Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          K3INDuOpF8lIAw5HG5zcwn7KD1RC8ayJpmyt3Z71Zog=
Subject key identifier:   5B:B7:60:E0:8F:CE:57:6E:45:CE:CE:53:3F:76:EC:F1:E9:0E:3A:ED
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019CADFE47AB30E4F665B3A656093FEBACC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1480
Signing time:             Mon 02 Mar 2026 10:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:48 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: rSfIuohtvCyOuFCUzogDu4lZVqZpRiQYzGnRswMOmq0=)
                          2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:47:ab:30:e4:f6:65:b3:a6:56:09:3f:eb:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Mar  2 10:00:48 2026 GMT
            Not After : Mar  3 10:00:48 2026 GMT
        Subject: CN=5bb760e08fce576e45cece533f76ecf1e90e3aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:06:c8:d9:3c:70:15:35:29:6c:26:5e:77:
                    c9:fe:fc:d8:b1:3e:95:3b:76:0e:17:ef:a2:65:53:
                    0d:c7:1d:6d:3d:ee:53:46:11:19:9b:8a:80:65:57:
                    99:ef:c9:f4:cc:bf:1d:d1:93:93:df:d8:a9:a6:19:
                    0b:e1:92:95:de:8d:d7:f9:52:63:f3:2b:40:37:45:
                    94:76:0d:06:38:44:4c:56:d8:89:ee:32:d9:fd:c2:
                    e4:ac:11:69:ad:a8:56:75:c0:22:b4:c2:50:8f:a6:
                    95:9c:99:3f:06:24:c6:c8:ae:81:57:ad:2b:92:2d:
                    11:66:11:33:a5:b7:07:25:c7:bd:38:8f:0a:db:7f:
                    18:7b:7d:1f:ce:da:bb:3a:a0:6f:03:d1:b4:a5:2e:
                    45:6d:2d:3b:f0:03:e3:95:32:4a:e5:a2:3e:a4:f7:
                    1f:73:9f:e9:29:ed:e0:23:5c:66:c1:bb:f3:91:37:
                    ad:cb:06:e0:74:6d:3e:56:a7:e4:57:ed:e4:af:46:
                    18:a9:b5:d4:9f:ce:2b:4a:16:19:19:e8:1d:83:8b:
                    7b:c7:b4:6e:26:11:a3:c2:a9:1f:c9:05:75:95:75:
                    8c:46:26:78:77:2c:6f:5c:f5:a5:e5:6a:92:9b:50:
                    ee:41:1b:c9:df:cb:98:0d:0d:fd:5e:df:99:18:9e:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B7:60:E0:8F:CE:57:6E:45:CE:CE:53:3F:76:EC:F1:E9:0E:3A:ED
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e7:4e:d0:fe:6f:df:b5:32:a5:11:37:e4:6a:f5:33:02:9d:
         2a:2d:63:45:9e:c2:1f:34:8f:4c:cf:d7:e5:14:3a:50:3f:5d:
         0c:5d:45:a3:07:c8:b3:58:e5:21:19:25:b5:6e:9e:0f:7b:18:
         8d:b5:0d:aa:a4:82:de:fb:bf:62:47:cc:0a:a6:de:98:bb:de:
         8c:98:bd:83:84:da:49:e1:c3:6d:36:ec:c3:89:f7:82:df:6c:
         db:15:e7:0e:de:35:e1:18:2c:dd:bd:a3:7d:6e:f7:fa:38:e6:
         50:b0:0c:8d:87:fa:f9:fe:96:6d:ee:75:11:b3:eb:32:74:50:
         3f:39:4b:d0:ff:5a:ec:77:62:89:b0:e2:42:60:53:73:68:c8:
         3c:64:34:84:e1:05:e0:14:17:9e:42:1e:61:cd:b0:b7:49:cc:
         4a:15:80:f4:de:12:06:d8:96:32:ac:df:90:e3:a3:80:0e:c7:
         3c:ad:3c:9d:a6:a6:fb:b9:09:58:06:fd:ee:3a:ff:36:5c:5f:
         14:56:d1:bc:c3:27:f3:6a:e7:ed:30:11:2d:09:3f:cc:bd:a8:
         1e:ea:4f:c5:4a:3e:9b:2f:cc:11:4b:32:82:7b:b3:61:9c:8b:
         23:4e:db:3b:78:dc:c1:43:9d:a9:2a:8e:90:e9:e3:9e:ac:9a:
         24:bc:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:32 2026 by rpki-client