Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          BRsEjuxExry7jkaNvaEeXpPH1fnFOYzmE0Jf14qWUlw=
Subject key identifier:   B8:57:19:FC:2F:ED:28:E4:9A:8D:D1:94:30:29:01:C4:47:8D:43:0D
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       019D3299E54EB1F64F47599B55AEA77EF3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          0545
Signing time:             Sat 28 Mar 2026 04:00:39 +0000
Manifest this update:     Sat 28 Mar 2026 04:00:39 +0000
Manifest next update:     Sun 29 Mar 2026 04:00:39 +0000
Files and hashes:         1: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: sAWRgIS6E7ooh5ZlQwShTshhS8pg58zpbrlQ6fokshQ=)
                          2: BtnTg3UVtCotLWbUTHeLsZgdhVE.roa (hash: Sz+ixKVwiOEIj7coiYEtqiN5kz/+2rKd3V8d+a0dElE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:99:e5:4e:b1:f6:4f:47:59:9b:55:ae:a7:7e:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Mar 28 04:00:39 2026 GMT
            Not After : Mar 29 04:00:39 2026 GMT
        Subject: CN=b85719fc2fed28e49a8dd194302901c4478d430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:c7:1c:a1:69:47:b2:f4:b3:ae:52:d5:8d:
                    f1:15:61:4d:e4:2e:7e:9d:01:5d:60:cd:52:e4:0c:
                    f7:ff:83:3e:93:1f:49:c5:b4:56:9f:74:90:44:79:
                    8c:0b:15:a7:cf:61:06:5a:5b:07:47:bc:bd:7c:70:
                    8e:9d:c3:16:01:50:be:cd:43:f9:b8:41:fe:6d:a5:
                    93:10:6f:68:22:1f:66:79:ce:0d:3e:78:ac:30:4d:
                    ea:b8:af:ca:06:dd:f9:b6:00:a4:09:c1:84:1b:22:
                    73:f9:52:61:84:8a:16:b2:b2:c0:17:86:f4:c8:b4:
                    94:16:fb:17:67:27:8a:41:1d:da:17:94:49:6a:7d:
                    92:6c:bf:c9:92:35:1f:b1:06:cd:58:57:c9:09:97:
                    d7:7b:f6:ac:16:2f:86:7c:ec:5c:37:cb:15:8b:8c:
                    6d:4c:5c:72:e9:8a:3d:2f:f1:83:bd:c9:61:93:7d:
                    9b:38:ee:7f:70:96:69:d0:cd:3f:a6:f9:f8:aa:20:
                    29:19:79:6b:15:77:d4:24:9f:78:4f:02:4b:61:b1:
                    33:99:9a:5f:a3:80:d6:a0:46:43:75:d6:9f:e0:66:
                    36:61:fc:50:56:ca:c3:49:06:db:75:35:ca:5b:ae:
                    10:34:84:8f:2f:2f:66:08:f0:ce:78:02:3d:3f:f1:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:19:FC:2F:ED:28:E4:9A:8D:D1:94:30:29:01:C4:47:8D:43:0D
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:30:53:2e:e6:70:cf:e9:01:a1:38:19:dc:49:2c:c4:f3:19:
         39:82:c6:89:69:b1:f6:3a:04:09:ae:4c:dc:88:78:34:9f:f5:
         70:06:eb:80:0f:c0:68:f1:ab:2a:2d:97:5a:e0:08:73:4b:25:
         18:af:04:21:02:a7:79:cf:6e:d6:72:12:0a:1a:b0:a1:61:4d:
         e0:ae:98:7e:04:01:c9:f2:01:99:41:c9:66:1e:da:95:13:f7:
         95:06:ed:8b:78:b2:ba:ec:a3:20:24:27:d6:92:48:1e:d7:69:
         35:ba:38:bd:65:ed:f7:44:b7:2f:69:22:2f:fa:c5:74:d0:6a:
         66:22:82:b3:b3:a5:6e:ea:5a:a6:1f:05:7e:42:ca:e2:8a:01:
         81:6a:64:d9:47:ca:ae:53:66:72:66:4d:01:29:d0:01:7c:91:
         c4:17:ec:c4:66:f8:d1:71:c2:ef:e2:2e:1c:38:62:09:e6:43:
         55:fb:2e:67:49:69:c5:c1:71:31:d5:20:11:29:72:3a:16:c4:
         66:1f:33:ca:ba:8c:36:31:b9:36:1c:93:fd:ac:b9:2e:6e:18:
         07:27:85:d6:36:c4:aa:2c:e0:fe:75:57:3f:a8:58:de:0f:5b:
         7c:88:b7:6c:93:99:36:41:f6:4f:15:18:58:15:64:dc:84:63:
         54:fb:b5:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymeVOsfZPR1mbVa6nfvPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGUxODUzZTU5NjYxZjkwOGUyMjY5NTBjYmRjNTJiOTdm
NjIxMTMwHhcNMjYwMzI4MDQwMDM5WhcNMjYwMzI5MDQwMDM5WjAzMTEwLwYDVQQD
EyhiODU3MTlmYzJmZWQyOGU0OWE4ZGQxOTQzMDI5MDFjNDQ3OGQ0MzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j7HHKFpR7L0s65S1Y3xFWFN5C5+
nQFdYM1S5Az3/4M+kx9JxbRWn3SQRHmMCxWnz2EGWlsHR7y9fHCOncMWAVC+zUP5
uEH+baWTEG9oIh9mec4NPnisME3quK/KBt35tgCkCcGEGyJz+VJhhIoWsrLAF4b0
yLSUFvsXZyeKQR3aF5RJan2SbL/JkjUfsQbNWFfJCZfXe/asFi+GfOxcN8sVi4xt
TFxy6Yo9L/GDvclhk32bOO5/cJZp0M0/pvn4qiApGXlrFXfUJJ94TwJLYbEzmZpf
o4DWoEZDddaf4GY2YfxQVsrDSQbbdTXKW64QNISPLy9mCPDOeAI9P/GsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhXGfwv7Sjkmo3RlDApAcRHjUMNMB8GA1UdIwQY
MBaAFAfeGFPllmH5COImlQy9xSuX9iETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEt
ZTMwZGQ2NjFlZDIwLzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84YmM3ZTYtMTk4MC00ZTg1LWIyOWEtZTMwZGQ2NjFlZDIw
LzEvQjk0WVUtV1dZZmtJNGlhVkRMM0ZLNWYySVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzBTLuZw
z+kBoTgZ3EksxPMZOYLGiWmx9joECa5M3Ih4NJ/1cAbrgA/AaPGrKi2XWuAIc0sl
GK8EIQKnec9u1nISChqwoWFN4K6YfgQByfIBmUHJZh7alRP3lQbti3iyuuyjICQn
1pJIHtdpNbo4vWXt90S3L2kiL/rFdNBqZiKCs7Olbupaph8FfkLK4ooBgWpk2UfK
rlNmcmZNASnQAXyRxBfsxGb40XHC7+IuHDhiCeZDVfsuZ0lpxcFxMdUgESlyOhbE
Zh8zyrqMNjG5NhyT/ay5Lm4YByeF1jbEqizg/nVXP6hY3g9bfIi3bJOZNkH2TxUY
WBVk3IRjVPu1mA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:50:22 2026 by rpki-client