Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          jtGvop7/8jh9ydutCfpEYDGKoVabBfNbKvrOxVTd/aU=
Subject key identifier:   CC:E0:0F:22:14:1D:16:F5:DF:16:38:77:13:DC:A1:05:F0:84:8F:73
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019D051D8CB3EADDB33B99B134491ADFBC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          0969
Signing time:             Thu 19 Mar 2026 08:01:55 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:55 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:55 +0000
Files and hashes:         1: 1tT6-zSUf6pEClW_lKEL7VHiKiE.roa (hash: X43xYghLS0syhIw7JXoh8hzfwP6Xl71o8J3+Q4661gM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: LyUCC+QuRL9ITbz7j7EihvTrOhFEo723t5NjnfVjTB8=)
                          3: DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa (hash: 6F6Qg6kxedLXKk4s17Vv0in/fOumsyERMHRreHir8U4=)
                          4: dIlVX31KigJ6uzmopk-08_s9BaI.roa (hash: qfVMhGQ1p1bTL3qJOPoO+zrwFToB6+GUrIK7ZBJ8Guo=)
                          5: pRYI-6UQ3yoFuethzPMKeOEwBNs.roa (hash: 9Jr2qQjo4i1NAgsOB4ab/Qa+eaYNGkm+we9jGg2Kgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1d:8c:b3:ea:dd:b3:3b:99:b1:34:49:1a:df:bc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Mar 19 08:01:55 2026 GMT
            Not After : Mar 20 08:01:55 2026 GMT
        Subject: CN=cce00f22141d16f5df16387713dca105f0848f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:27:61:11:de:dc:f0:8c:7f:f4:ca:4a:41:
                    e8:9d:93:69:a1:52:5b:3c:d6:ee:39:16:b5:64:da:
                    bc:f0:4f:6c:90:54:ce:00:f0:f1:30:81:18:d1:ae:
                    54:7a:8a:45:2e:cf:95:4c:0c:b7:d5:34:5b:c4:25:
                    70:a6:a0:45:13:5c:7e:39:23:b4:bb:78:5e:f8:ca:
                    64:5e:0f:9d:04:41:2b:59:68:1b:61:c3:1c:68:4e:
                    93:f5:e7:49:c3:c6:92:b5:76:fa:29:b8:a7:6a:13:
                    6c:46:90:cd:45:af:c3:dc:c3:2e:52:f1:03:00:13:
                    4a:b0:82:12:68:54:dd:b9:53:c2:8c:4f:0e:2a:ad:
                    e6:43:a1:c6:50:2e:fc:3c:4e:3f:5f:0c:d4:c6:7e:
                    f5:73:bb:9e:49:08:74:96:fc:ab:c2:dd:25:05:af:
                    a6:2e:08:f4:81:68:f8:e8:c1:a6:29:16:13:e9:e6:
                    69:41:12:d7:54:40:ae:4a:3e:0f:c6:aa:27:aa:20:
                    f2:b8:b9:87:64:5a:c6:88:3c:d4:f6:04:4d:57:b5:
                    2e:da:b4:a9:f6:5b:d4:61:e4:3c:e4:a1:98:84:61:
                    d5:03:cf:aa:45:a6:b2:9a:18:01:94:95:43:b1:fc:
                    01:62:08:6d:78:d8:9a:4d:69:84:5e:e2:1f:46:a5:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:0F:22:14:1D:16:F5:DF:16:38:77:13:DC:A1:05:F0:84:8F:73
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:5a:34:9a:24:4d:55:ec:71:98:84:db:05:38:f2:91:5b:
         20:7b:e6:d2:10:fa:60:3b:89:05:cc:98:24:a9:99:c4:e3:e2:
         b7:f4:0b:78:d3:7b:c2:12:1b:28:67:5c:30:1e:79:c1:ab:bf:
         13:ae:b9:b9:b6:f4:2e:2b:66:78:fe:13:de:a6:ec:26:e4:d6:
         e1:05:76:17:6c:1a:d3:9c:68:16:18:74:6e:06:4e:d0:02:ad:
         9a:39:8f:15:85:ef:80:bc:b5:f5:6b:f0:9c:95:17:7c:4b:a1:
         a1:ca:21:fd:d5:01:12:87:80:f9:c2:cb:87:4e:18:e4:35:18:
         a2:19:d9:c8:81:90:b7:af:27:66:54:ac:f6:fe:29:7a:d4:3f:
         9e:c0:c5:b9:6c:28:cb:83:2c:1a:3a:89:07:6f:f1:c5:ab:c4:
         b1:61:16:80:2e:72:d8:f0:21:2c:a6:1b:83:d7:df:65:ab:84:
         3b:98:8f:2c:b4:33:e2:d8:00:91:80:14:31:b8:ed:98:ff:8e:
         23:30:08:2b:0e:09:a2:b5:80:3d:c8:2c:28:b0:96:15:48:9f:
         59:6e:46:3a:b2:a9:ec:fa:29:d7:17:0a:a7:96:bc:8e:0a:b4:
         e2:e6:1e:60:7a:e6:bb:a5:8b:6b:f9:e7:cb:f9:75:af:67:67:
         c2:c1:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:17 2026 by rpki-client