Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          aSIIZzwp01kW8tu9c51V+yBAXiEHJarogXRo47jdxUs=
Subject key identifier:   FE:DB:1E:E3:AA:0D:C4:F1:92:1A:F4:FE:AA:65:E4:97:8F:95:2A:70
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       019CAD9052B909847319F93A79EA5FB9226D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          16E5
Signing time:             Mon 02 Mar 2026 08:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:42 +0000
Files and hashes:         1: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: CXZmPiCqjYwDadArRsw8DEGNVFRR71pw9vkSQoYcCvw=)
                          2: d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa (hash: 8R+LohTGNLLIRGmEbwOKrhdf1Fobv+r39Rz/f173jc0=)
                          3: imiFSwewnn3eKlCdz9DBi55AbP4.roa (hash: gkW9o1cFmQilOBYv4BahCLyXi9azbfTOyovm/UvsWbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:52:b9:09:84:73:19:f9:3a:79:ea:5f:b9:22:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Mar  2 08:00:42 2026 GMT
            Not After : Mar  3 08:00:42 2026 GMT
        Subject: CN=fedb1ee3aa0dc4f1921af4feaa65e4978f952a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:8b:7e:d9:4f:e3:86:b9:e0:e5:89:96:e0:
                    57:1c:d0:e6:07:47:8b:0f:0e:98:85:b9:64:f2:0f:
                    2c:79:4e:39:ca:d7:12:65:55:1b:31:b4:ff:3d:9d:
                    1e:77:43:25:0b:d9:d8:45:4e:ce:f7:01:4b:e8:03:
                    e7:18:4c:41:02:c6:4b:61:4c:f4:28:47:8c:2b:fb:
                    a7:5f:20:5a:bb:b3:76:00:cc:10:5a:cf:3c:bd:c2:
                    fc:83:36:c9:6e:af:c1:e7:13:f6:3e:ba:3a:6d:7f:
                    02:45:84:36:75:c2:cb:67:e0:8e:d1:df:c1:db:60:
                    e5:95:fe:73:e2:c1:ed:1f:56:6f:92:9c:ee:76:53:
                    a1:fd:33:80:31:5e:bc:b6:69:ad:39:af:d4:4b:28:
                    56:30:88:8a:4e:9f:06:5e:af:9c:24:8d:a0:ff:40:
                    64:65:62:d3:b9:52:89:3f:ee:9c:62:2b:da:57:69:
                    ba:6b:97:30:87:4c:61:42:ed:47:90:58:c6:17:bd:
                    a3:1d:34:d7:1d:6e:dd:1c:41:c8:d1:f0:e6:0f:6f:
                    85:cd:7c:af:fc:47:35:f7:fa:6f:d7:bb:d4:7d:a7:
                    a9:34:12:7e:2f:02:a0:87:f5:b8:29:5c:a1:ec:83:
                    e2:47:cf:81:fb:f4:05:77:55:8e:82:a5:26:b4:60:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:1E:E3:AA:0D:C4:F1:92:1A:F4:FE:AA:65:E4:97:8F:95:2A:70
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:7e:b0:f0:73:04:74:67:0a:50:cb:c5:9c:33:ad:21:72:
         9a:d6:a3:e8:bb:44:61:c6:4d:7d:8c:8e:71:22:f0:30:47:d4:
         dc:02:0c:cd:81:ef:81:e9:f3:90:96:b1:86:7b:22:54:70:c1:
         14:1e:0b:33:10:d3:d7:8c:06:5d:01:6f:c1:90:60:5a:8e:1d:
         89:9d:ab:3d:7a:88:15:15:8d:e5:6e:f3:1e:6f:15:82:9a:76:
         b2:e5:c9:6b:c5:5b:1e:86:d6:df:eb:ae:94:8c:84:b8:c9:68:
         d1:34:9f:b9:d3:ae:81:ae:b8:e5:10:cb:af:ef:54:0c:cb:bf:
         98:6f:cb:a3:57:3a:1e:72:47:87:89:20:e9:3a:ce:f2:dd:c6:
         1b:d2:37:c4:ec:aa:ea:d6:10:b4:af:f8:82:40:b0:50:8d:fa:
         d9:a5:7c:72:1d:a9:6f:9b:b0:2b:2f:4d:43:3a:da:0a:0c:f9:
         ae:b6:1e:b8:46:ce:de:4e:8e:2c:40:e1:06:0e:99:bd:8b:18:
         ee:f3:94:5c:41:c2:15:00:48:8c:a4:94:3b:f1:c6:d5:90:97:
         5d:78:6f:4a:43:e9:db:c9:66:d6:9c:ab:4d:07:be:95:b1:a7:
         6c:c4:d0:66:58:6b:4c:6c:82:1e:f2:04:44:ec:b0:04:f1:5b:
         eb:f1:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:56 2026 by rpki-client