Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File:                     bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier:          jDq4TNZfJVi7S9L0IzmIhDssZrEXNurPZPiDARsUla4=
Subject key identifier:   93:64:46:6A:3C:5A:3E:6D:58:07:57:3A:52:29:4C:3C:9A:94:3F:33
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       019CAC471B1E8B3C35A83D86F258C178012E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number:          1916
Signing time:             Mon 02 Mar 2026 02:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:06 +0000
Files and hashes:         1: 93od_JJTHV0tN640pXkw-FlzA-c.roa (hash: LW6Tg3WPAazdC5T9I5Hy89AZoMfMT1cdunnmI6cgYBM=)
                          2: F7PDvpn2QT60u98U-B9_BniGv6I.roa (hash: o6+nW99K+UNhSND42qU+AfPD+43WdjVx5KouvSDpigQ=)
                          3: FC06aK4k9Vhficw41G6Hdl0Xt58.roa (hash: ZG52zMOxumtbmZghOID0KYulTKdKMGJDweSarBJ8RO8=)
                          4: IachUPTX_993yJEpQF0wVvXQlj0.roa (hash: +E7fJxAVDf8rQHDt1qq8WPbiZjHDDTDf+pccnAqllfE=)
                          5: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=)
                          6: MloCUaQjIaff5rD0I_V7IQUgMHA.roa (hash: z4QEYPJ8c5S4F1m2QTf25snrDWXe9stPlhx7/VyKtfE=)
                          7: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=)
                          8: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=)
                          9: bJpd8Oj5rzvFy2hgHwNUQ_tzjy4.roa (hash: izLdFM9N1wbZbR37d7jbsfqm2J2WRyeSpB6evgH/KdE=)
                          10: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: CzFqDimtRwVahBFrojVGff01KQecZ2BPY/8m9MRKm38=)
                          11: c0uvTOI67xh0FKWxSwRg-nYNzwQ.roa (hash: plCIyBBA7fJ/ab66sTs1uwcmLK+UCs7jG1hMDH2MrbE=)
                          12: en-Q7yeb2Z7kIhNbVjOcGbm5MIc.roa (hash: rXbw78vAg5cjNMmUQ0XTeSV5YcEgAXrrBnTa2Pbv9+k=)
                          13: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=)
                          14: lVpZAUc7qjcetTd3RGNA9GASrfY.roa (hash: MsG+zzzKR9slrtwvP+3tiSHAXUDOrqk0viarDp9CSdo=)
                          15: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=)
                          16: pSxnjIW1LZcD5sf9hc-QWRMlCXs.roa (hash: 7NT+wNW4fQoKhVSO5fHIZEZW19pRVLnmVJ2E4i3ZHTo=)
                          17: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=)
                          18: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=)
                          19: xch1OTrgwhompJ-XKic-UzKZ2zQ.roa (hash: mlOvwHkD0mxwoqmcv+JuS61IKgE7oNpZSE3msWqExWA=)
                          20: y2YOxq73wxqpsD0YZ8pOXdLitLk.roa (hash: c4b5W1/zwM1DY57UKacEsED6Yc4dNYwQiO/KOLoutlI=)
                          21: yOLP8JGsQMCFzWngfeM-F2G3Csc.roa (hash: qUYYxQQnFX6MaYW1jl8K4rrQJvoPXd0mpK3gIXiWjkc=)
                          22: yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa (hash: V/g6j3QRRQ10jRrTt5T1G9dqYBUtdzYwy5fiLM0sH2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:1b:1e:8b:3c:35:a8:3d:86:f2:58:c1:78:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Mar  2 02:01:06 2026 GMT
            Not After : Mar  3 02:01:06 2026 GMT
        Subject: CN=9364466a3c5a3e6d5807573a52294c3c9a943f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:d6:dc:7a:4d:5d:15:28:2f:47:c7:5d:60:
                    70:4d:77:21:04:af:a1:17:81:00:10:72:c5:0c:24:
                    cc:c0:b0:fd:e9:9a:dd:7d:23:98:74:79:f9:d1:f9:
                    8c:dd:58:f5:c8:66:76:eb:d6:8e:6a:c8:10:c9:3d:
                    d5:24:53:e6:df:61:d0:8f:de:8d:63:41:86:6a:01:
                    59:0e:e8:8f:b1:76:ae:68:d9:4d:8a:48:3f:64:c0:
                    23:58:3b:fe:23:21:ee:53:6f:a8:56:0c:00:c9:bb:
                    a2:ae:09:7d:b0:6d:3c:d0:48:3d:c8:28:14:79:05:
                    1f:fa:08:59:53:f2:44:c0:a1:ee:4f:ec:70:cc:6a:
                    18:11:74:67:a5:90:e0:5c:8d:76:39:d6:5c:16:c5:
                    d4:10:ee:ef:ab:ab:b7:50:09:b7:31:f8:f9:d4:b8:
                    95:43:b9:69:ea:3e:c4:fb:ef:59:fe:2e:16:29:5d:
                    a1:ad:8d:7c:c8:dd:2d:d8:46:49:29:83:86:09:b6:
                    7b:36:26:2f:29:04:27:c2:02:6d:91:bc:7e:31:9e:
                    d3:e4:97:01:55:e1:ae:9e:b4:b2:cc:ac:0c:45:67:
                    d9:0d:b4:7f:a5:c6:cd:69:9f:16:f8:3b:99:1f:cf:
                    90:66:7f:37:12:a6:1f:6d:72:9e:ef:15:9c:7e:64:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:46:6A:3C:5A:3E:6D:58:07:57:3A:52:29:4C:3C:9A:94:3F:33
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:e0:b8:be:2c:6d:d3:da:4d:d2:32:89:b7:3d:7d:b4:38:
         4d:a1:ff:17:c4:4b:73:06:9a:27:50:25:1b:15:3d:01:27:4b:
         5b:37:e9:51:8c:fa:9b:79:ac:59:b0:7a:d1:6d:0c:ad:06:99:
         10:94:ac:d4:25:44:19:3c:b5:a3:33:db:74:19:36:31:aa:49:
         22:9f:df:53:9a:dd:b1:98:a5:f1:6f:08:fb:ac:00:1b:d7:3b:
         b0:a1:17:2c:b4:67:c7:58:8d:a4:f6:98:2a:68:d1:12:6a:64:
         0b:ea:eb:d0:23:30:bd:f1:9d:6d:49:2c:cd:6c:e4:cb:4c:1f:
         ce:c7:a0:01:be:c0:da:60:28:1b:20:9c:5f:d9:52:e7:6b:48:
         39:c2:9b:4d:e1:7d:c3:91:e5:04:fb:8e:2c:2c:4c:cf:02:30:
         dc:b6:a5:b0:c1:48:4c:d9:ef:d1:fa:d0:90:89:4b:f7:f1:c0:
         c5:f5:85:28:25:ca:c7:cb:8b:a2:3e:48:1c:a6:e7:66:db:87:
         0e:7a:60:70:ba:9f:8d:87:d7:9b:54:5b:da:79:55:ad:af:79:
         1a:af:26:24:83:6a:a0:83:06:91:5b:21:87:be:8a:2f:f7:a0:
         06:8f:65:0d:6a:07:22:63:5a:fe:a3:6c:2c:c7:1b:15:41:16:
         29:06:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:45 2026 by rpki-client