Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
File:                     sBTC9eALxnh9MoMbieoSTfYonkU.mft (raw, json)
Hash identifier:          M/Y3h66GyqqcIB3/3VMkfhzE3VlAlQzAPP97I+FpC8Y=
Subject key identifier:   EB:CD:1D:E8:7F:A9:CB:82:15:9A:7D:7B:72:5A:72:5E:31:BE:39:67
Authority key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
Certificate issuer:       /CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Certificate serial:       019D3A8ABC7701D276D7F872B613A5BC44D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
Manifest number:          01E4
Signing time:             Sun 29 Mar 2026 17:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:03 +0000
Files and hashes:         1: sBTC9eALxnh9MoMbieoSTfYonkU.crl (hash: wH6zgzBr01skxJPyhXiC5l+vpedmNfTOlMVwqUzQl7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:bc:77:01:d2:76:d7:f8:72:b6:13:a5:bc:44:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b014c2f5e00bc6787d32831b89ea124df6289e45
        Validity
            Not Before: Mar 29 17:01:03 2026 GMT
            Not After : Mar 30 17:01:03 2026 GMT
        Subject: CN=ebcd1de87fa9cb82159a7d7b725a725e31be3967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:8c:cb:ec:ca:a6:48:a4:52:7d:35:2d:e0:
                    7c:61:c6:e6:96:59:0a:72:54:e6:7f:5a:78:ad:cc:
                    d3:f6:67:cf:64:29:35:cd:bc:90:67:21:74:b8:6c:
                    fb:91:11:ae:d5:26:19:25:84:55:2d:64:8e:fc:c5:
                    e3:15:2f:02:94:f7:d0:4a:01:5f:61:09:d7:46:cf:
                    d5:21:23:66:19:d1:07:3c:63:35:eb:65:e4:02:d5:
                    53:59:49:67:45:cf:a8:d3:4d:3f:62:c1:bd:65:4c:
                    a1:fe:6a:aa:b8:0b:70:57:a6:c0:a6:6e:ba:d8:2e:
                    96:25:84:d1:9d:76:e3:f1:7a:2f:0a:1f:3b:92:69:
                    89:f2:ef:78:59:ba:15:ee:c9:bd:04:56:60:0f:59:
                    6d:71:34:28:42:17:3e:0a:92:e7:cc:ec:7b:de:53:
                    d0:0e:60:b5:4f:05:95:4d:ed:30:aa:1b:83:32:05:
                    79:a2:84:76:4f:70:92:a9:55:40:e8:1b:e0:9f:3a:
                    a1:4f:77:f1:c2:fa:a7:89:37:54:13:9e:c6:cf:fd:
                    c1:f4:12:11:17:e5:b6:5b:61:e6:c5:75:04:c2:f8:
                    bf:ba:bf:7a:d4:64:90:4a:4b:d3:51:3f:e8:58:85:
                    20:ed:4e:a7:83:0a:39:98:67:99:03:3b:39:87:aa:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:1D:E8:7F:A9:CB:82:15:9A:7D:7B:72:5A:72:5E:31:BE:39:67
            X509v3 Authority Key Identifier:
                keyid:B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:cc:63:c7:c3:c0:3a:ac:58:48:da:87:b8:9e:c0:a1:d0:
         6c:bd:8e:bb:ad:48:63:72:1b:3e:31:b1:d0:b4:ab:18:a4:1c:
         6a:23:a4:5a:9b:16:e8:cd:0c:64:ed:d7:95:35:9b:5f:cf:b2:
         3f:14:92:37:b8:6a:de:85:2d:81:52:9d:f9:17:02:85:1d:84:
         f6:08:74:dd:d9:8f:92:9a:1e:8d:61:ba:f5:52:95:82:1f:ed:
         c4:35:60:0a:c5:29:e9:51:df:c1:14:4f:ed:da:0b:49:21:12:
         70:87:4a:9c:46:f3:ca:4d:dd:0d:79:e4:cc:0f:78:af:b4:72:
         e7:74:40:8f:1e:e1:f6:82:94:23:73:2f:0f:46:d4:d2:8c:39:
         9c:68:bf:bb:9b:ee:46:ee:d2:a4:2b:bc:cc:24:5b:d6:ab:2e:
         d7:81:66:32:f2:1e:da:8d:49:77:db:32:fe:f4:e4:05:69:55:
         b0:1e:1c:36:3b:06:4b:db:aa:3c:d1:8b:e7:23:4e:05:37:6d:
         33:cb:22:57:c6:8f:8d:46:f5:29:5a:2e:18:0b:a9:62:ee:90:
         1d:b2:ad:29:ad:99:f9:bb:c7:54:3a:72:a5:e5:76:3e:0d:cd:
         0d:4a:7f:24:0a:ff:ad:d3:5e:5a:70:d9:4b:34:f1:ae:43:16:
         f7:e8:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----