Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          XxzwHQgHdyCAFMSUDDxi5Q0z/kEEYWXuStpCeqmBjT8=
Subject key identifier:   22:EC:67:CE:53:0D:48:F8:A6:3E:87:0C:3A:7F:46:64:56:57:16:D3
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       019CAD909BC1B6A4E997947A7A3E9F6C18D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 08:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:01 +0000
Files and hashes:         1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: Ksn1iwE/LRu3aMZUYlqrVQrDpXWD881pprhbbqjch94=)
                          2: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:9b:c1:b6:a4:e9:97:94:7a:7a:3e:9f:6c:18:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: Mar  2 08:01:01 2026 GMT
            Not After : Mar  3 08:01:01 2026 GMT
        Subject: CN=22ec67ce530d48f8a63e870c3a7f4664565716d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:99:0f:10:f0:83:8b:a1:1c:d8:c9:33:68:
                    40:a9:cc:cd:6c:d5:de:de:68:cd:8d:48:dd:f0:dc:
                    e7:b6:e9:56:15:68:67:07:a4:32:6d:5c:0d:42:bd:
                    ac:89:50:2c:e6:ee:70:72:14:97:b9:6a:9c:62:f5:
                    66:e0:a3:18:1c:73:1e:e4:58:bd:99:93:6a:b5:5b:
                    a6:bf:20:57:6d:c7:92:3f:42:42:a4:be:e5:99:c9:
                    60:54:6b:5b:0d:ec:97:8d:c2:06:33:86:a5:9f:57:
                    27:b8:37:c8:02:ff:ab:2c:cb:b5:41:49:3f:06:a7:
                    07:35:17:4d:a7:e0:35:d0:bc:e9:4d:3d:53:07:c9:
                    0b:06:f3:74:87:47:2c:07:76:96:ec:66:e9:e7:25:
                    ed:da:29:5d:b7:7c:cf:9b:6c:7b:dc:b7:9e:20:df:
                    86:53:46:ef:70:d9:11:02:d0:76:1e:af:c3:05:8a:
                    3e:49:36:9f:61:ee:f8:4c:4f:46:93:f0:72:71:f0:
                    ab:eb:36:f7:e1:9b:6f:15:9d:f0:45:5d:9d:8f:11:
                    41:e6:d5:86:12:e0:de:45:5f:bd:32:c7:e6:4d:e3:
                    a2:a0:cb:0c:cf:16:a4:a0:a0:56:69:32:41:40:51:
                    cd:72:89:55:83:2e:95:dc:db:8b:49:08:cf:c0:94:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:67:CE:53:0D:48:F8:A6:3E:87:0C:3A:7F:46:64:56:57:16:D3
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:83:9c:13:c2:14:d2:86:cd:08:80:83:2d:3a:b3:4b:d5:6b:
         58:ec:67:e7:6d:ed:76:a5:87:d3:1d:4d:70:94:28:c5:9f:0b:
         7a:28:85:9c:12:b7:ed:6a:28:58:0e:cc:1f:5a:90:6f:2a:c0:
         ed:18:72:5f:09:6d:d9:69:2b:67:71:97:14:f5:42:78:59:61:
         f8:36:08:05:c8:2a:bb:7d:ba:25:30:a9:f8:8e:1d:28:96:75:
         d5:c0:06:54:fc:6b:21:e2:ed:d5:fe:9d:42:be:12:b0:5f:41:
         d2:e3:64:48:a5:c1:8e:2d:c7:6b:a2:cc:a8:4d:61:14:61:a3:
         a3:75:a1:c2:55:34:2f:97:4d:02:59:27:06:3d:15:44:f5:b4:
         8b:e2:13:d2:92:23:d3:b8:6a:b8:74:65:24:4a:e7:1b:7e:b6:
         8b:5c:09:0b:b3:09:05:1d:b8:8f:fd:51:fd:17:80:01:da:f9:
         7c:91:57:4f:11:d0:3c:d9:84:e5:03:59:b7:ce:62:8a:bf:c6:
         a1:f9:c7:48:4f:d7:bd:5d:9e:d6:29:42:f2:39:dd:ed:86:f0:
         48:a4:1c:54:fe:98:5c:b8:3f:93:a3:9b:17:df:5d:26:17:b0:
         b2:ce:de:34:e7:89:34:1b:37:93:4b:72:84:60:be:8f:92:86:
         3b:ba:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:30 2026 by rpki-client