Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File:                     BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier:          mPMrSZQKzeKAfdirV75Ka/LWqwOxrwgCplU2HNEXQhU=
Subject key identifier:   EE:42:7B:22:6B:7A:0C:65:2C:37:13:7E:BA:03:EB:F5:1E:2D:98:80
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer:       /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial:       019CA94603EF6F061244191F570E3301EA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number:          0751
Signing time:             Sun 01 Mar 2026 12:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:03 +0000
Files and hashes:         1: BP7qr8M9Z23XLTlfDphHEhcjcxU.roa (hash: 85o8Pl3rmdVnUnMaY3hy2eaNf9gxwwkYG9yKslohFoM=)
                          2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: kS3K/MR8QUO9cJIm57UXYF/npkApssSA3MeH2aA3YT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:03:ef:6f:06:12:44:19:1f:57:0e:33:01:ea:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
        Validity
            Not Before: Mar  1 12:01:03 2026 GMT
            Not After : Mar  2 12:01:03 2026 GMT
        Subject: CN=ee427b226b7a0c652c37137eba03ebf51e2d9880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:8d:5e:2a:e2:04:41:9a:a9:07:7a:df:f2:
                    ae:01:15:98:2a:23:9c:7e:88:62:bc:da:6f:e7:a4:
                    db:0f:09:ac:08:a0:4b:69:49:dd:d4:ac:32:9d:72:
                    33:76:2b:91:2c:02:e2:07:e1:6b:97:f4:9c:93:ec:
                    23:5d:c8:de:38:56:55:45:09:e2:e4:63:f5:0a:0e:
                    ed:28:4a:b5:61:d4:f2:35:bf:b8:34:4d:5e:ae:41:
                    7b:8d:b2:91:01:be:7c:58:0a:8d:51:1e:fb:9b:69:
                    ab:7d:2f:84:56:03:75:4c:0d:11:73:be:69:48:59:
                    7b:8d:c1:fa:fd:ae:02:ba:35:6e:41:bb:9f:5f:df:
                    53:8c:e0:ba:a8:c1:4b:2e:a8:09:84:ce:22:da:de:
                    29:3b:86:f0:07:e8:31:be:b1:3e:ef:b7:fe:d7:1c:
                    d9:39:75:37:7b:62:46:d5:45:1d:ae:0e:aa:cf:1e:
                    27:bf:d6:1f:e2:5e:4b:21:da:c8:db:07:b0:10:c6:
                    d3:9c:62:42:70:75:cd:b9:b7:33:72:37:98:4c:60:
                    2c:aa:e9:2f:da:9c:c8:7f:1a:f6:b1:af:a3:53:c4:
                    21:49:bc:93:84:e5:51:a3:9c:e5:97:d9:93:68:62:
                    66:ae:13:13:0f:05:d1:c7:cd:1d:62:b1:2f:f9:71:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:7B:22:6B:7A:0C:65:2C:37:13:7E:BA:03:EB:F5:1E:2D:98:80
            X509v3 Authority Key Identifier:
                keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:97:36:f5:0c:2e:7c:2c:3d:0f:fe:8f:23:56:91:78:1b:
         37:b8:f7:4c:5f:da:ef:0e:99:58:09:03:dd:d0:d6:cf:72:0e:
         2a:e2:95:f0:2b:83:c2:e8:5b:ae:30:3e:58:fd:5d:ef:af:ca:
         92:40:69:d8:13:0c:b9:ad:f6:20:88:83:ed:89:74:58:d5:22:
         1e:32:f9:a2:bd:2d:87:6d:16:a5:24:c8:7e:a3:b2:86:d0:64:
         98:32:f4:3b:be:37:ac:da:1f:75:7f:b1:9f:9d:3e:99:9e:d7:
         f5:77:11:11:ba:37:1d:ae:75:be:4a:0e:3b:47:2f:13:74:a6:
         7d:27:a4:6b:59:41:f4:d4:0c:e1:71:91:7d:49:a3:d7:b3:35:
         4b:20:f4:27:0f:6c:ed:61:ff:44:a8:ee:cf:18:05:04:eb:c4:
         de:3d:d9:3e:b0:3d:7a:43:fb:1f:41:f7:92:06:53:00:0c:97:
         3f:4a:b8:fb:e7:a5:dc:29:e4:15:d6:92:5a:9f:f0:aa:af:d6:
         42:af:7e:47:e8:f7:55:5f:9c:03:a8:e3:8b:36:24:c6:69:9f:
         8b:43:01:1a:af:c9:cd:52:12:e5:81:2e:5d:58:72:bf:4f:68:
         3d:91:99:c1:0e:20:16:b9:4e:dd:8b:df:a8:b7:02:ff:0a:40:
         6c:87:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:59 2026 by rpki-client