Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          HI1S7IJLXuCFVsuEnYsGcW/OWqtd9MJ745jkDFQfk98=
Subject key identifier:   B2:4C:F0:38:36:E0:DA:8B:CD:69:78:A2:81:4B:37:60:AB:9A:49:C3
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019CAB6ACA8E3367A1336FCA017A53977958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          077A
Signing time:             Sun 01 Mar 2026 22:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:28 +0000
Files and hashes:         1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: PyJ9Itq7fervppxn7Qdv8oBD6JBQm18ilzBKOQ1J0Vc=)
                          2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:ca:8e:33:67:a1:33:6f:ca:01:7a:53:97:79:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Mar  1 22:00:28 2026 GMT
            Not After : Mar  2 22:00:28 2026 GMT
        Subject: CN=b24cf03836e0da8bcd6978a2814b3760ab9a49c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:cb:62:d1:b9:a7:31:61:c6:a5:ae:9f:07:
                    5c:22:33:ca:aa:f7:02:40:81:85:0b:88:f2:75:b7:
                    40:12:2f:99:3e:af:82:84:21:c6:89:c6:da:e6:13:
                    b6:ea:63:22:6c:9c:9e:03:c8:15:47:5e:b1:ab:6f:
                    23:b4:c1:d4:ad:79:86:63:7d:7a:e8:f0:14:31:b0:
                    04:66:0c:5e:70:37:0d:65:48:18:65:ff:27:df:d0:
                    c6:c4:f3:c3:42:4c:28:e1:45:7e:e8:ef:88:33:ef:
                    7b:47:e5:c3:7e:fb:ba:63:6b:46:8b:08:24:75:f9:
                    7f:bf:47:86:9a:46:54:50:4b:a8:ae:c5:67:93:2f:
                    0c:95:c9:c9:d8:8e:0d:f3:ab:6d:f2:27:21:dd:6b:
                    fd:9d:47:b3:bc:4e:11:8c:b1:e0:46:d0:19:64:22:
                    30:86:1b:81:51:c6:5a:19:04:ee:e4:e2:f7:b6:62:
                    ca:52:b6:6b:fa:0e:e6:6d:51:0b:e2:8b:cf:d7:06:
                    e4:f5:0c:67:91:10:24:6b:a2:4d:39:f0:b9:be:b1:
                    8c:9d:5f:7e:4d:eb:86:30:d4:0d:cb:93:04:84:09:
                    27:37:ba:d4:d0:4a:a9:7f:e2:e8:4c:f7:3c:a1:aa:
                    ad:ab:fb:28:b1:0a:77:24:5e:5d:8f:a5:4c:82:99:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4C:F0:38:36:E0:DA:8B:CD:69:78:A2:81:4B:37:60:AB:9A:49:C3
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:6e:de:78:8c:4b:2a:26:7f:b5:95:35:29:1e:ad:75:7c:
         4c:e2:01:05:aa:2a:3b:cd:87:20:29:10:05:f2:c5:73:8b:80:
         12:3b:88:e9:25:03:0a:8f:bd:d2:e8:20:72:91:27:58:05:da:
         24:cd:c0:91:5e:91:5d:43:6f:f3:e9:e8:65:a1:7c:62:ad:89:
         10:13:06:2a:be:eb:ac:70:b2:88:b4:bf:4f:7c:4e:fd:89:da:
         4f:bd:40:69:8d:c8:76:6e:cf:c7:1c:9d:7c:c6:bf:57:ab:20:
         ff:5f:a5:67:73:7b:bd:48:62:c3:52:df:12:27:dc:83:6c:06:
         14:14:a0:be:49:a1:33:1f:68:e4:a1:3d:d3:22:71:44:15:58:
         b1:f6:13:ea:b7:75:60:9d:d5:5f:d0:79:b4:fb:7d:ba:63:69:
         4a:78:73:f0:96:b1:74:c8:35:4f:5d:d6:94:9a:b2:2f:7e:d1:
         be:3a:b0:41:41:75:3a:b1:3c:3d:0b:9f:66:e3:89:a8:0f:58:
         59:19:49:94:6d:0d:81:20:e7:9c:af:d6:f6:40:92:ea:d4:52:
         fc:c4:95:62:1f:43:5b:c3:f2:45:61:1e:f1:f7:90:ab:8f:e9:
         dc:2c:dc:90:c5:15:6b:94:8e:47:8d:67:dc:41:d0:ee:3c:b8:
         9a:b2:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:17 2026 by rpki-client