Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          Nvq0KPJSCvggZ/ikKudBcMGX4n/6egv1RW2bBo/EIA4=
Subject key identifier:   45:23:53:AB:E4:AD:49:FE:5D:9D:D6:DB:03:4F:8A:74:38:BF:F3:4B
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       019D37BFF864824C17047EA6D0BA10190679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 04:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:20 +0000
Files and hashes:         1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
                          2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: ooB/bJQIo3nlHiNEtNQjD+42oSbaW03v+ewdX3I8I/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:f8:64:82:4c:17:04:7e:a6:d0:ba:10:19:06:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Mar 29 04:00:20 2026 GMT
            Not After : Mar 30 04:00:20 2026 GMT
        Subject: CN=452353abe4ad49fe5d9dd6db034f8a7438bff34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:f8:19:ce:17:18:51:3c:b3:f1:e0:7b:a0:
                    51:2e:d5:11:3b:e2:9d:19:63:4c:b9:32:56:35:43:
                    07:ab:d8:1f:cc:c4:11:7c:24:d4:0e:7b:6f:73:1d:
                    0f:14:7d:73:08:e3:a6:b7:92:52:fc:0c:60:7b:5a:
                    9e:af:5d:0e:7e:0b:95:bf:10:95:22:c4:f3:7d:75:
                    cc:3f:4d:4c:c7:47:8d:e1:00:5c:c7:fc:fb:2e:8f:
                    5c:f3:f3:40:a9:94:3b:d8:5b:a0:4c:6e:0d:ad:4e:
                    81:a5:76:8d:92:0d:f3:07:20:37:49:de:32:cd:30:
                    4b:1c:6f:e7:02:a1:42:b2:23:a5:cd:cc:a5:86:2f:
                    91:f8:b6:0b:d5:18:b5:cd:fb:22:da:50:45:ab:33:
                    16:54:81:8d:c7:3b:6e:0e:2b:0f:68:34:8e:f0:4d:
                    bb:04:27:3b:79:4e:f2:d7:37:71:e5:82:54:16:b1:
                    93:4f:99:69:8a:97:2f:64:30:cf:c8:73:0c:3f:b9:
                    b6:1a:ad:38:46:12:10:ce:95:58:d6:22:1b:f7:b0:
                    17:75:7d:17:b3:b5:ec:6c:21:24:42:45:bd:0e:15:
                    f1:98:bb:06:c8:ad:dc:86:7a:2d:98:6b:33:7e:75:
                    32:87:89:fb:e0:84:51:1a:1e:2e:97:33:7b:2f:63:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:23:53:AB:E4:AD:49:FE:5D:9D:D6:DB:03:4F:8A:74:38:BF:F3:4B
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:89:20:0f:e3:c5:dd:ea:a2:6c:c7:96:7b:34:2d:53:40:
         56:75:a7:54:cb:64:d4:6c:d9:bb:bf:4e:e3:8f:7c:f7:ac:4b:
         06:46:ba:0d:d0:24:2c:e4:82:92:bc:a4:cf:29:1a:0a:1e:21:
         17:de:00:2d:5c:a2:5f:2e:2f:ab:bb:ae:a5:6e:aa:0e:8f:fa:
         60:85:73:13:90:46:80:ca:24:c8:9c:2b:47:54:26:42:20:e6:
         82:49:34:3f:71:e1:a1:b3:a1:06:69:ca:96:48:4e:08:ba:38:
         75:42:f6:9f:f2:ec:54:38:e9:9c:78:ac:0f:c0:8f:78:3b:75:
         7b:29:0c:2b:e0:0b:95:1c:c7:98:f1:38:14:d6:5f:33:54:ef:
         28:77:05:dc:9c:2a:1b:63:70:b8:6d:28:1d:6c:a3:8a:5c:67:
         1e:34:18:43:54:0f:5c:08:e2:79:59:5d:3a:de:5e:cf:c4:01:
         61:0e:33:5f:6b:9a:5e:32:2d:a1:8e:61:80:fd:e9:9f:88:26:
         e6:63:27:6b:a5:d7:c3:b8:4b:02:0b:fa:22:36:cb:3d:be:7b:
         04:73:0d:13:93:81:5f:91:67:dc:45:70:be:d7:d0:c9:a0:b7:
         84:7c:ca:2b:4f:41:2f:94:d9:6d:ef:74:02:11:02:83:9d:90:
         26:15:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:25 2026 by rpki-client