Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          om/2ifqnnFdarcTHply+TojXgpwJInmZ+7GbKL3N+x0=
Subject key identifier:   DA:02:89:19:D6:DB:03:7D:DB:01:3A:E9:C1:DD:79:A3:FE:46:FA:78
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019CAAFD4E5E749322183D628B24AC22DCFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1850
Signing time:             Sun 01 Mar 2026 20:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:52 +0000
Files and hashes:         1: 291-znFSQvct2BZwzfK1cwLcwAw.roa (hash: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0=)
                          2: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (hash: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: iDosN4sRhBaLBkhj8YWPQoSigDwlXnyh0nwpQ+kQV28=)
                          4: VLzwNJkeBJU6voipR2ycpH_SyW0.roa (hash: WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=)
                          5: iL8SJgTfFm_DO4zngs_BfrPS1jM.roa (hash: BsRqnxPV5ByC/K//Fbo6jM4xfMeMokNBdVnHMfCc3jQ=)
                          6: v6nfH0wLxZxAHbdZRaS-4fG1PGE.roa (hash: cr0KXwFavQXu/IQfCxnN6TBOG1I9t2JoVvFAl5yC74k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:4e:5e:74:93:22:18:3d:62:8b:24:ac:22:dc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Mar  1 20:00:52 2026 GMT
            Not After : Mar  2 20:00:52 2026 GMT
        Subject: CN=da028919d6db037ddb013ae9c1dd79a3fe46fa78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:39:f6:eb:2a:37:56:b6:67:55:22:ce:5e:
                    e2:a0:07:b7:4c:73:98:19:b5:e7:8a:04:f8:47:79:
                    ce:0c:e1:ce:99:96:e4:71:b8:a6:b8:e3:0a:d2:9d:
                    64:8b:2c:f0:c3:6c:72:c3:22:18:81:f4:7d:13:7a:
                    51:81:0d:0d:01:10:8b:c8:3b:96:39:5a:df:10:8f:
                    e6:32:ce:f9:57:2b:83:e9:50:b7:fe:a8:14:49:fc:
                    e3:66:81:32:c1:e3:c1:e2:fa:1b:5e:f9:85:d6:0d:
                    75:4f:37:10:cd:37:0e:7f:d7:43:9b:4f:36:16:e5:
                    91:3f:4d:16:e5:63:4c:7f:fd:d0:28:40:9d:b5:78:
                    6c:57:71:a1:55:ce:31:d5:c2:9e:91:01:d1:5a:1d:
                    b3:18:f6:8e:f4:c8:7e:63:32:05:9a:52:84:b2:19:
                    e1:b1:b2:44:c2:73:55:22:1a:89:f4:3f:f7:d5:03:
                    31:34:bb:c7:d0:2e:0c:98:e3:22:80:87:f2:93:9d:
                    bc:ff:8b:1a:7b:c3:97:d7:c3:c8:75:8a:7e:e1:0f:
                    05:22:c0:d3:bb:3c:f8:df:cc:d1:84:19:2f:c0:7a:
                    3a:0b:30:ea:d0:53:d8:80:04:03:77:1a:2e:3b:2c:
                    17:8a:22:4d:61:e0:a3:25:48:56:d1:2c:83:3f:9a:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:02:89:19:D6:DB:03:7D:DB:01:3A:E9:C1:DD:79:A3:FE:46:FA:78
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:8d:df:a2:3f:44:12:bf:05:a8:01:1c:78:59:64:4f:45:
         8c:fa:8a:95:b6:42:34:bd:43:18:cc:45:39:0d:e7:43:af:84:
         62:52:71:31:4e:e3:9d:af:9f:f6:1a:9d:a9:07:88:0c:9d:cb:
         d7:c7:f3:84:75:4a:85:63:15:f8:b7:58:22:5d:c4:d0:8e:b0:
         c2:58:de:e7:29:1c:11:e8:45:97:fd:d9:3b:6c:75:b5:8b:53:
         49:89:ef:c1:22:a0:cf:34:55:cc:14:52:87:cc:8d:7a:09:c3:
         76:81:b9:ff:c5:0a:c6:eb:5e:fc:40:b9:cc:f8:64:1f:87:26:
         56:c4:dd:bd:5f:66:a6:83:f5:f5:ce:ca:5c:9c:84:85:cd:ec:
         fd:83:03:d7:eb:6d:76:33:5e:ce:5c:94:42:85:ef:d1:c8:47:
         a0:5d:5d:12:2d:58:62:05:19:bb:23:b0:cb:db:df:e3:ac:71:
         4a:8f:f0:a5:e2:e5:40:f7:e3:10:9e:74:0b:3d:78:1d:e6:ff:
         a6:00:32:6a:5f:ad:37:fb:47:9d:0b:d1:1b:80:31:4d:00:66:
         74:07:59:a2:2d:75:c0:c0:35:2e:b9:73:20:7a:8d:4a:7e:8a:
         88:5d:5f:3c:90:86:9c:1a:f5:76:13:ff:9e:56:ac:8b:9d:b1:
         4c:23:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:23 2026 by rpki-client