Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File:                     bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier:          FYDl9YOT0BWGXKNWUmIBqUHvQdMMWxbgvIonUJi1rtI=
Subject key identifier:   ED:C0:25:9A:04:69:FE:8F:C9:E6:07:E1:92:2C:38:77:CA:D1:61:56
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer:       /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial:       019CABD8E82EBB97620F5366928CB35E0240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number:          179D
Signing time:             Mon 02 Mar 2026 00:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:44 +0000
Files and hashes:         1: NJmWkpvnLjr053EcyJcpZ7GQEJw.roa (hash: ilBT0fgXRzjOih9KSBqxwvMO7zW6K4l2Ts8OXGa2cVo=)
                          2: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: H1Dh8C1ZQ1ck+YciLX1GnUD0qi71orFOvi+uVY6gsPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:e8:2e:bb:97:62:0f:53:66:92:8c:b3:5e:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
        Validity
            Not Before: Mar  2 00:00:44 2026 GMT
            Not After : Mar  3 00:00:44 2026 GMT
        Subject: CN=edc0259a0469fe8fc9e607e1922c3877cad16156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:08:26:6b:7f:e2:71:7b:99:4d:b8:18:c4:
                    96:38:39:96:6b:39:9d:a3:e7:e8:cf:a0:a5:34:4a:
                    9f:d4:27:d4:4a:0a:5d:ff:02:9d:ff:24:21:9f:fe:
                    11:c4:92:a3:e5:1c:27:1c:17:ef:e7:1f:05:9a:10:
                    88:54:8f:e5:a3:be:eb:fc:19:35:1c:df:d5:95:f9:
                    31:2c:91:03:17:8f:dd:5f:dc:00:2e:81:11:85:1f:
                    ee:e0:14:46:fc:0a:10:02:00:5f:25:1f:58:2b:25:
                    64:3f:5b:78:2d:b3:e5:4c:f2:23:17:65:ff:bb:98:
                    dd:49:79:f6:0d:89:1c:dc:0b:fd:f5:c7:f5:39:28:
                    b6:18:d5:46:ac:f6:e7:99:bf:aa:ba:b6:4a:3f:cf:
                    53:4d:c2:58:9f:a4:61:99:62:24:d9:c2:3b:25:cf:
                    b9:c9:b9:dd:88:8b:3c:c9:fc:b6:b7:43:5a:c6:fd:
                    27:d9:2b:04:32:97:63:9a:4b:ce:ff:9a:38:81:65:
                    20:5a:1c:f4:ea:7c:0a:29:33:fd:f3:26:a3:46:eb:
                    b3:ba:11:0e:62:da:0c:0e:3f:7c:9d:74:78:43:dc:
                    8f:94:17:bf:f5:42:1c:c4:e2:16:58:ae:0f:5d:f6:
                    01:b4:bb:1e:af:57:b9:b9:04:2f:26:2e:d7:f0:67:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C0:25:9A:04:69:FE:8F:C9:E6:07:E1:92:2C:38:77:CA:D1:61:56
            X509v3 Authority Key Identifier:
                keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:f9:2d:92:ff:72:24:f9:e8:44:c5:d3:d8:e6:0c:e3:c5:
         b5:0c:60:95:17:c2:0a:44:d0:fd:89:37:0d:17:00:b7:70:2f:
         b1:db:71:f3:fb:3f:fc:20:be:c6:b6:27:0a:32:b4:2f:d3:c1:
         19:be:65:7f:c5:4b:06:83:d1:02:1d:0b:99:30:4e:a3:9d:72:
         4a:16:81:8b:f8:f3:c8:85:30:7a:4a:34:64:6b:08:77:2e:d1:
         56:7d:ce:46:97:68:a5:84:85:6d:6d:ad:9a:3b:3a:57:5a:66:
         ce:57:c8:b2:0b:aa:61:e7:a3:ec:86:91:47:0e:f9:d4:64:40:
         55:97:55:c6:b6:82:39:9f:32:97:98:c4:43:b0:1c:4b:8a:e4:
         9d:7c:1c:dd:28:d5:c6:41:ee:dd:64:02:a5:b1:26:4e:7f:59:
         ff:6d:09:80:6e:11:0b:fd:73:62:b7:bc:70:a7:89:5c:6d:4b:
         d3:e3:7e:95:b7:2a:02:0c:93:01:9a:56:68:01:64:56:8f:26:
         b3:86:06:cf:c8:48:78:77:76:7a:23:76:bb:e7:30:d1:8c:46:
         76:d4:6b:bc:84:f4:8c:7d:24:5a:ef:d6:45:63:f9:16:03:bc:
         ba:76:43:dc:0e:da:7e:8e:14:01:34:2b:cc:68:9a:46:ae:b4:
         53:22:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:29 2026 by rpki-client