Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft
File:                     BRxzQau3mPj05kpRhVjIjR_ib9c.mft (raw, json)
Hash identifier:          OC6WV2yX++TSJY/IujdGckMM3uXxlpp53F3tWpUpRR8=
Subject key identifier:   BB:91:1D:EE:FC:B0:E3:E2:7E:D6:B3:9B:16:B7:55:7D:31:E0:13:B5
Authority key identifier: 05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7
Certificate issuer:       /CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
Certificate serial:       019D3A1CC52EA06D52DE17556C0F0F114224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft
Manifest number:          026B
Signing time:             Sun 29 Mar 2026 15:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:56 +0000
Files and hashes:         1: BRxzQau3mPj05kpRhVjIjR_ib9c.crl (hash: RedHXARiBH8uxW+kIS+2XBEa+lFeCpphuQkQjsLYFJg=)
                          2: W_DjI-nKZq9OgGUNObQuWWK-wQk.roa (hash: kXFVL8QlxL4Cb8zN0Zv8DJvFM5qzHm5WWJnrE+ctjkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:c5:2e:a0:6d:52:de:17:55:6c:0f:0f:11:42:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
        Validity
            Not Before: Mar 29 15:00:56 2026 GMT
            Not After : Mar 30 15:00:56 2026 GMT
        Subject: CN=bb911deefcb0e3e27ed6b39b16b7557d31e013b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:cb:02:36:45:96:99:8f:2c:30:f0:b3:f9:
                    53:dc:1e:b9:c1:3a:f8:ae:c3:79:de:a8:19:3c:66:
                    4f:8b:91:f3:8e:f5:82:db:42:43:56:db:94:84:d0:
                    7e:2f:33:5c:2a:74:eb:a9:72:8a:ac:9e:46:e1:78:
                    85:09:b2:f4:a3:5f:fd:c1:0d:f3:b0:7c:82:f2:a4:
                    d9:40:1b:ae:d3:b5:d3:9b:7e:d5:9a:8a:c7:8e:e7:
                    d1:ab:89:0c:6e:1c:fe:e4:1c:43:37:5b:e1:ad:35:
                    02:cb:4e:32:4f:de:79:83:09:b6:da:a8:9f:13:3f:
                    de:07:30:9a:12:b6:9d:f2:e6:f1:fa:9c:8d:9b:32:
                    80:48:6d:76:8f:be:9e:b5:48:51:69:df:ba:a5:53:
                    4d:56:89:11:05:5a:32:ab:c8:c4:2e:ae:fc:11:6e:
                    4c:4d:49:13:4b:58:50:cc:bc:48:13:6f:6e:30:d9:
                    a0:ff:be:70:eb:72:84:74:bc:7b:68:e4:11:d6:fe:
                    b2:4c:1b:79:00:88:08:1b:7e:71:25:b4:31:a7:22:
                    19:31:dd:82:83:a4:08:ec:62:e8:26:a9:ea:0d:61:
                    7d:66:44:f2:c6:b8:23:0f:7e:95:19:ad:df:4d:b3:
                    78:c7:d1:11:f7:13:65:96:00:d5:11:48:db:f7:78:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:1D:EE:FC:B0:E3:E2:7E:D6:B3:9B:16:B7:55:7D:31:E0:13:B5
            X509v3 Authority Key Identifier:
                keyid:05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:08:db:b5:82:6b:5c:29:81:7e:ef:7e:c5:98:70:cc:f9:c8:
         57:11:35:e8:62:f2:6d:1c:c9:bc:38:da:db:4c:1a:bf:db:2a:
         8e:55:57:73:10:6d:41:06:b1:25:03:97:56:f9:6b:31:93:47:
         55:df:01:c7:cf:a1:53:69:e1:0b:c5:86:b5:e9:b5:76:1f:69:
         1c:98:90:f8:99:ce:1b:16:6d:31:0c:08:ae:6e:b4:45:9b:7d:
         f8:56:af:ec:c7:36:ef:2e:e7:c3:28:d6:c1:81:18:04:0b:5e:
         6d:58:12:0b:11:46:05:33:e7:b4:12:92:ff:f2:ea:0f:64:52:
         66:23:01:de:a8:c5:d9:e9:74:67:14:c3:e6:e0:c2:27:0d:15:
         a3:73:86:bf:0f:55:1f:75:99:4e:aa:d6:97:e7:6a:2e:49:cc:
         cc:a6:ca:f0:03:ad:a8:5f:0d:40:f4:f5:a3:2c:c0:6f:23:72:
         91:81:b6:b7:42:a4:40:f3:58:23:09:89:b0:cc:5b:aa:3e:08:
         c5:7d:49:f4:71:c3:ac:44:a8:7e:74:6a:67:9e:76:32:1c:3f:
         31:46:c4:78:09:ba:22:84:0a:4b:6c:cf:81:3b:8c:43:a2:f2:
         14:92:66:f4:01:c2:e3:ad:da:36:8e:af:c6:c5:f4:23:76:8d:
         19:0d:dc:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HMUuoG1S3hdVbA8PEUIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWM3MzQxYWJiNzk4ZjhmNGU2NGE1MTg1NThjODhkMWZl
MjZmZDcwHhcNMjYwMzI5MTUwMDU2WhcNMjYwMzMwMTUwMDU2WjAzMTEwLwYDVQQD
EyhiYjkxMWRlZWZjYjBlM2UyN2VkNmIzOWIxNmI3NTU3ZDMxZTAxM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnbLAjZFlpmPLDDws/lT3B65wTr4
rsN53qgZPGZPi5HzjvWC20JDVtuUhNB+LzNcKnTrqXKKrJ5G4XiFCbL0o1/9wQ3z
sHyC8qTZQBuu07XTm37VmorHjufRq4kMbhz+5BxDN1vhrTUCy04yT955gwm22qif
Ez/eBzCaErad8ubx+pyNmzKASG12j76etUhRad+6pVNNVokRBVoyq8jELq78EW5M
TUkTS1hQzLxIE29uMNmg/75w63KEdLx7aOQR1v6yTBt5AIgIG35xJbQxpyIZMd2C
g6QI7GLoJqnqDWF9ZkTyxrgjD36VGa3fTbN4x9ER9xNllgDVEUjb93jIJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuRHe78sOPiftazmxa3VX0x4BO1MB8GA1UdIwQY
MBaAFAUcc0Grt5j49OZKUYVYyI0f4m/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJ4elFhdTNtUGowNWtwUmhWaklqUl9pYjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NjIyMTQtYWUyOS00M2RkLWE1OWYt
YTRlNDQyM2YxMTcyLzEvQlJ4elFhdTNtUGowNWtwUmhWaklqUl9pYjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NjIyMTQtYWUyOS00M2RkLWE1OWYtYTRlNDQyM2YxMTcy
LzEvQlJ4elFhdTNtUGowNWtwUmhWaklqUl9pYjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQjbtYJr
XCmBfu9+xZhwzPnIVxE16GLybRzJvDja20wav9sqjlVXcxBtQQaxJQOXVvlrMZNH
Vd8Bx8+hU2nhC8WGtem1dh9pHJiQ+JnOGxZtMQwIrm60RZt9+Fav7Mc27y7nwyjW
wYEYBAtebVgSCxFGBTPntBKS//LqD2RSZiMB3qjF2el0ZxTD5uDCJw0Vo3OGvw9V
H3WZTqrWl+dqLknMzKbK8AOtqF8NQPT1oyzAbyNykYG2t0KkQPNYIwmJsMxbqj4I
xX1J9HHDrESofnRqZ552Mhw/MUbEeAm6IoQKS2zPgTuMQ6LyFJJm9AHC463aNo6v
xsX0I3aNGQ3c7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:17 2026 by rpki-client