Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          vFt+Yz8/5IVs6SLb7GRQAxTAS5P3OyfeTVku57uTGts=
Subject key identifier:   57:A8:61:2F:E9:AC:95:4B:35:44:3E:52:C3:F9:68:24:0F:AC:A7:05
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       019CE5FEFC3CA97F6A509E8364165512F8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          0615
Signing time:             Fri 13 Mar 2026 07:00:18 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:18 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:18 +0000
Files and hashes:         1: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: XGBSboENsaEDqqiOXeDWt+uYUJ2FggyR7EqSdgHTOLI=)
                          2: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (hash: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:fe:fc:3c:a9:7f:6a:50:9e:83:64:16:55:12:f8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Mar 13 07:00:18 2026 GMT
            Not After : Mar 14 07:00:18 2026 GMT
        Subject: CN=57a8612fe9ac954b35443e52c3f968240faca705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:37:ac:a9:76:8b:4f:4e:cd:e3:9a:57:ab:
                    ec:09:e8:e5:07:a3:c9:58:0a:bd:c7:0a:d0:23:c5:
                    d8:01:3b:7f:38:dc:32:12:33:9d:11:5b:c2:58:2a:
                    f3:62:e3:76:1b:41:fb:3d:95:16:2a:1a:72:82:0d:
                    8f:6f:2b:85:da:8e:c1:7c:42:a0:35:13:b1:de:c3:
                    13:e6:24:88:4b:0c:4e:78:ef:70:65:3a:49:51:36:
                    84:3f:14:e7:a1:af:d3:5d:1a:5f:ac:3b:c0:55:9e:
                    0c:0c:af:99:28:e0:7f:da:c5:26:d8:39:61:34:66:
                    0f:9f:57:06:c8:6f:ed:1a:54:be:41:77:e5:3d:d7:
                    ce:54:ba:7b:f5:6a:b1:4b:0f:00:87:e2:66:7c:e4:
                    66:89:a6:f9:b6:82:68:a5:d0:21:14:d1:6c:61:25:
                    ce:9b:0b:31:73:1a:74:ff:f8:ac:95:8d:7e:dd:56:
                    d3:a3:b9:d3:57:33:3f:88:72:31:a6:9c:84:da:40:
                    ba:7c:01:a0:8d:e3:51:38:a1:de:bc:ea:c2:0c:d4:
                    5d:4b:cd:ed:c8:15:47:b1:1c:a6:eb:57:3c:08:e6:
                    6f:6b:a9:f5:67:9a:c9:da:26:66:5c:aa:31:bf:28:
                    bd:1e:4e:16:d0:a7:b5:70:fc:e5:f7:0c:40:a3:0a:
                    50:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:61:2F:E9:AC:95:4B:35:44:3E:52:C3:F9:68:24:0F:AC:A7:05
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:4e:50:b6:62:75:ee:ed:8c:69:0e:86:91:50:11:d8:55:
         38:71:c1:9a:d1:26:b9:b1:7d:6f:56:a3:22:a3:c7:36:4b:b1:
         91:0c:76:e5:d3:c1:44:86:f5:d1:59:19:d1:5a:ef:0d:77:a7:
         1a:3b:81:dd:05:e2:41:16:d2:2a:ed:7c:a6:83:b6:89:28:62:
         71:9e:29:29:b3:c4:9a:5b:23:44:6c:37:ca:75:42:d5:38:bd:
         44:b7:1c:e4:e7:8d:64:a5:9f:64:17:48:32:dd:76:86:49:b8:
         a6:c9:18:53:87:f0:d9:e8:23:5b:51:cb:b1:f2:91:96:b8:41:
         53:59:a6:6f:38:b6:b8:0f:86:3c:0b:2d:79:d7:15:a6:dc:16:
         8b:6c:7e:92:7e:ee:76:a8:19:52:3d:c5:02:32:c9:5d:42:2e:
         f3:38:0f:b4:33:44:9a:76:61:ed:b6:45:33:72:ab:1d:4b:2b:
         7a:6b:b1:ff:bb:81:74:d7:4c:d5:36:8f:c2:69:64:51:f3:37:
         c0:11:e6:1b:24:aa:69:fe:7b:b8:41:f2:79:68:0e:e6:a1:c9:
         96:58:8c:f5:41:d6:2f:03:59:cc:e1:26:22:21:51:22:cc:b2:
         58:e8:71:73:06:5e:a2:a5:32:63:8e:5c:c7:4c:14:a3:33:59:
         a0:eb:32:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/vw8qX9qUJ6DZBZVEviiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz
NTA5ZTYwHhcNMjYwMzEzMDcwMDE4WhcNMjYwMzE0MDcwMDE4WjAzMTEwLwYDVQQD
Eyg1N2E4NjEyZmU5YWM5NTRiMzU0NDNlNTJjM2Y5NjgyNDBmYWNhNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaU3rKl2i09OzeOaV6vsCejlB6PJ
WAq9xwrQI8XYATt/ONwyEjOdEVvCWCrzYuN2G0H7PZUWKhpygg2PbyuF2o7BfEKg
NROx3sMT5iSISwxOeO9wZTpJUTaEPxTnoa/TXRpfrDvAVZ4MDK+ZKOB/2sUm2Dlh
NGYPn1cGyG/tGlS+QXflPdfOVLp79WqxSw8Ah+JmfORmiab5toJopdAhFNFsYSXO
mwsxcxp0//islY1+3VbTo7nTVzM/iHIxppyE2kC6fAGgjeNROKHevOrCDNRdS83t
yBVHsRym61c8COZva6n1Z5rJ2iZmXKoxvyi9Hk4W0Ke1cPzl9wxAowpQVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeoYS/prJVLNUQ+UsP5aCQPrKcFMB8GA1UdIwQY
MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt
OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl
LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/NOULZi
de7tjGkOhpFQEdhVOHHBmtEmubF9b1ajIqPHNkuxkQx25dPBRIb10VkZ0VrvDXen
GjuB3QXiQRbSKu18poO2iShicZ4pKbPEmlsjRGw3ynVC1Ti9RLcc5OeNZKWfZBdI
Mt12hkm4pskYU4fw2egjW1HLsfKRlrhBU1mmbzi2uA+GPAstedcVptwWi2x+kn7u
dqgZUj3FAjLJXUIu8zgPtDNEmnZh7bZFM3KrHUsremux/7uBdNdM1TaPwmlkUfM3
wBHmGySqaf57uEHyeWgO5qHJlliM9UHWLwNZzOEmIiFRIsyyWOhxcwZeoqUyY45c
x0wUozNZoOsylQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:36 2026 by rpki-client