Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File:                     BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier:          2blgnh+RoUngwogQkvrBa5ojwd9Y27TBbWIl0IqmYew=
Subject key identifier:   6D:AE:81:25:5F:2B:DD:95:35:DD:66:3D:CE:99:CF:34:1F:E1:A5:82
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer:       /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial:       019CAA5916B11EDDEC185F02272F7BE5F063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number:          0781
Signing time:             Sun 01 Mar 2026 17:01:30 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:30 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:30 +0000
Files and hashes:         1: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: DlYihky1fWAv5kiKntu4FtB1twO0BSJ8ADoTVa1dssY=)
                          2: ku9q2SmWWLLsi5oorWHKlVO8WIQ.roa (hash: uUP+mrwnQZ97afnlVETUlY/refVnxXobEQJ98a1LiOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:16:b1:1e:dd:ec:18:5f:02:27:2f:7b:e5:f0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
        Validity
            Not Before: Mar  1 17:01:30 2026 GMT
            Not After : Mar  2 17:01:30 2026 GMT
        Subject: CN=6dae81255f2bdd9535dd663dce99cf341fe1a582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:ba:98:d4:d5:42:82:f7:be:21:60:15:26:
                    fe:e5:c4:c0:11:da:2b:c5:f5:e7:8d:ad:83:83:7a:
                    e0:6b:3a:01:27:88:60:61:3e:75:98:56:1f:dc:b9:
                    ac:99:dd:6c:ae:27:11:0b:46:c9:bd:f9:26:cf:8f:
                    f9:c6:2b:56:72:a5:a8:c0:59:ac:2f:1e:2d:bd:ff:
                    4c:b7:d5:72:f0:b6:ec:a9:82:89:56:7d:fd:2e:71:
                    41:50:d3:10:cb:c6:32:93:b4:ef:77:30:79:c3:f9:
                    8a:46:81:dd:8b:cd:30:26:e6:9f:0c:86:24:b2:5d:
                    3b:9e:6a:44:95:61:5d:df:1d:76:eb:c7:44:5c:ad:
                    51:c8:b1:e3:b2:52:c1:ee:49:5b:a8:28:6e:99:39:
                    7a:a8:80:9d:3f:ea:a1:52:96:f2:79:9a:d0:91:a0:
                    3d:c9:80:29:86:ac:c5:00:8f:fc:ad:ac:36:28:26:
                    6b:32:56:f6:f0:e1:39:5c:9b:52:8a:e8:5d:21:f5:
                    2b:4f:07:15:3e:4d:62:27:07:76:5f:56:ea:ee:22:
                    e9:ba:33:43:28:8c:0f:45:ec:a1:95:66:54:d3:7b:
                    96:a0:ea:30:cc:4f:d2:70:22:6e:dc:84:a1:28:c4:
                    7b:93:39:5b:22:60:02:fd:7d:f3:fe:cc:a5:7b:cf:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:81:25:5F:2B:DD:95:35:DD:66:3D:CE:99:CF:34:1F:E1:A5:82
            X509v3 Authority Key Identifier:
                keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:ec:0b:bc:81:7d:63:27:d4:22:ea:e3:c6:47:c1:aa:31:
         3f:11:cc:d1:9b:67:af:96:df:c2:d2:43:ee:35:8a:a4:94:64:
         64:10:3c:3e:1d:af:16:bd:b2:f0:df:bd:ba:91:9b:1e:43:37:
         fe:98:f8:49:a1:82:c3:bb:be:da:5c:76:5e:ea:90:80:55:b2:
         2b:21:f3:18:68:74:50:b1:7b:46:6e:2f:a9:45:2b:c6:39:a9:
         cb:65:46:6f:89:af:1d:f3:e6:f7:d4:fe:01:90:8b:eb:eb:a4:
         ca:21:bd:df:7f:9a:b6:a5:c8:32:79:7f:c0:56:10:c7:05:fc:
         31:97:e5:ee:47:f0:33:81:c8:93:da:27:17:9e:34:7c:b3:cc:
         48:a2:ee:64:42:97:9b:27:a9:1c:7c:c8:0b:e1:6a:c5:27:5b:
         a7:dc:b8:6e:22:3c:46:e2:48:10:f4:d3:30:59:c2:5d:19:b5:
         01:ac:45:fd:e5:bd:2c:37:a3:5a:fe:e3:49:e0:4b:63:ac:56:
         e8:4d:31:84:c4:fe:81:52:56:5b:47:7a:87:84:fa:3e:b2:14:
         17:6c:1e:c7:98:b1:c3:b4:86:5b:1b:ec:55:a5:c3:29:3e:9d:
         a1:a4:71:d7:e0:96:1c:5c:9e:e6:9a:38:e8:2f:17:9a:40:9a:
         ad:8d:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:17 2026 by rpki-client