Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          H+4XKKlSRbm7+m/RTReEmnDyI9k5Gd6Ul6A25bcyQkc=
Subject key identifier:   BB:C1:40:2A:8F:2A:04:46:B1:87:AC:45:DB:E6:F8:30:EC:3F:B6:C6
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019D3B2F6961B465B86D9C6176323A9B8FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          15F0
Signing time:             Sun 29 Mar 2026 20:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 20:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 20:00:55 +0000
Files and hashes:         1: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (hash: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y=)
                          2: RQbysAt1GgspnWOfwyBwad4EPWw.roa (hash: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco=)
                          3: TEEO5INFoFOS-MGXLrvKsA4z6og.roa (hash: T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=)
                          4: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (hash: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI=)
                          5: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: 8Ll8I7WloB7nz1d9ktM4nELUaynbsSqgvA/Kcl88h4s=)
                          6: nMu4q2cW92pxZythIIHUZkqmvqo.roa (hash: 7YAsuza7OQtak6icttFz0ei42yjLP0nZELQwsfMtRCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3b:2f:69:61:b4:65:b8:6d:9c:61:76:32:3a:9b:8f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Mar 29 20:00:55 2026 GMT
            Not After : Mar 30 20:00:55 2026 GMT
        Subject: CN=bbc1402a8f2a0446b187ac45dbe6f830ec3fb6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:25:db:cd:6d:8a:f6:19:a2:d3:e9:d3:b9:
                    94:a2:e3:46:55:bf:8f:97:60:fc:92:04:56:7c:82:
                    5f:95:95:68:64:cc:74:b0:8b:4d:49:bb:7b:f9:b0:
                    cc:64:27:92:06:fd:f4:c0:6d:9e:10:2e:37:d2:c4:
                    fe:3d:1e:9b:1c:1f:11:e3:d8:a3:0c:59:56:03:db:
                    33:66:32:04:89:31:80:db:b2:7b:6a:3c:0b:2d:88:
                    51:d6:7a:0b:b0:21:31:52:6d:3e:62:e8:c7:91:83:
                    ec:93:ff:ca:b1:8d:94:7c:41:19:e2:af:ef:ee:c5:
                    89:23:1f:87:ae:39:cb:8a:c1:79:cf:9d:de:cf:20:
                    15:06:10:94:a6:6c:f0:52:54:a8:99:00:ec:97:5c:
                    49:4d:04:ae:6c:da:02:72:5c:f4:f0:c2:a5:ef:de:
                    21:35:9f:88:87:05:99:dc:ea:2c:0c:fd:49:1d:80:
                    c0:70:95:b0:46:79:ee:ff:73:e9:8b:b8:cf:9c:e2:
                    e8:ed:5b:40:6f:fd:72:2e:69:d6:8a:5e:37:81:e4:
                    04:1b:e6:98:7a:3b:96:cd:e7:8c:50:09:00:97:18:
                    b7:5d:46:41:ed:1f:a3:32:dd:9a:ca:78:3b:76:58:
                    23:da:55:58:b4:34:75:71:bb:70:4b:c5:c8:1b:25:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C1:40:2A:8F:2A:04:46:B1:87:AC:45:DB:E6:F8:30:EC:3F:B6:C6
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4a:2f:5f:f8:f6:52:43:cd:5d:26:95:f0:5a:6f:99:15:e5:
         79:b0:a9:74:03:59:8f:bc:a3:40:d5:5a:7d:a1:27:d1:f0:ed:
         6e:65:d0:0a:af:56:49:13:43:60:e8:6d:34:8f:1f:7e:20:de:
         be:a8:b3:08:dc:30:45:c3:d8:f6:ba:e3:fb:69:23:d9:31:fb:
         61:7f:1d:7d:1e:d2:8f:a3:6b:26:93:60:8a:34:e5:28:51:e5:
         35:8b:29:60:b1:fc:7b:0c:43:c7:be:04:b3:d5:9a:0b:ea:4d:
         b8:cf:61:79:9a:fd:1b:7a:90:f7:3a:1a:ab:da:fa:b9:8e:ca:
         47:e1:c6:3f:c5:16:39:b0:0c:1b:5a:98:28:b0:c4:70:d0:0c:
         b7:43:6e:98:d4:b6:76:6c:53:d4:a9:40:30:a4:a7:ab:f7:0b:
         86:60:e9:95:c8:29:30:31:bf:c0:7a:23:88:a8:63:47:30:77:
         94:b7:da:67:5a:2d:6e:ee:4e:af:4b:a9:0d:fa:de:b8:1c:ee:
         b0:d4:db:35:19:fb:b3:bb:fa:c3:ed:db:23:30:ac:bb:ae:7c:
         9e:c8:92:99:3c:90:9c:46:b5:bf:ce:49:fd:ff:ae:70:ab:7b:
         d6:70:40:cc:e3:dc:c3:c3:11:68:b2:4e:13:99:03:d8:89:66:
         a0:54:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:21:27 2026 by rpki-client