Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          W4OkURf6CQhTTJp72DYgWxEcLYyomo0cqFSWzkdch84=
Subject key identifier:   32:D2:22:E8:E2:21:33:29:16:1D:C1:BC:27:54:81:E0:4C:8D:DF:97
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       019D382E4783E9A4D5E24F83801DB768E602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0581
Signing time:             Sun 29 Mar 2026 06:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:50 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: egbZgDOhrzd6oMgWrkjkoaXdtPqA5+TuI84EZdz2FB0=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:47:83:e9:a4:d5:e2:4f:83:80:1d:b7:68:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Mar 29 06:00:50 2026 GMT
            Not After : Mar 30 06:00:50 2026 GMT
        Subject: CN=32d222e8e2213329161dc1bc275481e04c8ddf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:51:a4:f6:05:2b:35:25:04:51:85:79:14:
                    4d:5c:d2:7c:f3:d8:f2:53:93:01:bd:19:ce:2c:42:
                    17:6f:87:e5:78:e9:27:27:c3:99:97:ce:5d:dc:17:
                    59:c2:f2:0e:d5:f1:e2:2f:9d:fa:20:27:9a:ec:e8:
                    23:3e:dd:99:51:00:d5:6b:37:68:e5:08:92:04:f7:
                    bf:80:96:7a:98:3b:f2:29:3a:7a:81:41:b1:6b:47:
                    1f:ec:01:9c:a9:3b:c3:83:8a:c6:5f:4e:8e:1f:3e:
                    88:d3:18:0e:f8:b4:2e:ae:cc:62:05:7f:0f:14:d3:
                    46:82:6a:58:ac:13:cc:7b:86:85:dd:1e:22:7c:03:
                    4b:8c:97:3b:56:33:66:64:02:f2:42:12:04:6f:60:
                    e7:31:e6:9e:9a:b8:ec:49:48:dc:03:aa:84:3f:db:
                    47:f8:ce:8b:c0:d6:ec:37:04:cb:42:ea:21:c0:51:
                    81:30:3d:45:2c:fb:e7:51:66:66:fb:ad:04:33:fb:
                    7a:bb:94:d2:14:01:8d:6c:59:3f:80:2e:5b:a7:e4:
                    11:0e:15:78:5e:c7:50:23:30:94:38:b0:a0:72:60:
                    66:24:c5:b1:9c:38:6b:9e:13:eb:b8:94:77:12:69:
                    72:11:8e:ad:17:52:d7:ec:8c:53:78:5c:f2:07:d7:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:22:E8:E2:21:33:29:16:1D:C1:BC:27:54:81:E0:4C:8D:DF:97
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:63:f7:49:b9:9a:a0:d0:65:93:f4:60:38:2e:f9:d4:05:
         13:b1:d8:e4:b3:4c:23:a5:fa:80:fa:1c:a4:3c:f1:00:d8:14:
         6c:67:e0:3b:f2:d4:96:36:5a:de:30:da:79:c2:c2:06:38:bf:
         f3:f5:4a:5b:20:90:fa:de:55:49:d6:3c:47:d8:dc:c8:c5:c2:
         6f:9a:50:c7:80:cf:6e:d0:6b:11:8f:db:24:32:aa:00:04:75:
         ae:ba:9a:9e:ce:65:84:ac:a6:88:9a:21:a1:3f:b4:14:26:ff:
         8d:55:c6:26:57:2b:14:29:88:99:b2:e2:45:85:3f:4a:f5:24:
         c7:fe:d6:99:c9:49:53:00:9c:6f:15:62:01:87:52:88:d1:a0:
         f1:af:34:2c:2e:a0:f0:06:32:5a:81:f3:ec:db:e5:84:65:09:
         73:5c:4a:0f:e2:22:c2:8a:47:92:0c:39:9f:74:80:f6:30:6b:
         ec:49:c0:59:a1:fb:8c:8e:c8:4b:cf:2e:9d:f1:03:c6:73:00:
         35:9a:72:93:eb:91:3c:21:e7:29:d2:d3:13:9d:aa:1a:dc:1d:
         4d:d7:c2:c2:5c:26:2f:9d:68:0c:15:34:47:fe:00:12:69:a0:
         3c:c0:9b:48:c5:d6:e5:87:4b:bf:ef:86:0b:8c:5d:4c:06:27:
         4f:e8:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:18 2026 by rpki-client