Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
File:                     bbMKQaam8hqbLdflhWog1bXv_hw.mft (raw, json)
Hash identifier:          rnbN8Z3ear1CY0mUDkuj0+IvG5j/Kz2F4z5qv2BxHdU=
Subject key identifier:   16:DA:A0:6C:93:B0:D1:84:08:3A:5D:34:EC:5D:F7:40:B9:A2:0C:A5
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Certificate issuer:       /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial:       019D394080BD79E35A46FB7C5F1F5DAA9D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
Manifest number:          0100
Signing time:             Sun 29 Mar 2026 11:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:21 +0000
Files and hashes:         1: KmzjptRoJ7fRzVMuAbPyGaNlK4U.roa (hash: HTQ4SqU1gbnyzbZ9VFLXWOk6V34twlkajlodOkPujZU=)
                          2: bbMKQaam8hqbLdflhWog1bXv_hw.crl (hash: ZPGqfjTd9L5xLWsR7Z7/QrnqfDIZxCz3NjKv1CY+sMI=)
                          3: cgRdj34DpoTUvX6McD-JQwWr-WA.roa (hash: ZVcWw9p279t4mbxBYleG4Xg0e+UqxRd7bXYPDCuxz2w=)
                          4: dFsfHDXFAVvIPBP5nRJqNmbKuXM.roa (hash: YiThV6hGoAFFghLAZu6/Suaci71yHsUeFK7P3D3y8FQ=)
                          5: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (hash: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:80:bd:79:e3:5a:46:fb:7c:5f:1f:5d:aa:9d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
        Validity
            Not Before: Mar 29 11:00:21 2026 GMT
            Not After : Mar 30 11:00:21 2026 GMT
        Subject: CN=16daa06c93b0d184083a5d34ec5df740b9a20ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:bc:69:45:b1:21:4e:71:70:d8:5a:05:53:
                    0f:b9:6e:2e:6e:77:13:f1:10:9b:77:bd:22:34:4b:
                    b3:71:4d:b4:3c:90:36:e4:17:7d:41:40:27:dc:b0:
                    a8:c0:ff:e7:e0:40:75:a4:39:fb:8c:5d:8d:aa:e9:
                    1b:8e:6d:68:9e:14:a6:28:50:55:1d:bd:e3:59:1d:
                    3c:3f:e7:99:7a:e8:6a:01:8b:3d:f3:b3:cf:fa:23:
                    58:a0:ee:f0:d4:26:9b:61:fe:79:fb:ff:64:12:c7:
                    f8:a9:53:6d:ee:43:b7:58:da:7c:e7:76:9c:6f:18:
                    7c:41:79:c2:91:c7:dd:32:51:66:6c:69:83:8c:e9:
                    ae:b7:fe:76:cc:e7:b2:ea:46:06:f6:e1:a0:f1:16:
                    ac:06:ea:28:dc:fd:b9:8e:80:67:c2:1d:7f:33:d5:
                    b5:df:c0:38:d6:73:2d:89:61:cc:08:56:bb:37:bd:
                    ee:f1:12:00:6c:6c:ff:cf:72:ae:e5:da:91:8d:58:
                    3f:03:76:3a:63:93:e0:40:92:7e:ec:51:30:06:a3:
                    e3:78:50:f1:57:6f:c4:3e:05:76:ec:40:c7:bf:f7:
                    b4:65:cc:ec:68:e6:ae:79:5d:5b:20:bf:0d:36:0b:
                    7a:12:0c:ac:d0:05:3b:bc:4b:92:f4:45:fe:9d:bf:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:A0:6C:93:B0:D1:84:08:3A:5D:34:EC:5D:F7:40:B9:A2:0C:A5
            X509v3 Authority Key Identifier:
                keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:bd:b3:ba:0d:79:59:05:b4:dc:46:27:91:1e:a1:8c:b1:
         26:1a:bc:5e:cd:8a:04:0f:a7:47:81:65:67:7f:aa:30:c3:fb:
         9e:c3:ff:6d:ff:48:12:7b:3c:cf:f2:87:da:64:5a:75:c9:e5:
         8e:d2:e8:3d:5d:04:ff:67:f7:d2:42:cb:ce:15:d9:4a:2b:c6:
         16:87:90:fb:58:b7:45:b2:3d:2a:0c:a9:f2:06:5e:35:f7:0c:
         d3:c5:da:6c:f2:05:ea:64:90:96:90:22:3f:f7:e4:c4:f6:60:
         fa:fa:5c:17:93:ac:56:70:85:5c:42:99:ac:96:bf:cc:3f:50:
         27:65:10:de:bf:be:d0:07:64:b0:1b:86:28:15:e0:53:d1:49:
         bb:61:dd:2f:95:92:33:c9:ab:3d:0e:e3:d0:3f:7c:ee:4e:86:
         4b:7d:11:48:18:e5:44:7e:c5:f7:a0:63:e7:52:85:ee:8f:86:
         46:6c:a5:3b:ed:1f:38:16:fe:28:bb:ae:0d:49:1c:8f:b6:f4:
         55:02:65:aa:85:9b:92:32:b9:e4:1a:c2:6f:b8:1b:0e:d7:39:
         e0:22:0f:26:55:36:c3:00:13:6a:c6:ec:cc:53:71:3a:e7:e6:
         6e:59:71:64:81:3b:d9:a2:6f:68:9c:74:81:ea:ed:83:4d:f9:
         4e:37:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:40 2026 by rpki-client