Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File:                     bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier:          2rVUhJYwUDbdXKTwHPr9B5YZCSaQlRrf/DA8K+VGS3k=
Subject key identifier:   77:BC:07:82:3B:E4:B3:B0:57:1F:FD:F1:AA:64:A3:7F:EF:C6:32:75
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer:       /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial:       019D38D35822D0302D336A1154A934B6AEBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number:          051B
Signing time:             Sun 29 Mar 2026 09:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:07 +0000
Files and hashes:         1: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: GgtsFHqSN3f2lNppnrCuWkfxvCpfhw4NUeLTyUCAI88=)
                          2: cAdpnRDHC0c0lgzjSQj995F3FvA.roa (hash: yMSL1cAwqcIkeNN7ndGsh3tpbDr4P3TD+Wcr+gEqkks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:58:22:d0:30:2d:33:6a:11:54:a9:34:b6:ae:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
        Validity
            Not Before: Mar 29 09:01:07 2026 GMT
            Not After : Mar 30 09:01:07 2026 GMT
        Subject: CN=77bc07823be4b3b0571ffdf1aa64a37fefc63275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:2d:80:80:5b:60:95:53:ed:49:c5:c0:2f:
                    24:a3:05:be:7a:81:5b:82:19:f0:b6:02:fd:62:87:
                    b2:53:91:54:56:62:e7:2f:b6:d2:78:3c:65:30:f1:
                    26:5a:ea:42:9b:46:33:cc:8a:d7:02:43:d3:e9:a5:
                    bb:74:28:9a:e4:2b:e9:e5:08:5e:f1:09:df:a6:eb:
                    0c:b7:7b:67:71:a7:ad:67:93:16:6a:57:51:cd:7e:
                    8e:bf:d1:a5:19:1e:38:6a:cf:5d:81:84:fc:a6:32:
                    08:82:9b:13:a8:8b:18:61:59:4d:e7:43:ae:a0:61:
                    84:1c:d9:09:bc:9c:2e:c1:b1:c1:55:36:fe:1f:ba:
                    13:1c:96:20:1a:d2:a3:61:4e:36:8c:1e:6d:06:de:
                    8a:df:ce:cf:22:a4:93:24:e4:df:7c:44:7c:b2:c0:
                    cb:64:61:f7:a8:f0:d0:49:8b:00:17:fd:02:b9:66:
                    86:cb:12:d4:7c:f4:11:a9:15:a9:25:71:11:77:d6:
                    f2:a8:ef:c0:7d:98:b1:a3:1e:43:ad:b3:e1:8a:84:
                    41:87:14:93:33:69:7d:49:a5:0e:b3:14:13:e2:2a:
                    c8:a0:a1:c6:5f:1c:b3:1e:8a:70:15:0e:fe:82:b8:
                    c1:a3:e9:26:05:10:b2:48:8d:d2:36:ef:f4:20:03:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BC:07:82:3B:E4:B3:B0:57:1F:FD:F1:AA:64:A3:7F:EF:C6:32:75
            X509v3 Authority Key Identifier:
                keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:9e:8d:2e:05:c4:14:bb:71:f2:b5:48:11:79:96:c1:2f:
         c5:61:6a:50:32:97:d0:94:d8:81:4d:7c:5c:d6:14:d9:5a:09:
         de:b4:a7:1a:96:ee:dc:17:24:08:7e:6a:fe:cf:2b:f6:71:86:
         a1:e8:5f:92:da:4a:1e:55:29:8b:39:1b:c9:a3:09:7e:e8:f8:
         5f:ef:5b:68:71:00:04:95:50:91:d4:c5:e2:f7:02:ca:fd:12:
         24:0b:ab:c0:65:82:9f:aa:c1:0d:7d:9c:c7:f9:7b:0e:f7:00:
         04:8b:69:a3:85:54:c9:5b:d2:71:a6:cb:86:4c:41:b9:c0:b4:
         1e:d7:f3:8a:42:7f:b3:da:07:79:7e:9f:19:29:5f:d9:1a:66:
         b5:76:95:52:8b:47:c5:a3:00:7e:ce:70:8a:05:da:e0:aa:18:
         6a:65:a0:69:29:ac:f5:9f:84:b9:66:78:dc:3e:44:c5:00:06:
         7f:9c:26:ae:f9:75:ea:eb:f3:87:02:2a:e9:06:91:86:47:d0:
         6a:15:10:86:00:d9:16:20:47:e3:08:fc:61:65:1b:48:2f:08:
         cd:03:7e:eb:8f:4d:b5:f2:b2:c0:15:61:47:4f:e3:74:1e:01:
         79:d3:b2:f8:1a:81:4d:65:09:ab:9d:79:57:ac:1b:96:2c:21:
         bf:5c:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:40 2026 by rpki-client