Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File:                     bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier:          NBt05AAR3P67S+LDXoQbCsgthhZSC/JCe2sHhwGxJvE=
Subject key identifier:   98:2D:BE:95:5F:58:4D:30:0D:C2:76:55:5A:91:40:CC:D0:FE:55:68
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer:       /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial:       019CE59143C54F03B87E276D8788B2E145E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number:          1860
Signing time:             Fri 13 Mar 2026 05:00:28 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:28 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:28 +0000
Files and hashes:         1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: YgyYelw7sWn1g/5PyWQDScWFqONuEdWS6WX7T8Y+VHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:43:c5:4f:03:b8:7e:27:6d:87:88:b2:e1:45:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
        Validity
            Not Before: Mar 13 05:00:28 2026 GMT
            Not After : Mar 14 05:00:28 2026 GMT
        Subject: CN=982dbe955f584d300dc276555a9140ccd0fe5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:48:28:cd:df:33:bc:d2:bb:f0:6b:3f:67:
                    d2:17:16:24:ee:16:3a:18:1c:f1:25:02:fb:36:f5:
                    47:2f:db:d9:07:7c:7d:d5:91:b3:d1:0f:c7:2b:8e:
                    c9:bd:7c:66:68:8e:4d:5d:a8:fb:45:67:41:28:4c:
                    9b:d6:86:7d:79:19:c6:60:a4:53:b1:96:ff:79:f9:
                    ac:ab:be:73:55:8a:74:e7:ea:9a:be:b2:3c:22:94:
                    d2:07:c4:dc:b1:74:68:be:ca:0b:51:8a:a7:b5:c0:
                    74:b3:48:61:76:96:85:d2:1f:e2:f1:d1:92:20:08:
                    49:d5:bf:4e:ac:4d:05:1f:f0:79:a8:6b:fb:4f:01:
                    c1:5c:ee:20:7c:d7:11:3e:3f:70:4f:3e:5d:e2:4c:
                    ce:7d:20:10:2b:39:69:7c:0b:9a:34:22:28:0f:d3:
                    e4:54:c1:af:0a:98:6d:02:e9:3c:29:a5:0c:f3:d0:
                    b0:17:0a:dd:b2:88:0a:37:4d:9d:2e:14:64:4b:d7:
                    7e:c8:3a:10:76:05:8b:5f:35:c0:c9:be:49:d7:35:
                    ce:12:22:8e:ef:71:48:18:7b:a7:6b:1a:33:19:b3:
                    64:fc:6c:8d:3d:e7:f9:2d:eb:53:d5:a9:59:36:ca:
                    0e:e9:86:64:11:b7:32:45:62:52:26:6e:39:04:6b:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:BE:95:5F:58:4D:30:0D:C2:76:55:5A:91:40:CC:D0:FE:55:68
            X509v3 Authority Key Identifier:
                keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:aa:ab:31:43:36:cc:db:43:f4:58:ba:55:dd:49:e1:2f:
         eb:ad:07:7a:64:d6:8e:f2:b8:f3:41:64:1c:83:20:4f:a7:64:
         aa:e3:df:f4:5f:f4:61:d1:f9:f8:c5:62:9e:16:e5:f2:d0:04:
         c4:ee:77:2b:35:6f:b2:f8:cb:be:09:bb:88:f2:db:0d:48:1f:
         79:b8:a1:a9:14:32:7b:da:53:df:9c:01:85:8a:ff:ee:3b:4f:
         38:34:5b:f3:27:4c:fe:80:c1:d2:ea:df:2e:5a:e7:92:de:89:
         0c:a3:da:e7:63:62:ba:3f:aa:64:44:e0:67:2a:68:23:bf:bb:
         bf:b4:56:ce:80:2a:fc:9d:2a:d0:72:cf:e9:8e:d5:44:26:12:
         35:5c:1b:84:49:85:35:ea:22:fa:c2:09:a7:24:31:b1:94:2d:
         a8:74:c3:41:96:8c:04:28:7f:12:b2:6c:b1:fd:5b:1a:a9:65:
         2d:f5:ad:74:77:25:c5:3b:ab:91:4b:6d:2f:24:b0:2e:61:5d:
         99:bd:9b:8a:ff:29:4a:6e:46:12:4f:ce:be:b3:22:7c:d8:15:
         c2:bb:84:36:82:ab:9f:d2:68:32:cd:e6:2d:81:bb:b8:bc:4b:
         83:00:db:42:74:48:e3:13:ed:a8:6c:9e:06:b0:0f:a8:d2:47:
         f5:4f:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:29:44 2026 by rpki-client