Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          YyMSTgYCov7Bz155RMn/B2YJZK5JyKpp95EAKSqmveM=
Subject key identifier:   A8:39:FC:6F:08:E4:7E:66:FB:82:5D:6F:DA:98:06:4D:55:83:98:A0
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       019CE55AA91CBFECD695C6497C6E2C92809C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          1869
Signing time:             Fri 13 Mar 2026 04:00:49 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:49 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:49 +0000
Files and hashes:         1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: fOBSoIlRGjHHJErMldYDx2i1YiQ5ZpONd0ut5eIwLNs=)
                          2: pANXzrraCHYVkzSawo9c9dlj6zU.roa (hash: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:a9:1c:bf:ec:d6:95:c6:49:7c:6e:2c:92:80:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Mar 13 04:00:49 2026 GMT
            Not After : Mar 14 04:00:49 2026 GMT
        Subject: CN=a839fc6f08e47e66fb825d6fda98064d558398a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:0f:9d:82:b0:08:b0:29:d4:86:8e:08:64:
                    5c:87:66:b1:fc:ea:b7:ad:df:fc:77:86:57:d9:49:
                    e7:7d:db:cd:1f:53:a3:32:d6:e6:ef:76:8d:bc:85:
                    f5:3a:76:18:4e:6e:72:7c:10:af:cd:1f:e3:49:00:
                    50:9a:7b:81:f0:a6:0d:a3:f2:df:61:0d:e0:92:32:
                    fa:8c:8f:c9:36:4e:3e:7b:69:be:c7:28:fd:6c:4e:
                    3b:2c:af:23:98:be:4a:1a:27:3b:fc:6d:e9:e4:4d:
                    d1:5a:cd:aa:79:f5:27:b1:9f:9a:64:1d:3f:f8:28:
                    92:8f:9c:04:c6:5e:83:02:e9:76:f3:2b:b7:c6:f6:
                    90:78:e6:fc:f6:29:27:41:ab:8f:7b:8b:76:24:78:
                    87:3d:a8:b6:62:ad:e0:f3:d3:a0:ca:06:1e:c8:77:
                    2b:02:82:b6:d1:4b:d1:69:d0:b5:a7:5b:3e:2f:a5:
                    0d:9e:9b:e7:ca:4e:b9:65:ef:63:fe:3b:a4:14:74:
                    d3:4c:36:79:7c:7c:59:0b:06:a1:71:08:d8:bc:ce:
                    83:75:d9:f1:96:85:68:2c:97:b8:1c:93:3c:36:10:
                    5a:9f:fc:76:59:a4:e4:4c:8e:ca:af:3f:71:61:a9:
                    8f:56:04:19:48:c7:72:c0:26:8f:88:5f:81:2a:87:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:FC:6F:08:E4:7E:66:FB:82:5D:6F:DA:98:06:4D:55:83:98:A0
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:19:43:ff:2e:69:5b:7d:55:25:5f:ae:30:57:cb:3f:1c:
         d3:d8:98:bd:fc:ab:87:74:a9:48:4c:8a:62:54:9f:24:ee:d9:
         7b:4a:5c:f8:00:15:5f:71:2c:4e:a2:96:72:88:ee:0a:f5:04:
         8a:92:70:25:f1:e6:63:11:07:4e:9c:63:18:89:da:75:d6:6a:
         b1:f7:84:c9:48:38:ef:e5:56:d3:ca:a2:3a:ce:7b:ba:f8:f5:
         bf:15:82:36:38:4d:9a:3a:af:df:07:38:76:7a:f6:e4:aa:d5:
         38:5c:a2:2d:6c:23:28:50:b4:98:ab:3a:fe:b7:76:e8:45:26:
         c4:3f:59:ac:db:26:5a:b8:aa:77:b2:82:8a:e9:c6:ac:4d:1d:
         2b:2a:ec:b2:53:09:22:bb:0c:49:01:e1:1b:ea:d9:83:7e:c4:
         cd:b7:6f:c6:c4:3e:88:39:eb:19:83:11:a0:96:61:12:e5:60:
         35:e2:ec:03:88:33:a8:e9:99:31:09:9c:4f:e2:d5:79:1d:38:
         f6:66:7e:33:f1:a1:84:bf:ac:ab:84:6b:64:8b:bc:b5:d8:47:
         e8:31:ce:6d:37:e2:2b:c7:92:e9:e2:99:6f:ec:b7:56:07:d4:
         c6:08:80:8b:9e:bb:3e:a7:3f:77:40:84:74:cc:e3:83:63:7f:
         cc:6d:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:49:40 2026 by rpki-client