Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier:          FOr0dof+IThwqPu9ZYn137iJQhvOr2UXFsT2PMrFJ0Y=
Subject key identifier:   93:CE:8A:04:25:66:99:7B:6E:00:C2:6B:2A:7B:14:8B:57:49:00:56
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer:       /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial:       019D37527A30E23F4A1425BBBBEFA88EA009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number:          15C7
Signing time:             Sun 29 Mar 2026 02:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:45 +0000
Files and hashes:         1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: jgjUcC8zjp9gtZVcxZ4npHLpHV/leArJM60EPfpWe8s=)
                          2: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (hash: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:7a:30:e2:3f:4a:14:25:bb:bb:ef:a8:8e:a0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Validity
            Not Before: Mar 29 02:00:45 2026 GMT
            Not After : Mar 30 02:00:45 2026 GMT
        Subject: CN=93ce8a042566997b6e00c26b2a7b148b57490056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:cc:58:dd:84:0a:85:d6:eb:7e:f6:73:ec:
                    9f:31:c4:ba:a7:50:b1:92:22:e3:47:2a:7d:14:e2:
                    39:29:e7:70:41:13:98:67:28:e3:55:0c:eb:1a:24:
                    5d:82:47:d0:58:37:6b:e4:34:d6:b4:6f:1d:58:0a:
                    6e:5f:39:f4:f9:bf:63:d1:ed:84:c8:2b:d9:a8:33:
                    ba:17:33:fb:fb:15:26:45:89:f9:be:f7:a7:85:d0:
                    03:a8:3c:b4:80:40:7d:54:3b:9c:8d:59:d1:e0:28:
                    db:67:e2:b5:fa:c6:09:f0:44:55:88:8b:34:f7:d5:
                    ba:3f:31:39:06:be:36:40:97:a8:ed:8a:d3:02:47:
                    f4:26:e9:64:cb:8e:83:c7:d0:b8:b9:c5:8e:8a:9d:
                    05:1a:75:a4:58:4b:05:61:2b:4e:80:5e:d1:e0:70:
                    53:10:70:1a:df:af:35:ac:d5:c2:f4:de:27:f7:06:
                    1d:10:09:e8:63:3b:d3:e7:77:54:f7:85:17:35:cb:
                    3d:a6:11:66:c3:ad:ce:b2:e2:6b:6a:81:43:53:1c:
                    58:5d:1d:19:d3:d2:f5:69:a8:62:e4:4d:f6:fa:f2:
                    18:ce:4b:ee:28:a1:cc:d6:4a:3a:73:0e:86:88:12:
                    e8:c6:a7:b9:73:c9:dd:8a:65:10:59:a6:9d:1c:0f:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CE:8A:04:25:66:99:7B:6E:00:C2:6B:2A:7B:14:8B:57:49:00:56
            X509v3 Authority Key Identifier:
                keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:90:2d:54:b8:71:36:d6:60:f4:d8:ed:24:59:ea:bc:d8:0d:
         55:ec:cb:9e:ec:4d:df:6d:93:80:18:69:b0:8d:74:ba:5c:5f:
         05:b4:14:f6:fb:89:b4:fd:70:8a:79:69:fd:69:df:51:01:76:
         06:dd:c4:74:4d:63:50:2f:3f:97:ba:af:ad:ca:23:f7:3d:4c:
         e9:48:f6:4f:8d:47:de:b8:97:c5:57:e4:0f:b7:b7:23:83:f8:
         34:fe:55:af:73:19:9b:1f:5c:9f:85:1a:76:62:8a:07:d3:1b:
         b3:24:ff:99:30:45:e9:e8:66:72:67:5f:89:34:53:0b:5f:71:
         b9:78:d1:0a:08:27:55:6c:3d:71:1c:60:b4:25:99:78:46:b9:
         b0:67:ee:57:43:87:82:c4:ca:c5:99:16:a0:05:7a:25:b4:e7:
         f4:88:e1:35:9d:fb:a0:89:c7:0e:58:27:72:ca:00:29:61:71:
         40:3b:01:ef:4a:ab:30:15:5f:ab:7c:9a:82:34:4d:56:12:4c:
         3e:9a:7a:b3:09:14:0f:36:b7:88:0c:f4:4a:1c:0d:8c:15:f3:
         de:f6:13:a5:42:80:3a:1f:5b:d5:88:24:7b:ed:68:ac:da:00:
         3e:8a:fd:b2:83:34:7d:9e:43:f6:fa:26:64:8c:19:8f:7c:b7:
         df:59:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:52 2026 by rpki-client