Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
File:                     tungBTS_H0IC0C5WhBB_A66kYNA.mft (raw, json)
Hash identifier:          Ceu3JAYB3C84uZasI3YgH9RIL2AWUh3FoiaVj4aE19Y=
Subject key identifier:   96:E9:52:EC:89:16:5D:BF:9E:11:A3:8D:82:C8:34:20:62:84:D4:9E
Authority key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
Certificate issuer:       /CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Certificate serial:       019CAAC61B611FCAC47DCB10ADC0EC041855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
Manifest number:          1152
Signing time:             Sun 01 Mar 2026 19:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:35 +0000
Files and hashes:         1: 0O03678ZXzNw16c9EkFkpXQiP3E.roa (hash: zrO/zxtEigXMooQDMh6FDKcZo6WqDLW6lQtgvu0UKCI=)
                          2: tungBTS_H0IC0C5WhBB_A66kYNA.crl (hash: BCVPtCTA4wKrfNQ2kLzeetoPaEloAZiy2FIjTvxGUPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:1b:61:1f:ca:c4:7d:cb:10:ad:c0:ec:04:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
        Validity
            Not Before: Mar  1 19:00:35 2026 GMT
            Not After : Mar  2 19:00:35 2026 GMT
        Subject: CN=96e952ec89165dbf9e11a38d82c834206284d49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:4b:88:e1:54:1d:eb:82:7a:55:1e:4d:a4:
                    d4:49:08:68:cf:52:13:12:2f:ad:5b:16:4a:bb:58:
                    e3:50:35:1c:dc:ae:37:d9:63:61:6b:10:ab:f0:8d:
                    af:38:f1:9c:e6:6d:8b:ec:bd:aa:90:90:7a:74:5a:
                    0b:ab:96:ee:bd:5e:76:43:f5:57:0d:ea:35:92:53:
                    29:a1:c3:24:15:9e:bb:0e:f7:13:de:da:4f:f1:a0:
                    af:17:c3:4a:7c:4a:33:4e:2b:96:37:68:cf:f8:9c:
                    4a:d3:60:4c:a1:ad:fb:53:ed:a8:f5:2e:99:b4:f1:
                    20:59:7d:96:b7:0a:98:93:cc:08:48:ff:31:28:ec:
                    7d:4c:dc:4e:51:ee:91:6e:0c:ac:dd:d9:2a:14:9c:
                    d6:ee:a5:41:a4:fc:44:b9:d1:89:07:8b:f6:43:b0:
                    68:45:2f:bc:fe:f2:4e:b5:90:51:3e:d2:59:ca:10:
                    a5:29:8b:75:63:3e:b8:18:9c:a4:fb:f8:18:73:6c:
                    b5:d2:6a:25:72:c8:c3:38:c0:c8:1a:ad:14:d1:7e:
                    75:41:5e:b4:82:7c:b2:f5:c8:d2:53:c2:57:3d:61:
                    e3:7c:3c:41:e5:cb:a5:a3:88:f6:38:87:48:76:3f:
                    2d:83:1e:b7:34:49:5d:93:14:36:04:d9:6f:06:92:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:52:EC:89:16:5D:BF:9E:11:A3:8D:82:C8:34:20:62:84:D4:9E
            X509v3 Authority Key Identifier:
                keyid:B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:cd:0d:0d:b5:1f:a5:5a:f2:8b:78:6b:41:06:59:c3:aa:
         89:2e:e4:68:e6:6a:3e:a2:5c:61:e9:dc:a9:26:59:cc:0a:22:
         62:d0:d5:67:e9:94:af:d1:a1:9a:b5:92:8d:1b:9d:8c:5a:ba:
         61:3d:55:9c:e1:9c:07:b7:a3:df:7c:88:e1:cb:2b:3a:e2:3b:
         60:78:04:c2:bb:3f:92:ec:09:70:60:bd:95:1a:4a:c8:16:3c:
         e6:26:4d:e6:ea:c1:71:fb:0d:37:53:aa:87:3b:ed:20:af:5d:
         fc:52:cd:64:10:40:98:92:9e:13:80:e0:ce:fb:28:5d:fc:09:
         63:97:5b:3c:d9:b0:27:5c:9c:3a:bd:35:2d:f6:87:fe:c1:b9:
         33:60:62:90:fd:ac:07:18:db:b6:ec:31:28:42:61:c2:37:2f:
         50:a9:1a:7e:23:75:39:e5:d6:87:ca:2a:03:9a:f9:88:03:17:
         64:13:ea:af:7e:45:e6:bf:b8:03:1d:a9:ec:79:c8:3a:b6:c8:
         e3:b4:6b:61:24:ec:c6:8f:d3:e7:9e:f1:58:f7:4f:34:60:a4:
         b5:a3:2f:12:4e:ca:e1:07:f9:26:5f:4b:88:83:92:48:a9:0b:
         af:ce:f5:d8:cb:ea:9d:44:df:93:6c:bf:97:4b:92:7e:a3:07:
         4d:c8:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:03 2026 by rpki-client