Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          p9ruwVW9fiydrZPXmII2UxiaTVIVn0wAq8WOi6rdu5g=
Subject key identifier:   E5:E1:58:00:7F:D2:37:04:0B:EA:F7:5F:AA:E7:2B:BC:D5:EE:11:A4
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       019D37F719534ACE3B5C1857412F35DA7169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 05:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:33 +0000
Files and hashes:         1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: 8ln1gC2Fv63Xmkdm5Sn+EPq3WGPwKSJe2p0LjIgCdcY=)
                          2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:19:53:4a:ce:3b:5c:18:57:41:2f:35:da:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Mar 29 05:00:33 2026 GMT
            Not After : Mar 30 05:00:33 2026 GMT
        Subject: CN=e5e158007fd237040beaf75faae72bbcd5ee11a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:a4:4e:0d:ca:e9:b6:86:d0:d8:28:34:86:
                    84:ca:45:eb:1e:57:5e:95:3a:08:61:2d:93:a6:74:
                    bf:b1:3a:41:a2:1d:02:fc:0b:3a:79:a3:52:63:32:
                    20:f7:db:6c:59:07:33:0d:bf:32:ca:2a:55:c3:1b:
                    98:26:51:0b:68:92:e1:33:b5:58:c4:4f:81:92:24:
                    9d:0e:cf:8d:35:63:be:88:6a:25:6b:c6:ac:a0:88:
                    7f:e2:42:54:38:64:74:49:f2:88:60:4d:f9:fa:63:
                    a6:25:86:f9:3c:69:1a:cd:3c:af:a0:b2:0a:0c:a4:
                    30:ac:8b:39:74:5a:63:87:b0:a8:e0:94:f6:a3:00:
                    5c:b6:03:d5:1a:9e:89:f3:c8:50:26:b2:ae:2d:ce:
                    dc:4e:6d:fa:e9:46:1c:4c:aa:96:87:67:78:66:38:
                    59:da:06:dd:3c:4d:ed:ca:5c:2a:e1:54:4b:35:50:
                    5c:27:b7:59:ec:09:69:8b:4d:0a:e4:58:58:78:23:
                    a6:53:dd:d3:f8:dc:ff:df:e6:6e:f8:20:aa:4b:6c:
                    b4:ea:61:94:ad:92:b4:ce:5f:2c:d3:bf:f9:62:94:
                    21:58:dc:20:ca:33:1b:dc:c9:f8:16:a0:be:0e:9c:
                    1b:01:36:d7:9e:85:78:52:31:27:58:f3:1b:ea:ae:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:58:00:7F:D2:37:04:0B:EA:F7:5F:AA:E7:2B:BC:D5:EE:11:A4
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:42:8f:d8:74:10:06:8c:97:46:b4:06:5b:32:aa:87:68:
         d6:95:1e:e7:dd:a0:d7:dd:b4:f8:89:3d:b5:24:ad:16:95:de:
         18:d2:4f:01:ab:ef:54:47:a6:6b:53:44:61:ff:92:67:a3:a4:
         bf:cf:c0:f6:b6:30:ea:69:42:9d:a6:85:ac:11:a6:91:77:06:
         36:a5:4a:88:6e:b6:d8:0f:44:3b:4a:4b:f0:23:15:60:f5:2a:
         99:8d:cf:3c:b2:5a:69:a7:da:00:22:69:74:67:7b:7e:da:e9:
         55:fc:6d:d4:45:14:b3:e4:cd:74:ba:f7:39:56:ed:1e:15:16:
         58:02:9c:3c:7c:6b:10:13:df:ba:40:19:bc:80:e8:66:24:9a:
         2c:ef:e4:63:95:04:d7:c0:64:2e:07:81:88:49:5e:37:5e:e1:
         87:5b:6c:32:71:11:77:67:eb:e6:39:02:a3:73:83:3d:87:ca:
         dd:e2:e3:ec:fe:e3:76:1e:50:be:10:ee:17:b2:80:38:33:91:
         1d:4f:f5:a6:23:50:7a:8f:da:48:f1:aa:60:6a:f7:99:e9:49:
         af:23:a4:76:a9:2c:65:cb:d3:62:ec:2f:de:c7:4a:8e:64:7f:
         47:33:71:2c:7f:06:39:25:65:04:d2:7e:ee:0c:a5:ea:b5:9b:
         ea:43:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:29 2026 by rpki-client