Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File:                     BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier:          dDJHJPgtAGzGd7Rre84871jG3icdbchryWzrWWr3ahg=
Subject key identifier:   C6:64:56:61:83:94:C0:0E:52:82:83:0C:25:6C:F7:C7:E7:C4:07:87
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer:       /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial:       019CAAC72235D7CD974DAB4BD74F42435C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number:          084A
Signing time:             Sun 01 Mar 2026 19:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:42 +0000
Files and hashes:         1: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (hash: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=)
                          2: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: BHPIP8o7ChBR3Ij837EhvM0ELi0g7r0IgEbmZzwaNEc=)
                          3: Cqx4m029JaVGdBM3t0xvlCEAgzo.roa (hash: S8GX6C9oLkw5v91FP9+Y195QY3e/NY9EwWhEqzGuxl4=)
                          4: NeQydQcKe8qY06oC_Afus8sEgJU.roa (hash: 0r3TCPzszCfKtmrF/kyaRrXpr8kuhtaBNUphvREHO1Y=)
                          5: O63vFzK4x5ZTpmdF6YhLh0H2JRM.roa (hash: C3eD55pIFuNUzJ0bW9R6W7B2wd3cNHOtGS7ITnUaMJ4=)
                          6: R2uWMDmb1YfPEwjrPUSRr3_QEN8.roa (hash: 6OW2Lx2+1h6iO9PfK83UIXHOzzd7YoT8ZZx73Dp3z4I=)
                          7: RPcV_46izWFvqHxYNAfwO4rfhNk.roa (hash: +Kcr18TyAtMOfswQ2AFElqR161EtCNJRdXOpxKjayu0=)
                          8: mdt2WXNNXfXIWBr0juHcaeQiifQ.roa (hash: o+Tkj+m9xGMj8hgnIqFHVjFiAA/cU9ZsV1bWB3LAgR8=)
                          9: zRt11Vund2Tf-7IALkPmk7aZkx4.roa (hash: z201PyhUCG8Ta577hbAhZW0ZrjPaSrja2N7Brq64aFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:22:35:d7:cd:97:4d:ab:4b:d7:4f:42:43:5c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
        Validity
            Not Before: Mar  1 19:01:42 2026 GMT
            Not After : Mar  2 19:01:42 2026 GMT
        Subject: CN=c66456618394c00e5282830c256cf7c7e7c40787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:ea:81:a5:63:8f:da:95:b2:43:02:1c:1f:
                    50:b2:eb:9a:f9:54:66:cf:7f:8c:5f:c6:27:27:d3:
                    25:fb:86:4c:7e:f0:31:86:30:45:b0:03:6a:77:30:
                    6c:06:22:64:8f:47:b8:1e:a7:f4:14:b3:32:9c:17:
                    0a:fc:39:c2:d0:fa:11:00:68:ed:f0:47:8d:16:5b:
                    f8:66:97:84:e4:bb:d3:9e:48:8f:a7:ab:ff:76:85:
                    97:62:01:61:14:d0:7d:ac:76:7b:36:0f:b0:22:92:
                    d6:fa:c8:4f:c3:3b:7f:53:35:d9:39:d7:28:f5:6a:
                    ec:3d:ff:19:b5:46:c0:46:38:46:ee:32:58:bd:a5:
                    87:cd:18:4f:39:7c:2d:7c:a7:c6:f5:0c:be:1c:10:
                    23:ee:b5:bd:57:da:21:aa:62:5f:58:39:58:47:4c:
                    48:57:8c:33:b9:3f:85:ba:30:eb:90:9a:f9:0b:76:
                    f8:bf:94:64:ac:22:66:42:cd:3f:76:b8:19:f4:2b:
                    b8:51:ee:c2:c5:a2:ca:eb:35:af:2c:44:3f:46:0c:
                    e2:70:1f:d7:de:bd:68:81:5f:32:cb:42:d7:c0:01:
                    7a:d6:b6:44:d2:f9:96:f5:e5:e9:fb:a3:b5:b5:64:
                    50:90:07:81:7a:1c:83:60:5d:3a:34:57:16:7d:b2:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:56:61:83:94:C0:0E:52:82:83:0C:25:6C:F7:C7:E7:C4:07:87
            X509v3 Authority Key Identifier:
                keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:06:1b:11:24:5d:cb:c6:33:06:f0:62:16:ab:da:4e:12:8d:
         18:46:2b:2e:98:9b:92:1c:13:a0:92:c7:4a:92:99:fa:93:08:
         dc:c3:02:d0:fd:2c:7c:bf:cc:ec:8c:45:a5:72:48:af:c3:80:
         1f:8e:ce:32:40:6a:74:81:88:b0:32:3a:68:67:ee:f0:f2:90:
         ba:31:92:12:8b:60:09:bc:9d:1e:53:fc:9b:41:17:cd:be:3d:
         ce:e2:47:d5:79:fe:3d:12:c5:ac:c3:bd:95:68:d0:43:a4:21:
         fa:96:2c:38:3a:cb:6d:80:62:c4:b5:09:41:a9:96:6b:10:85:
         4d:e3:79:77:64:30:36:f7:00:99:71:5c:01:72:cf:69:d0:84:
         4c:e8:33:96:ee:84:01:06:cc:2e:fb:c0:b7:85:46:c3:22:b1:
         19:a0:f9:d7:9d:ba:07:24:c5:a3:9e:57:07:a0:4f:00:a5:d2:
         10:a4:60:06:1e:f4:34:cb:de:15:32:ec:be:60:19:3e:15:50:
         b3:37:c7:4b:f9:9d:42:bf:13:d9:58:9e:28:f2:ca:d3:b6:b8:
         41:8c:ea:71:1c:04:d4:55:08:89:24:78:b1:5c:87:d1:ed:95:
         e2:3c:99:a6:a2:82:27:3e:2b:d5:8f:e9:fb:a8:57:b4:b8:8d:
         cb:e4:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:27 2026 by rpki-client