Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          FK/RGdCJUuKB8Uu2whN80tu2xyB6t6lEHLGz3cELmtY=
Subject key identifier:   E0:99:ED:4B:6B:99:DF:BD:02:4D:B7:61:AE:0B:0B:6D:C4:10:D9:02
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019CAB33E71A38E8753B94A8472217C708D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          184E
Signing time:             Sun 01 Mar 2026 21:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:31 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: sWKWBJ7vkuXJovnYyHKmHYdcUHBUPxB7mU1MHq1XXvg=)
                          3: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          4: dToYhaIhncI2M7qUF8E5Z-MUY1M.roa (hash: i3+aszgM830eFR0OQiZivcXRqqvq84jEAI5IvwlypUE=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e7:1a:38:e8:75:3b:94:a8:47:22:17:c7:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Mar  1 21:00:31 2026 GMT
            Not After : Mar  2 21:00:31 2026 GMT
        Subject: CN=e099ed4b6b99dfbd024db761ae0b0b6dc410d902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:88:95:94:d0:2e:bd:1b:3a:e8:16:7a:04:
                    1e:92:e5:df:77:55:5a:c6:d9:ee:51:af:55:c1:8d:
                    b6:3c:c2:c2:51:81:8a:4d:78:0c:73:71:5b:b8:d5:
                    f3:c4:ed:51:26:05:b8:f4:73:6a:72:c5:8a:2e:ae:
                    03:f8:3b:30:d2:90:71:96:40:5e:68:de:a6:ba:d8:
                    36:bb:3a:79:f4:bc:8e:95:92:cc:d2:a3:a1:1f:16:
                    b2:a5:dd:a2:72:64:94:d6:43:2c:fe:5c:86:49:83:
                    cd:bc:c7:55:4d:17:3d:75:a2:cf:fb:3b:17:1e:b4:
                    d1:2d:e6:be:05:9f:cf:fe:12:78:be:ad:8a:ca:f2:
                    2a:ff:ba:15:bf:66:9d:46:3c:80:ba:6f:b5:dc:87:
                    6c:bf:8c:9b:33:20:e2:1f:1d:fb:8b:d7:e3:17:fc:
                    d2:07:37:1d:7e:ae:d6:4c:d7:1b:1f:ce:65:35:9f:
                    28:63:00:6e:7a:53:07:01:3a:b3:79:dc:1e:94:ff:
                    9f:2f:44:27:af:c3:05:65:e2:a4:1c:ba:39:ef:6c:
                    ba:7f:dc:e7:68:5d:71:e1:3e:95:08:b0:b1:7e:6c:
                    12:c0:e2:b3:30:1e:39:b7:94:ef:c0:cd:d2:2d:97:
                    d0:23:15:2a:35:11:30:27:46:49:7a:c6:c8:a6:d5:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:ED:4B:6B:99:DF:BD:02:4D:B7:61:AE:0B:0B:6D:C4:10:D9:02
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:21:f4:5f:2f:87:6b:af:0b:a6:59:d7:d3:c1:ed:f5:3c:
         c4:37:e9:b2:cb:97:08:2a:a2:d1:0a:7b:32:74:3a:fe:b5:4f:
         f2:7d:a6:53:e3:9c:dd:ce:95:ac:26:12:78:fc:15:ad:3f:c7:
         b7:42:23:a2:8c:c4:32:65:15:d1:41:4f:91:14:50:e1:96:40:
         ab:4b:e5:e8:03:4c:e7:72:47:21:c9:1f:aa:0d:b1:51:67:60:
         09:4b:a9:af:18:54:fa:8a:6c:19:5a:09:24:70:2f:fa:2a:47:
         51:de:85:79:b2:15:2b:03:c8:ab:65:3a:9c:ed:ad:0c:18:c2:
         28:89:cd:38:cc:7f:4a:a1:e1:4a:49:f2:df:29:f4:9d:3e:b5:
         d2:74:12:4c:f8:9d:f7:4b:57:9b:d7:05:ec:82:e9:47:44:0a:
         fd:e9:b7:34:45:a9:88:a7:88:ab:86:0c:96:6a:df:04:b4:10:
         f4:98:5f:46:b0:39:8c:8e:bd:70:f1:d1:de:f8:04:55:1c:b3:
         f7:f0:39:1d:19:8a:ad:04:5c:4a:0a:af:49:c7:75:d4:2d:7b:
         c9:07:a0:cf:d4:98:09:75:76:91:6c:37:c1:6e:93:40:8b:c0:
         32:d5:53:f9:dd:10:a8:19:78:a7:2f:d4:79:ca:62:80:42:90:
         6b:29:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:15 2026 by rpki-client