Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          XA2Cg03hEWcdfjdgdyh2P26U9NAo2dAAqzyDmagPdjU=
Subject key identifier:   64:1A:EE:56:40:E2:39:33:17:F9:19:74:B4:5A:F8:B1:73:DF:DC:B0
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       019CAB6BC9722FBA63AEF412C233D8452D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 22:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:33 +0000
Files and hashes:         1: 0ohKVQN8JuTcilJLLas1PbkpJLQ.roa (hash: Iy3MQLBkcAq1eJnpEU2jctdrlX7AMZPQC/y2+z0Uq40=)
                          2: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: WJ/6AVqIxow9NGKPmXRShKVLBB1w7utG6pm22y8ewDE=)
                          3: jWDr3wDugKmfFHaWOIXK3rm3KBM.roa (hash: t/jm2gNNlq/4NY3+0/h6qliZGJIxWHdoCDUSrWKpxvQ=)
                          4: kA7mfes0bqBl5D-bI67VpsmJV9k.roa (hash: Y1kiJDLllKmeTEYbA2zY2rhRombUij5BSss+NTqpPIw=)
                          5: n0ruOGbeVvXhGIrsWayjSXVW_as.roa (hash: 39LLK08KXO2vyHtc1/PHu8DzL0QhDBg9EmDMQZMx3yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c9:72:2f:ba:63:ae:f4:12:c2:33:d8:45:2d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Mar  1 22:01:33 2026 GMT
            Not After : Mar  2 22:01:33 2026 GMT
        Subject: CN=641aee5640e2393317f91974b45af8b173dfdcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:a0:aa:99:a0:9b:55:9b:02:e0:85:4d:e3:
                    88:24:32:59:cf:47:53:27:42:19:4d:ca:96:e4:07:
                    53:c5:b8:30:fa:6a:44:c0:0e:39:d8:27:d7:47:23:
                    70:1e:4d:45:c3:c5:55:1b:da:ef:43:20:b2:4b:47:
                    60:c6:53:59:13:8f:bb:0d:24:57:ca:0a:49:11:61:
                    78:ba:b3:46:40:da:b9:2b:da:e6:06:4c:d8:ad:6a:
                    a1:e1:df:fc:7d:20:9d:70:10:41:37:88:a7:88:e6:
                    55:82:74:f3:1f:f0:fb:d1:0f:69:e0:88:69:67:a0:
                    31:a4:7b:67:53:ff:4b:e5:e4:5f:39:14:c0:7f:84:
                    e0:d1:1a:7b:04:88:0d:ed:bd:a8:28:b7:92:fd:61:
                    cc:67:ed:f7:1f:21:db:64:a3:6f:0a:7b:97:92:fb:
                    bd:39:6e:4a:73:3f:2a:17:62:b1:f3:90:0f:6f:b8:
                    d9:62:f6:57:63:67:ce:28:b1:77:df:39:5c:49:d2:
                    2d:3f:96:1a:60:f7:e8:82:4b:92:a5:4b:cc:66:da:
                    51:34:77:b0:0b:30:a4:05:50:8f:4a:1f:70:f0:06:
                    98:e4:ae:4e:62:bc:2e:54:cc:76:86:a7:90:c8:16:
                    3d:ef:56:16:cd:36:87:11:7b:5f:5b:85:13:03:ff:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:EE:56:40:E2:39:33:17:F9:19:74:B4:5A:F8:B1:73:DF:DC:B0
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e0:8f:6a:15:2d:c9:27:87:45:46:84:16:e2:2c:66:2f:fb:
         56:82:0e:01:1e:7d:e1:b4:75:db:6c:57:5c:57:8d:4f:df:8b:
         90:2b:ec:8b:27:32:19:35:20:3d:16:a0:a5:2f:75:39:b7:b9:
         0f:92:97:93:66:d6:8f:64:08:4c:f3:0a:04:7c:4b:f0:b8:83:
         37:27:aa:4b:d2:cf:95:d9:9d:db:87:81:75:b2:00:3a:eb:d1:
         62:fd:2a:fe:8b:20:85:97:b6:91:dc:53:91:35:48:45:7f:3d:
         1a:dd:5f:c8:38:9e:58:fd:1d:89:a6:ed:8c:c1:f7:58:df:5c:
         01:b0:b9:56:98:7b:e9:6c:12:ac:d7:9a:48:c4:8f:29:d9:3d:
         7b:d7:e1:11:46:fd:2a:fe:3f:ad:20:55:cb:90:0c:a5:c0:93:
         ca:cb:4a:ee:ed:8a:94:b2:90:2a:7b:80:d8:ef:29:45:29:57:
         8c:2e:98:ad:f5:78:7d:0d:90:9c:4b:b8:a9:ba:64:12:14:89:
         f7:81:07:7a:7d:29:e1:8c:c5:52:3a:55:ea:f8:bf:7a:fe:c9:
         a7:7f:fa:7e:80:9d:ac:6c:c3:f4:0b:ef:47:0f:3d:ca:dc:37:
         58:74:d8:d4:f3:0c:5b:cf:f6:61:ce:08:10:6e:e6:46:7d:f7:
         83:fd:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:20 2026 by rpki-client