53:e2:de:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Mar 29 17:01:23 2026 GMT
            Not After : Mar 30 17:01:23 2026 GMT
        Subject: CN=77bd70c86a341d2957bcd8f2f42445a5761215a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:4a:2a:5f:65:07:50:ad:14:67:d0:f5:63:
                    1c:3b:d2:63:79:2c:87:07:bd:34:29:93:58:e0:c7:
                    24:84:82:47:b6:05:a7:f3:ec:71:85:b0:bf:00:e2:
                    cc:5b:22:70:78:07:b6:19:71:5d:12:40:2a:c9:75:
                    aa:21:7e:09:a2:88:aa:83:a5:4d:3d:67:79:85:9e:
                    8a:25:5a:3c:c7:54:f1:fd:d4:69:78:e1:6c:9f:16:
                    97:b4:23:d4:89:4c:a2:8d:4a:0a:bc:f8:c0:cb:8a:
                    73:b6:e6:56:d4:f4:93:9e:54:a0:5e:0c:5a:00:a1:
                    57:ec:ac:fd:46:cd:01:7d:8c:63:4a:ae:fa:65:dc:
                    ec:63:60:88:f6:33:52:50:9b:88:cf:1a:81:b6:4e:
                    3c:5c:09:10:26:d8:24:e2:4a:93:aa:f3:b0:76:9d:
                    74:46:8c:7e:89:45:b2:90:f3:65:49:3b:0f:4b:56:
                    73:59:f3:9a:e3:4c:93:b5:2a:b1:43:47:f4:17:8e:
                    1a:c5:8a:a1:98:6d:19:f9:0f:b3:e9:c9:78:fb:3f:
                    3b:84:90:fb:a0:32:9d:14:00:24:80:36:62:ef:a8:
                    bd:6d:1a:33:64:5c:74:a2:58:34:d1:f2:bf:31:92:
                    0a:6f:0e:90:39:8a:2a:12:49:09:f7:a1:06:1e:b7:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:70:C8:6A:34:1D:29:57:BC:D8:F2:F4:24:45:A5:76:12:15:A6
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:e4:28:d1:af:52:c6:cb:2f:e7:3f:04:fa:95:af:6c:d9:
         22:8f:5f:a1:72:13:73:c3:be:dc:65:37:91:20:14:86:d6:0d:
         fc:9c:8c:19:dc:66:d2:c5:0a:0c:a1:cc:bb:21:a8:ef:9b:45:
         d2:c5:8c:07:91:f4:bd:bb:73:93:47:09:77:9a:00:6c:37:92:
         55:4e:91:8d:29:7d:4e:b9:08:e6:d0:aa:a0:31:88:f0:76:f8:
         f8:3e:ac:fd:85:b6:f1:2c:67:23:99:5f:51:a2:20:4b:fb:68:
         39:74:99:09:ee:0b:5d:c2:96:15:bb:23:f4:87:cf:e6:a6:f5:
         e0:3b:f8:ac:1a:7c:28:b1:f1:70:8d:bd:a4:57:92:71:d1:11:
         31:d3:b5:f5:35:51:76:99:fc:86:c9:53:3f:b7:b8:f0:3c:ad:
         38:e6:41:8c:11:cc:5e:db:a3:d3:d1:cb:42:31:f7:c3:ca:a2:
         bf:ff:94:2e:70:82:87:75:8a:38:8b:f1:96:60:b8:e3:aa:93:
         b1:d7:ec:72:7c:b4:0d:79:e5:93:86:e4:19:9b:34:c9:25:cf:
         83:d3:5a:31:8a:b2:7b:da:89:23:e5:8c:eb:0a:3a:18:a8:ae:
         0b:19:25:80:c7:af:9a:51:a9:2e:0b:b4:69:10:a7:cf:78:2b:
         75:cb:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:42 2026 by rpki-client