Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          YrzIwLEds8tNTZkG4Q8ERbN7RLHj7Frkp8yJudNIZFQ=
Subject key identifier:   F3:99:AC:16:30:6F:6B:EE:27:4F:7C:AA:76:9E:8F:CD:E2:8F:E7:64
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       019CE4EC9C1963D9977458ECE9822EEA0B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          1875
Signing time:             Fri 13 Mar 2026 02:00:37 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:37 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:37 +0000
Files and hashes:         1: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: gyn7kLGKjziy1if4B+e5KF4LH9a1fkBA0Cg+d1aJaC0=)
                          2: BmlFckoCLbkIU9v1cSTyLfBhbrE.roa (hash: P9gavT0xq2zbiSHjEpukS24GWUotqHWhdlBaj5KptM4=)
                          3: QKYlrKpZ6X2KQl9hLK2wLVu9mA4.roa (hash: UFYV8MCcAUa5xElyPFAoCBS6hLf85nWkSt/+WnYwZxs=)
                          4: exjxqyv8hTS9Gp5OL5ZbxerOrX0.roa (hash: PDONFR9O+WpDhKQeLmKKh1Xe7Q/Lbpx8WU5sU+EIl28=)
                          5: gvw5yUDT8VkcGYmB4FemcY9F6Z0.roa (hash: qjzJbkJHWatioGBZd8+uDjCJfFJ0vYZMyqtFG/SE1vc=)
                          6: jkHAenTpuidnXByxveNkRSju7uY.roa (hash: cpn+ySzKd4iMnG4Jk2/pb+mw+Adqpv3Wll4fkTbcVt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:9c:19:63:d9:97:74:58:ec:e9:82:2e:ea:0b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Mar 13 02:00:37 2026 GMT
            Not After : Mar 14 02:00:37 2026 GMT
        Subject: CN=f399ac16306f6bee274f7caa769e8fcde28fe764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:88:79:35:4f:c1:69:08:eb:9a:cd:6b:90:
                    61:1a:4e:b2:1c:13:cd:42:51:5d:eb:7c:1b:2e:36:
                    34:e7:89:ee:5e:73:83:be:a7:47:92:ad:5d:9e:78:
                    d9:bb:35:61:b5:83:69:01:27:14:0a:3a:1e:62:68:
                    dd:76:fa:2c:e1:1c:45:84:d8:63:73:18:4c:92:8a:
                    d6:1d:73:dc:03:16:cb:a3:a6:9a:6c:07:bc:db:91:
                    e7:90:bf:6e:cd:2a:75:df:4b:9b:3f:49:b9:0c:96:
                    6e:31:e1:52:ab:dd:1f:5b:ee:e4:2b:7b:e3:c1:e0:
                    1d:5e:99:b9:47:03:06:c5:69:fa:fe:51:c9:00:35:
                    9a:f5:6e:8c:fd:c2:e5:27:7e:54:da:0f:bf:87:ac:
                    79:64:f3:f9:da:4c:5c:cb:59:04:d7:95:a7:aa:95:
                    57:9c:12:ac:31:e7:a3:b8:49:ba:0d:97:0e:8f:41:
                    93:60:dd:a1:9a:1f:15:9d:3f:a4:94:35:71:b9:a9:
                    b5:97:9c:fc:2a:37:05:27:75:fa:21:34:ca:b9:0c:
                    2f:1a:05:38:49:87:f1:06:bb:5c:60:bc:b2:f0:fd:
                    a9:cc:95:fa:d8:99:c0:ed:bd:d1:2c:06:59:9f:4b:
                    d1:6b:fc:ea:9f:23:f0:65:2c:e3:06:7c:cb:ce:9a:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:99:AC:16:30:6F:6B:EE:27:4F:7C:AA:76:9E:8F:CD:E2:8F:E7:64
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:06:ed:c6:2c:07:53:f0:2c:03:4f:a2:59:f1:57:7d:2b:
         7f:2c:aa:0f:f8:1a:8c:22:57:ca:03:a9:0a:19:7f:f1:f0:76:
         87:80:f1:b7:db:fc:a6:61:b3:66:98:8a:e5:92:aa:fe:3b:1a:
         f8:58:65:a2:83:1a:91:aa:ee:c8:e6:28:9e:fa:00:d4:fe:d1:
         2a:24:e4:cf:c9:f3:37:2b:98:00:73:0a:62:29:36:39:80:71:
         a5:54:79:b1:d5:7c:eb:58:8b:87:39:52:c5:b6:0f:d5:e4:31:
         9d:e4:b5:9f:d6:77:19:1a:21:55:05:f8:ef:1c:fd:96:76:56:
         e9:85:42:a3:3b:bd:62:8a:9f:53:68:b9:1f:98:a2:56:b3:39:
         06:49:45:bf:fa:9d:3a:62:28:43:43:77:27:6e:5b:43:5b:4b:
         d7:59:bd:07:cb:35:4c:3b:f6:13:59:58:c2:97:e3:6c:d7:1e:
         7a:b8:65:20:5f:9c:94:1e:d0:82:9c:8e:3c:8b:c2:e3:46:5d:
         d7:91:e3:23:7d:d3:29:37:b1:34:9e:ee:dc:4b:d2:5d:b1:7a:
         d9:34:be:2c:f9:f5:8c:46:16:40:86:b0:90:36:32:ae:7b:28:
         22:4d:47:e7:72:b4:99:f1:79:61:f3:90:3b:a8:1c:1c:07:15:
         cf:68:74:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7JwZY9mXdFjs6YIu6guPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjYwMzEzMDIwMDM3WhcNMjYwMzE0MDIwMDM3WjAzMTEwLwYDVQQD
EyhmMzk5YWMxNjMwNmY2YmVlMjc0ZjdjYWE3NjllOGZjZGUyOGZlNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3SIeTVPwWkI65rNa5BhGk6yHBPN
QlFd63wbLjY054nuXnODvqdHkq1dnnjZuzVhtYNpAScUCjoeYmjddvos4RxFhNhj
cxhMkorWHXPcAxbLo6aabAe825HnkL9uzSp130ubP0m5DJZuMeFSq90fW+7kK3vj
weAdXpm5RwMGxWn6/lHJADWa9W6M/cLlJ35U2g+/h6x5ZPP52kxcy1kE15WnqpVX
nBKsMeejuEm6DZcOj0GTYN2hmh8VnT+klDVxuam1l5z8KjcFJ3X6ITTKuQwvGgU4
SYfxBrtcYLyy8P2pzJX62JnA7b3RLAZZn0vRa/zqnyPwZSzjBnzLzpqeHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOZrBYwb2vuJ098qnaej83ij+dkMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtgG7cYs
B1PwLANPolnxV30rfyyqD/gajCJXygOpChl/8fB2h4Dxt9v8pmGzZpiK5ZKq/jsa
+FhlooMakaruyOYonvoA1P7RKiTkz8nzNyuYAHMKYik2OYBxpVR5sdV861iLhzlS
xbYP1eQxneS1n9Z3GRohVQX47xz9lnZW6YVCozu9YoqfU2i5H5iiVrM5BklFv/qd
OmIoQ0N3J25bQ1tL11m9B8s1TDv2E1lYwpfjbNceerhlIF+clB7QgpyOPIvC40Zd
15HjI33TKTexNJ7u3EvSXbF62TS+LPn1jEYWQIawkDYyrnsoIk1H53K0mfF5YfOQ
O6gcHAcVz2h0mw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:28:21 2026 by rpki-client