Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          gNA5siZASVde6VRBwJ9EPgaHABozE7nYoQ7QHLkzVNU=
Subject key identifier:   C9:AA:D8:3D:18:9D:11:48:38:46:F4:21:23:3E:67:E6:CB:92:3A:F8
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       019CA9EB50A8DCD07ED4E2467CB0DC9DC3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          0B68
Signing time:             Sun 01 Mar 2026 15:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:36 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: zXNWuURC7uhcEzGCMTjbg8eSAM9+NgBA+5XHiINaSA4=)
                          2: pY7lepz5HDLGPMLul3xF8ZoLGb4.roa (hash: xUY7XApdCCskYdTx86cHtQLmN8N5m7zUQqjbzI7nUzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:50:a8:dc:d0:7e:d4:e2:46:7c:b0:dc:9d:c3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: Mar  1 15:01:36 2026 GMT
            Not After : Mar  2 15:01:36 2026 GMT
        Subject: CN=c9aad83d189d11483846f421233e67e6cb923af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:78:ff:49:53:f1:1b:51:95:bb:53:de:a1:
                    ec:ea:51:c3:06:86:27:f8:30:9e:d6:a5:c7:9f:9c:
                    f6:4b:bb:29:4d:47:25:09:bd:77:fe:62:0f:cb:f0:
                    ea:be:58:9d:64:33:66:54:bd:38:de:60:73:16:0a:
                    29:9d:55:f0:f8:66:10:1c:a8:a3:cd:e5:f6:d9:8c:
                    37:df:81:6e:d7:03:30:1d:cc:21:b6:85:fe:d8:c0:
                    4b:7d:1f:dd:6c:f5:99:e1:66:af:79:58:ea:d6:29:
                    10:4b:3e:d6:ca:9d:86:a0:6f:52:85:b2:57:60:97:
                    61:bd:0a:d3:6b:28:38:7e:c2:2a:bf:a9:52:44:ce:
                    e0:df:e0:91:31:12:ce:65:2b:4f:78:ad:ac:96:91:
                    c7:3a:0c:ff:02:61:2f:7b:8c:42:d1:d8:ab:df:70:
                    cf:f5:8f:50:71:1f:dc:20:9c:6d:20:4c:36:65:f3:
                    bc:f2:54:45:3b:e5:5e:d5:72:e1:14:73:7a:c9:18:
                    25:b6:a2:95:54:c7:6e:09:1c:ef:20:59:62:bc:7d:
                    e5:b2:31:33:84:dd:6c:ac:41:fc:be:2e:15:50:62:
                    e7:ea:0c:fb:93:09:ec:bf:55:aa:40:bc:a8:7a:7a:
                    7b:fe:75:87:25:61:b4:e8:c6:b4:48:cd:a8:32:66:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AA:D8:3D:18:9D:11:48:38:46:F4:21:23:3E:67:E6:CB:92:3A:F8
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:55:8a:d7:6f:2b:16:66:b7:00:af:c6:2f:ea:f6:e9:b2:
         62:30:07:df:2b:02:bb:b8:32:75:c6:f2:9d:72:61:5d:4c:8a:
         47:c1:30:57:d1:a9:4f:e3:70:ac:9b:3a:fb:45:1c:e5:f9:a4:
         61:34:8b:9e:51:d7:eb:9a:cf:6e:95:25:ca:c9:d8:31:87:14:
         ca:6a:d6:82:4e:42:ca:4a:37:bb:65:e5:45:2b:9f:db:98:e2:
         e1:dd:a2:85:e2:12:50:95:5f:8f:c5:2f:59:fe:a2:ef:d9:f2:
         e7:32:f8:19:3f:15:05:f9:bf:ad:98:9b:b8:bb:17:79:e9:65:
         3e:0f:81:a1:6d:73:42:0e:b6:1e:4a:ee:94:c6:dc:4d:f3:3f:
         bc:5c:de:13:1c:85:e7:55:b7:e7:68:15:66:e3:83:5d:78:f0:
         26:7c:fd:19:f0:da:70:57:ec:7b:32:8d:07:52:eb:0e:84:05:
         78:4e:37:eb:4f:fd:4f:21:63:89:44:e9:4c:4d:5d:54:c3:48:
         3c:c9:b3:92:49:25:d4:cb:7c:80:43:21:da:02:dc:33:6e:62:
         ff:4f:ff:21:a5:10:bd:23:48:24:fa:cf:85:be:d7:c5:9d:78:
         60:f9:f6:d2:59:55:6e:37:b7:7a:5d:db:2b:33:b8:16:8c:c8:
         51:4b:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:48 2026 by rpki-client