Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          dKxQk2ZT4P5PymIN9gd/0RjohBVWGcC3WijIC84+JZc=
Subject key identifier:   49:79:9D:88:00:CB:3C:D9:DB:53:55:CC:CD:10:35:CE:DD:FC:8F:F9
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       019CAB6B892BCE4CD26C4844A90C2B8B5D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 22:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:17 +0000
Files and hashes:         1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
                          2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: O5TmSkZFIEMYbGN2USPNUDzaeE+3brN4tCVS1zarREI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:89:2b:ce:4c:d2:6c:48:44:a9:0c:2b:8b:5d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Mar  1 22:01:17 2026 GMT
            Not After : Mar  2 22:01:17 2026 GMT
        Subject: CN=49799d8800cb3cd9db5355cccd1035ceddfc8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:a8:6c:ce:a6:e6:75:1b:f2:f5:b1:ad:4a:
                    d2:85:91:07:b5:0d:5c:b9:0d:a5:ad:27:b2:d5:fa:
                    9a:ec:ab:b4:f1:fa:72:5f:8c:72:e1:28:76:d1:78:
                    d7:61:70:0a:8a:05:45:f3:d2:3f:a4:59:de:f7:8e:
                    8f:22:d0:2a:e9:48:88:9e:31:23:26:15:9d:a4:e1:
                    dc:e4:c4:c0:5d:85:f0:e1:f7:ef:e4:34:99:d3:e4:
                    22:3f:2a:00:d9:dd:5e:9b:1e:54:03:33:6f:07:1c:
                    10:bc:14:1e:72:02:e0:e0:e4:ab:f8:12:c3:ce:4c:
                    38:00:ad:7b:05:76:c7:ed:ec:61:18:b8:3b:42:42:
                    ac:e5:2e:23:5a:87:24:6a:90:cd:46:b7:59:43:a0:
                    50:86:99:e1:8a:81:44:35:f6:3d:57:91:ae:2a:65:
                    b8:ed:95:8a:a9:77:04:cb:fc:24:3b:c2:e5:d5:2b:
                    18:69:f7:96:24:ef:a3:c6:06:0b:d9:bb:2a:a4:60:
                    6e:d3:73:b3:a3:0e:18:a6:56:84:f2:a2:e6:6e:62:
                    50:36:39:94:c4:21:23:0d:15:ca:8b:a8:38:69:1d:
                    3b:e1:3b:8b:66:be:15:a7:c7:d8:63:c3:7e:b4:96:
                    6b:76:09:4b:b3:77:bc:48:af:0d:95:02:8c:60:3f:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:9D:88:00:CB:3C:D9:DB:53:55:CC:CD:10:35:CE:DD:FC:8F:F9
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:65:fa:22:27:ed:15:8f:67:ab:7c:9e:75:1f:75:06:a6:
         ec:2f:75:4e:df:d6:b6:ad:ca:18:7e:24:c5:97:8c:d5:17:4b:
         15:7f:6d:c7:b0:f0:cd:c2:05:73:e0:66:38:5e:97:bd:95:ea:
         e4:8c:87:3c:1f:87:da:d6:4b:20:3f:fa:02:c5:02:c9:de:23:
         78:eb:13:2a:01:ff:b4:6d:ff:1f:b5:ef:17:fb:27:3f:46:7a:
         de:44:1b:94:24:44:56:14:eb:2b:a8:44:a1:ec:8a:34:8c:17:
         79:f8:7f:46:86:57:cd:2f:92:db:12:ac:fa:d4:a1:cc:c0:86:
         76:a2:a5:67:c0:49:12:25:84:68:db:27:32:61:83:61:45:19:
         80:bf:f0:ee:3f:e0:09:2f:30:39:61:fc:49:43:91:d7:47:ee:
         5c:6f:f3:05:21:15:04:49:4e:db:72:cc:ec:61:b8:ac:24:12:
         cc:79:a6:f7:6a:3c:15:b6:39:8a:e6:d6:46:88:ea:57:80:7e:
         09:e0:91:b4:f6:15:ea:ba:6d:1b:f9:e3:bc:89:16:b4:ce:76:
         ad:51:0b:4a:73:46:e2:73:45:a4:60:d4:b1:33:d3:97:f2:33:
         77:d5:3d:b2:8e:13:cb:b8:a4:e5:36:0c:47:27:e4:ac:c6:02:
         7d:fc:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:31 2026 by rpki-client