Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          yS4yijG6n1gB4JXGVNwkHwRbQAtq29HsBxBZoWr6fjo=
Subject key identifier:   EB:14:48:5D:EA:82:03:18:95:0B:16:6A:33:9A:21:4D:C1:00:BE:AC
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       019D37C0D69EEC7051CA8A325DF914012761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          8E
Signing time:             Sun 29 Mar 2026 04:01:17 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:17 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:17 +0000
Files and hashes:         1: 39UtiwRanfdVAezzQQpEd13UB08.roa (hash: YxE7Edc+a6NH5tSiYV8kT6sjjgpdiQ4CkWE/R+15ILI=)
                          2: 6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa (hash: Xu4eAyvLY8fcHbJYD67JsRTonGok8ykhcr1+fNZCbpw=)
                          3: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: 4owqk3xDMASVn12UWO0J8ZA6vJXW0Y/kXE1QWPLCCEk=)
                          4: LXq-oiqft7wRDdw64Jvaiks2PDY.roa (hash: kUfgi4D0OUuHWv0dHkOts8Krj7+6E/9PnZ3dk+UjfjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:d6:9e:ec:70:51:ca:8a:32:5d:f9:14:01:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Mar 29 04:01:17 2026 GMT
            Not After : Mar 30 04:01:17 2026 GMT
        Subject: CN=eb14485dea820318950b166a339a214dc100beac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:c3:48:5c:5b:f9:83:f9:9c:10:48:92:63:
                    3d:71:75:4e:a7:fb:a9:49:ad:c3:ea:47:0c:a8:65:
                    70:37:92:a7:08:9c:4a:cd:d3:6a:f6:65:af:fc:45:
                    b0:a2:83:3f:9a:16:5d:e5:ac:90:e3:a8:fe:4f:89:
                    01:98:41:c1:37:41:32:49:06:89:9f:b9:7e:26:74:
                    03:41:9c:a0:d4:aa:2b:be:c7:47:fe:8a:57:e1:8d:
                    8d:d1:08:3a:bf:67:73:76:ad:eb:83:7c:94:5b:56:
                    f3:53:40:56:06:94:a9:9b:e2:d0:f9:7d:f6:e1:ac:
                    39:20:aa:4f:41:92:e8:07:9a:a7:3f:e1:b2:a6:e3:
                    44:83:58:5e:24:b6:2f:fb:c2:30:fd:42:32:73:6f:
                    ba:99:ee:bc:c8:90:a3:b3:1e:86:de:c9:18:b8:ac:
                    a1:74:0f:ff:e9:eb:f3:13:12:54:94:cd:e6:fc:7a:
                    66:8f:d4:5d:60:10:b1:18:41:91:11:49:89:11:29:
                    01:48:79:61:0f:98:b9:f6:1a:88:9a:ee:f6:2b:46:
                    c9:bf:01:1d:64:96:88:3f:6e:a3:d7:a0:89:68:f7:
                    04:47:a9:fc:c0:86:14:88:a6:0a:56:28:8e:04:bc:
                    d4:a6:33:27:d3:d8:88:82:5b:c4:d3:b0:24:62:db:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:14:48:5D:EA:82:03:18:95:0B:16:6A:33:9A:21:4D:C1:00:BE:AC
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:96:b1:cd:e5:75:9f:7a:53:51:8b:4d:56:c0:c8:df:ce:29:
         83:f1:2b:86:d8:31:ac:3d:ef:23:88:b2:2f:90:09:1f:d3:6e:
         78:4e:27:ca:03:d6:b4:d9:42:5c:26:be:2d:f7:8d:3b:5a:6c:
         0d:49:26:0f:1c:00:aa:36:2b:ad:d6:30:2b:b2:50:21:90:7b:
         10:87:92:00:3e:20:33:a3:1f:e7:48:67:a5:4b:87:df:2e:bb:
         54:ef:42:72:18:c9:ad:1a:f8:76:f0:38:8a:52:44:95:b8:15:
         60:c6:16:fd:fe:f4:65:3c:88:fe:e3:a8:28:27:48:87:db:ae:
         32:03:65:f5:fa:17:1c:af:3e:85:78:8e:f1:2f:29:d7:1e:ec:
         d9:95:bb:47:4b:28:4b:9d:78:de:28:70:db:90:4e:3d:ab:03:
         41:55:0b:28:8e:51:7d:35:67:80:0d:4a:fd:de:37:66:42:ec:
         85:1d:fd:67:53:83:54:ea:5e:dd:18:38:e0:4a:2d:e4:87:35:
         18:41:0a:4c:e4:8e:b8:8a:38:38:8e:53:d9:30:f8:9b:dc:18:
         62:bd:14:fd:8e:db:54:b4:e2:3f:e4:8e:c1:7c:f8:bf:89:ca:
         c7:bc:38:8d:8a:ce:ad:bd:d9:0a:71:60:ab:53:1e:2f:c4:d7:
         d1:3a:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:27 2026 by rpki-client