Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          HA3G+ZAE2jhtN6wbDtTZKjy0f5tvKI0fDEso/22q1lg=
Subject key identifier:   95:C1:4E:F1:47:F2:51:D4:AA:25:F3:FE:2F:F5:59:FB:0D:0A:20:13
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019CAA582EB2946FFAF729387BC21FDAB901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 17:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:31 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: dOIgctxTDG4BdUrR/u8FXKdfs7eT2BmAdQWyfuHLttY=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:2e:b2:94:6f:fa:f7:29:38:7b:c2:1f:da:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Mar  1 17:00:31 2026 GMT
            Not After : Mar  2 17:00:31 2026 GMT
        Subject: CN=95c14ef147f251d4aa25f3fe2ff559fb0d0a2013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:d4:65:c8:ae:25:e5:86:69:5b:6b:45:13:
                    1d:bd:10:7d:72:d9:9c:5e:f2:28:11:75:4c:1a:13:
                    93:07:11:b2:fe:c5:0c:46:85:0f:86:45:9d:ec:e1:
                    9f:2b:57:af:db:47:72:f6:8d:19:bc:d6:9b:0a:3e:
                    37:2a:42:9e:54:e7:f3:9d:97:ab:c2:45:70:98:b8:
                    0e:d8:69:7a:64:20:75:ba:cf:2a:ec:04:2d:0a:7b:
                    bb:75:cf:a9:93:e6:61:8f:6f:d6:de:2c:09:1e:0b:
                    72:9c:d9:0f:f4:70:7f:49:fc:01:37:87:f1:f9:db:
                    c5:e1:78:fa:2a:ab:9c:b3:e5:58:ca:0b:b1:27:e9:
                    56:e0:53:de:25:9b:96:7e:9c:cb:07:bb:99:9e:25:
                    e5:9f:88:ea:43:ab:4d:50:50:ee:6a:4c:80:49:6f:
                    5c:85:a9:b4:77:a3:ac:40:2d:56:be:ca:6d:0a:7a:
                    88:54:ac:5f:af:18:53:0a:f1:6b:ce:9e:aa:83:0d:
                    5b:5b:08:4e:ee:76:20:40:2c:a5:fe:1f:82:bd:b1:
                    e4:d9:92:10:01:56:c3:f4:d9:fb:9d:72:a8:d6:7d:
                    69:e9:67:af:37:8c:67:dd:f3:f2:01:4f:be:3e:4d:
                    99:06:3f:66:46:e5:6a:9b:7a:2d:ec:88:ba:fd:a3:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C1:4E:F1:47:F2:51:D4:AA:25:F3:FE:2F:F5:59:FB:0D:0A:20:13
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:db:5a:fd:7e:1e:5a:cb:1e:ad:12:14:db:76:58:0a:09:
         94:5a:b4:ac:67:0e:af:0f:bb:f8:34:1e:6f:49:9e:17:58:4a:
         8a:cc:28:74:84:f4:f8:37:6c:2f:5f:0f:8f:54:0c:4b:13:cb:
         eb:3e:40:e2:3f:bc:96:e1:4a:df:b9:e0:0d:71:fb:a6:69:ba:
         1d:29:4f:92:e7:76:52:5c:c8:ef:c5:ed:36:1e:9d:d8:57:74:
         34:39:cb:8a:95:2f:b3:e7:05:8e:ba:59:16:07:81:ad:05:56:
         7f:f5:fb:f0:b4:f8:31:78:aa:3b:3c:dd:97:87:fb:d9:d8:aa:
         e1:24:b7:1b:41:f6:70:fc:c2:a2:e0:59:e4:3c:c2:1a:c7:78:
         c4:4d:52:f8:d0:25:7e:34:e0:4b:17:7e:aa:99:97:cf:97:e1:
         44:6f:bf:4d:ea:ec:d4:d1:df:3f:7d:50:dc:66:a1:d4:61:a2:
         7c:79:bc:ee:b5:ce:b7:7a:0b:3e:45:aa:e3:6f:b2:47:2b:6e:
         5e:91:e0:5f:92:2e:03:2a:3f:34:a4:24:71:73:a7:8d:34:aa:
         d2:ff:5c:ab:f9:30:77:91:a3:e8:e8:01:da:ae:90:d9:d3:42:
         87:9a:00:86:6a:2c:6f:0c:20:cb:35:36:f7:ee:f9:10:0d:9d:
         26:d5:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:48 2026 by rpki-client