Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File:                     Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier:          sJ0U3bsZ2PGWNELfAq/4Y9ZegSR8UFaU58d4WcZhRsA=
Subject key identifier:   DD:DE:73:3E:04:29:DB:2F:A0:C9:52:F5:3C:D0:7F:88:43:E6:BB:A7
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019CD91FF7CC5DD65EE3196FE8E5799E9EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number:          14B3
Signing time:             Tue 10 Mar 2026 19:01:16 +0000
Manifest this update:     Tue 10 Mar 2026 19:01:16 +0000
Manifest next update:     Wed 11 Mar 2026 19:01:16 +0000
Files and hashes:         1: 7VIKCa61Z75pFNublu7wlAtvkh8.roa (hash: d/0djTjrhOewyBKD6bQpZD7nKtygIdgcjwVz9/qNO9g=)
                          2: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: GTncBdkfmCn99mFcVDYqgWhQ9MNo4AyHB/pr1LWQhzc=)
                          3: JyAGENEBYI2RUrGflH3181W7wwE.roa (hash: HdxEi3V75II9paWrrSvMYM0URyA0KzY9zHOSzqzIBUI=)
                          4: uGgURm4xZb_PGCLcLHmslzE7biA.roa (hash: pIGXgkw2db69+0HAwWrFE2B3kXizGYdLfC7lC0LFfVk=)
                          5: wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa (hash: +vnxHkv9IVNBAo2p+O8n8zZLqGi1fGQbtfQSaGakEfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 15:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d9:1f:f7:cc:5d:d6:5e:e3:19:6f:e8:e5:79:9e:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Mar 10 19:01:16 2026 GMT
            Not After : Mar 11 19:01:16 2026 GMT
        Subject: CN=ddde733e0429db2fa0c952f53cd07f8843e6bba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:56:a4:77:c5:75:cd:e6:37:41:b1:7c:77:
                    84:f7:1a:93:82:ee:57:87:bf:7c:e2:c8:8c:67:ca:
                    70:2e:45:31:c9:ff:cf:bb:5c:88:36:99:2a:ca:13:
                    b9:02:49:d7:30:86:b0:6d:a6:db:c9:5b:80:85:80:
                    0c:35:ee:68:c7:d5:19:6f:3f:e3:6c:3d:e0:a3:f9:
                    74:96:7a:a8:f1:8a:9b:d1:ad:55:2d:5b:c3:1b:95:
                    d5:8b:53:fb:e0:e5:84:96:c8:23:ba:1d:f8:05:ef:
                    87:d3:16:fb:46:9d:ee:1b:01:ab:0c:dd:19:1b:c1:
                    ee:29:4d:4f:e7:34:7b:2b:0b:2c:24:19:33:7a:7b:
                    d7:7b:3d:07:d6:49:3f:45:e9:5c:50:d1:10:78:fa:
                    c1:2d:0a:f2:bb:7e:62:56:eb:0c:57:b7:c5:78:71:
                    09:f0:3b:69:43:fe:ed:93:23:cd:74:e4:d5:03:13:
                    56:1f:ef:01:fc:c5:3d:b1:23:68:47:60:aa:ea:28:
                    ab:5c:53:65:c7:d6:4f:9f:5f:b7:b0:f2:af:cf:1a:
                    3b:b5:cb:f9:c2:f3:69:d8:f7:4e:52:d0:c9:03:08:
                    41:b3:cd:a0:b5:48:6a:61:f5:88:71:18:80:d0:6a:
                    73:dd:a7:46:2f:a8:06:86:9a:16:b0:e7:7f:eb:70:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:73:3E:04:29:DB:2F:A0:C9:52:F5:3C:D0:7F:88:43:E6:BB:A7
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:4a:cc:88:e2:2c:d5:16:d9:4c:3a:d3:ac:12:e8:50:9f:
         e4:1d:95:9b:7c:75:f1:d7:bf:65:16:a6:a6:5c:97:39:6b:3b:
         a0:82:1b:66:cb:1a:ef:e8:15:11:53:0d:83:24:fa:32:93:5b:
         29:e5:07:28:46:ad:a5:85:93:4d:da:30:ce:71:a8:25:3f:dd:
         c8:9c:06:ed:a9:a9:0c:f3:54:4a:03:04:a4:f2:18:a4:6b:00:
         da:2d:07:64:b5:85:a6:b7:be:e1:54:30:e0:ec:6e:67:ce:ce:
         33:37:c4:0f:b7:a0:11:0b:f6:55:54:45:e9:28:89:57:0c:8e:
         08:eb:f9:f3:d1:08:1e:4e:73:6b:fa:5a:79:70:17:89:c8:67:
         d9:58:91:6c:6c:93:75:a3:75:ba:65:9c:8f:f5:64:f0:ab:09:
         ea:3e:23:b8:e7:19:6a:90:53:10:38:e0:64:98:9d:ad:4c:73:
         f7:6c:8b:4a:1c:a0:35:10:b4:c1:fe:4d:37:41:9e:ea:b0:ce:
         1d:85:5e:32:89:78:95:7c:a2:e1:b7:28:2e:60:80:fd:01:58:
         c2:a7:74:8b:c1:79:f8:6e:d4:73:31:ae:43:c0:29:88:28:b1:
         02:b3:50:91:19:ec:2d:42:97:4d:fe:17:c3:e3:15:de:c2:72:
         88:3c:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 00:43:17 2026 by rpki-client