Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File:                     bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier:          6y7oo7dw7hk1qEzSGjsF8gvcfM3GSU4VCoMgJSVCUyU=
Subject key identifier:   37:06:13:80:E3:6F:C1:59:97:2A:AD:76:BA:6E:E4:05:4E:21:4D:F3
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer:       /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial:       019CAD90822607748D7027DFB3D71DD582F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 08:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:54 +0000
Files and hashes:         1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
                          2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: R/XEXH5ovVguAze10e3JnjaQiCGgid6mqXgqq8MrvjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:82:26:07:74:8d:70:27:df:b3:d7:1d:d5:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
        Validity
            Not Before: Mar  2 08:00:54 2026 GMT
            Not After : Mar  3 08:00:54 2026 GMT
        Subject: CN=37061380e36fc159972aad76ba6ee4054e214df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:4c:1f:3f:ba:e3:81:e8:35:ae:0f:f1:5a:
                    10:0a:ec:74:b7:71:a8:ee:f9:bb:94:89:90:05:54:
                    0c:67:9d:a1:47:1c:02:bc:3e:9d:66:e4:d5:bf:e5:
                    6a:d8:c8:6e:f7:59:9e:b8:2e:8f:4f:17:a2:81:65:
                    08:d2:ca:80:dc:da:1d:79:dc:76:96:2d:cc:3c:2e:
                    58:c5:16:7f:ac:4d:6d:67:f6:ad:f3:48:84:1a:3d:
                    0b:f3:1b:a8:7e:ef:94:93:82:b4:5d:36:99:de:c3:
                    9c:bc:16:ca:22:7c:e6:63:a6:a0:29:d4:84:20:76:
                    54:a9:0a:ce:a7:4b:ea:b3:c4:e0:e9:f0:8f:ff:95:
                    67:12:9b:0c:b2:0b:be:e6:9c:bc:22:af:08:99:cd:
                    29:6e:d0:88:40:e8:ca:fe:d5:ae:c1:3b:ac:26:8c:
                    4e:e4:ca:e9:96:3d:7a:14:32:2c:0b:04:9e:bd:8a:
                    cd:af:35:75:52:14:74:2a:89:7c:09:ba:00:b4:ac:
                    22:05:17:38:e7:c0:cf:7d:fb:f1:99:1c:f8:01:7c:
                    4b:ba:f1:fc:06:f1:35:81:06:05:a4:46:ad:19:e2:
                    ce:8f:94:b3:69:97:a1:5d:25:0f:72:a5:56:60:5e:
                    90:be:a5:f4:36:28:b7:89:97:18:25:62:54:76:fa:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:13:80:E3:6F:C1:59:97:2A:AD:76:BA:6E:E4:05:4E:21:4D:F3
            X509v3 Authority Key Identifier:
                keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:bb:bc:92:b0:f8:dd:c8:c0:e5:ef:64:29:68:fb:db:4a:
         07:52:cd:4b:51:59:08:18:2d:d7:e6:6d:d9:98:e0:55:c4:e9:
         a5:44:9f:2e:30:e1:91:68:dc:ee:26:86:70:06:1f:9a:35:4c:
         68:8e:b6:9d:16:59:65:5f:44:06:3f:e1:1d:09:cc:ba:6c:f0:
         5c:8a:88:25:ab:10:ca:1f:e8:28:1b:be:72:19:81:49:2e:ff:
         48:3a:29:0e:4c:7f:f6:18:f1:4d:06:fd:30:6b:f3:12:74:5f:
         fd:5c:b5:2a:08:bf:2a:ad:5a:ef:3f:38:c1:da:cb:2c:90:1e:
         7f:d5:d3:1b:54:6d:90:85:23:65:07:14:9e:2c:db:cd:95:12:
         75:c4:b3:9c:8c:41:a4:13:49:3c:af:b0:ab:59:58:74:ca:60:
         96:6b:ea:21:54:c9:f1:36:bd:10:c1:48:9a:2d:f9:2c:5f:ef:
         a9:cb:e6:37:dd:d0:80:78:b7:92:dd:65:09:98:df:18:02:22:
         8b:e2:9d:ba:f2:6a:23:da:fb:a4:c4:fd:f9:19:06:b7:2f:3b:
         77:27:3e:31:df:d3:76:14:07:48:97:fd:cd:df:9e:b9:cd:3d:
         d5:f6:c8:9e:c9:d6:c4:a3:29:10:57:87:a2:69:2f:78:a3:97:
         a0:4d:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:56 2026 by rpki-client