Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          HYAGtPQuwtmXVXEiR75fPMOOjVuEvcZfANEO75J3HbA=
Subject key identifier:   1B:90:EB:98:6C:6F:F1:97:6C:B4:3F:B4:B4:B1:2C:E0:A4:9C:AF:A9
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019CACEBFE6245403639D7EA371CBF02C685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          0346
Signing time:             Mon 02 Mar 2026 05:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:13 +0000
Files and hashes:         1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
                          2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
                          3: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
                          4: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: 0KsEZhhR6cN8VUVprxrOU3eeOLOHISs9UEfGKRNhOvk=)
                          5: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
                          6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
                          7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
                          8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:fe:62:45:40:36:39:d7:ea:37:1c:bf:02:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Mar  2 05:01:13 2026 GMT
            Not After : Mar  3 05:01:13 2026 GMT
        Subject: CN=1b90eb986c6ff1976cb43fb4b4b12ce0a49cafa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:07:68:77:b6:e9:50:1d:83:9f:75:ff:aa:
                    46:fb:d7:a5:97:6f:b7:cd:2b:7c:cc:38:84:a6:c1:
                    d8:5f:11:c9:8d:c8:f4:f8:e2:59:9c:ae:6c:c3:28:
                    cc:da:fa:f2:8a:0e:a3:da:57:13:e1:56:f7:d2:4d:
                    5f:9f:bd:b4:1c:9b:9b:2b:09:e7:70:1b:4d:ce:03:
                    9b:39:49:11:9b:d7:a0:b3:e8:7d:1e:24:69:42:e9:
                    be:1e:f0:ef:6b:57:ed:7b:1a:12:85:ef:8c:74:74:
                    d0:04:f4:aa:57:1d:92:ef:40:e5:04:70:7a:8a:44:
                    78:f7:22:c6:69:01:0a:53:50:1c:d9:e6:ce:44:1b:
                    7e:b9:46:55:31:12:68:39:3c:28:de:89:57:f9:2a:
                    06:c1:10:8a:d5:1f:3f:ba:ce:d0:c1:e9:56:25:85:
                    fa:1e:de:9d:5c:f5:e5:a9:bb:9c:82:f1:8d:5a:c3:
                    33:8d:de:a5:c2:9b:3f:7a:7a:49:39:a8:f0:87:73:
                    ed:46:5d:3c:ab:9f:bb:98:16:47:98:2b:0c:83:cf:
                    58:04:5b:97:ca:56:e2:43:00:34:f6:8c:9d:18:91:
                    15:3d:49:f1:e9:4d:aa:63:2f:b1:35:57:75:5e:46:
                    be:f2:90:2a:f0:75:5b:c4:e3:7e:4a:88:b7:1d:e5:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:90:EB:98:6C:6F:F1:97:6C:B4:3F:B4:B4:B1:2C:E0:A4:9C:AF:A9
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:30:37:39:3f:35:9b:45:81:e5:c6:59:1f:30:d3:e1:7f:cb:
         7b:f0:21:0d:b7:91:70:fa:fa:b5:26:4a:d9:fb:ed:ab:b2:2f:
         90:f7:8d:3f:b1:17:7a:48:b9:16:3e:93:90:a1:31:b5:68:3a:
         36:d5:8a:c2:55:de:f3:6e:53:56:1a:6f:93:ca:91:50:04:6d:
         ff:11:5f:51:e6:cb:31:67:9f:6c:08:ac:2a:44:0b:eb:c7:5d:
         04:e2:c9:ae:0e:6f:92:7d:ea:df:fe:2e:c1:ee:4c:83:76:9d:
         1a:19:8f:aa:50:dc:2d:8f:d6:91:7a:78:17:9b:5c:5e:29:77:
         3c:2e:15:5b:a4:fe:e3:ae:0d:3a:b8:b7:2b:0a:63:de:0b:f8:
         eb:42:3b:7a:aa:89:f2:06:86:b6:4a:58:8e:80:6b:df:1c:cd:
         7d:9f:5a:bf:74:bb:b5:73:8a:13:28:11:c4:7f:a4:d0:de:d0:
         72:7a:d9:97:eb:d5:9b:39:69:ec:4a:4d:e4:d8:78:ff:f0:85:
         8a:7b:59:ab:2e:48:bb:cb:3c:c9:15:95:16:42:c5:c2:a8:27:
         ba:93:19:c7:3c:f6:5a:da:14:bf:4d:6e:6b:cc:8b:f0:e2:a1:
         68:dd:2a:1b:ee:e8:89:c7:14:c8:89:7e:a5:c4:11:9d:66:58:
         02:8c:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:39 2026 by rpki-client