Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          g8yNrZpT0BLnr7oLu1j/nyWK2rHxT/Y4vf2RGuH/+JA=
Subject key identifier:   92:15:BF:D8:DD:9A:85:5A:98:93:2B:19:F4:15:6A:7B:4F:72:C2:D2
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019D3978059404A27EC137054E8713817012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          0578
Signing time:             Sun 29 Mar 2026 12:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:00 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: s/Oq6FQazybkVNpYPpoZWhihv6q4+cI0dul8xUtp5/M=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:05:94:04:a2:7e:c1:37:05:4e:87:13:81:70:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Mar 29 12:01:00 2026 GMT
            Not After : Mar 30 12:01:00 2026 GMT
        Subject: CN=9215bfd8dd9a855a98932b19f4156a7b4f72c2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:86:95:97:e5:76:88:6b:44:59:64:32:4c:6c:
                    82:c2:91:f7:6c:92:cf:da:e7:32:ba:bd:49:dc:88:
                    77:21:8e:c5:09:fe:b4:9a:7e:b6:01:94:a5:44:52:
                    b5:e0:3b:5f:9c:92:19:ef:a2:d7:c4:64:6a:04:8f:
                    5f:77:e1:9c:55:f1:3b:9e:e9:56:8c:da:7f:a3:36:
                    ba:3f:d7:64:04:a7:d0:e6:cd:ee:3c:80:98:ac:bf:
                    79:db:5e:19:d7:bc:8c:7b:be:69:fb:14:2c:a4:ae:
                    4a:12:18:22:5c:b6:bf:44:b5:25:7c:67:e9:20:00:
                    60:c5:c3:b3:0c:03:ff:5e:ac:97:ea:aa:7e:b9:29:
                    2e:97:38:ba:42:e6:25:1c:8d:6f:15:98:d2:44:bb:
                    4a:ce:42:31:29:e3:b9:1b:71:45:4a:30:82:c3:99:
                    4d:48:13:31:f9:81:55:73:89:33:10:a2:6d:c1:24:
                    f2:c3:cf:2d:f3:e7:6e:19:a7:b0:32:05:17:59:27:
                    ed:b0:56:43:68:9c:ea:7a:65:95:00:ca:5a:8d:1a:
                    91:e8:be:47:c1:1e:10:36:25:4b:a0:59:93:46:33:
                    b2:d1:cc:0f:7b:a0:7e:57:6b:2d:56:d9:64:48:79:
                    e9:bc:22:b4:b8:3a:1b:b2:d1:b9:8c:e3:e1:89:c9:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:15:BF:D8:DD:9A:85:5A:98:93:2B:19:F4:15:6A:7B:4F:72:C2:D2
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:74:6e:50:30:8c:9b:6f:1d:ba:72:70:cb:4c:e7:18:09:
         b1:d2:72:c5:ce:70:16:b7:fe:e4:5e:29:62:6f:dd:f7:3f:59:
         ea:b1:42:df:09:32:e4:11:76:a2:8b:3c:5d:53:39:5b:91:9a:
         d2:e8:f6:87:2b:e4:e2:5e:b2:89:38:04:9c:2e:f1:35:7e:2d:
         8b:0e:16:68:93:5f:18:2b:3b:88:29:92:35:97:ab:61:3c:2e:
         32:0b:45:68:85:ef:a4:90:2f:69:19:55:6f:3b:02:1a:15:5e:
         6c:5d:0e:3b:8b:8e:21:c2:7f:7f:13:71:67:90:7c:da:25:ab:
         83:e8:e0:c2:32:cb:57:1b:4a:d4:36:a3:75:6d:21:06:f3:53:
         2f:7e:97:49:47:d0:51:4c:f1:84:95:5f:26:d9:3f:e9:85:4e:
         83:ac:ea:ff:40:2c:24:75:08:d4:98:ba:6d:dd:34:6b:93:f7:
         ff:51:25:88:a0:4d:52:93:4b:b7:5a:dd:e6:77:98:b9:df:6c:
         51:8b:5c:bd:1b:3f:04:f2:3c:40:eb:2d:08:08:33:a8:dc:07:
         60:7d:69:06:30:90:10:1b:4a:f4:24:2c:7a:a8:d3:d1:09:76:
         9a:cb:f6:af:a8:f5:41:b2:d6:00:e9:f5:57:ce:2e:42:9c:04:
         53:cb:20:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eAWUBKJ+wTcFTocTgXASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjQ4YjUyZDIzZWJkMjM3YjhhOGI2ZTYzZWRkMDJkZmVl
Zjk4NGMwHhcNMjYwMzI5MTIwMTAwWhcNMjYwMzMwMTIwMTAwWjAzMTEwLwYDVQQD
Eyg5MjE1YmZkOGRkOWE4NTVhOTg5MzJiMTlmNDE1NmE3YjRmNzJjMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74aVl+V2iGtEWWQyTGyCwpH3bJLP
2ucyur1J3Ih3IY7FCf60mn62AZSlRFK14DtfnJIZ76LXxGRqBI9fd+GcVfE7nulW
jNp/oza6P9dkBKfQ5s3uPICYrL95214Z17yMe75p+xQspK5KEhgiXLa/RLUlfGfp
IABgxcOzDAP/XqyX6qp+uSkulzi6QuYlHI1vFZjSRLtKzkIxKeO5G3FFSjCCw5lN
SBMx+YFVc4kzEKJtwSTyw88t8+duGaewMgUXWSftsFZDaJzqemWVAMpajRqR6L5H
wR4QNiVLoFmTRjOy0cwPe6B+V2stVtlkSHnpvCK0uDobstG5jOPhiclc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIVv9jdmoVamJMrGfQVantPcsLSMB8GA1UdIwQY
MBaAFAcki1LSPr0je4qLbmPt0C3+75hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYt
MWIyZTQxMDVlYjdlLzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYtMWIyZTQxMDVlYjdl
LzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4B0blAw
jJtvHbpycMtM5xgJsdJyxc5wFrf+5F4pYm/d9z9Z6rFC3wky5BF2oos8XVM5W5Ga
0uj2hyvk4l6yiTgEnC7xNX4tiw4WaJNfGCs7iCmSNZerYTwuMgtFaIXvpJAvaRlV
bzsCGhVebF0OO4uOIcJ/fxNxZ5B82iWrg+jgwjLLVxtK1DajdW0hBvNTL36XSUfQ
UUzxhJVfJtk/6YVOg6zq/0AsJHUI1Ji6bd00a5P3/1EliKBNUpNLt1rd5neYud9s
UYtcvRs/BPI8QOstCAgzqNwHYH1pBjCQEBtK9CQseqjT0Ql2msv2r6j1QbLWAOn1
V84uQpwEU8sgFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:55 2026 by rpki-client