Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          eTmewrpOhWBLSW7MqVvlo2FRNHT13D1SSnvMmQMPlaA=
Subject key identifier:   DD:A1:40:EE:DE:F5:C5:2D:22:1C:CB:4F:38:3D:09:F4:B1:31:B6:BC
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       019CABD9ACA0069A123864BD4365EA6F5D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          185C
Signing time:             Mon 02 Mar 2026 00:01:35 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:35 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:35 +0000
Files and hashes:         1: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
                          2: NF7flV9Z7UaOMGg6mJH46C1-Xq0.roa (hash: fmiuFA8CeszA+aip616DB8dgdxALGZBhtxt21OyYIWM=)
                          3: NdjagWCchyoUBDH_RRwhcy-qdpY.roa (hash: rfUn6HMhfHmkmcQD7GkdDWgPYr7YZfPMYcAy3H0prJk=)
                          4: bVJONHJfgKZDBK0Jlsu-AiUrumY.roa (hash: 1OcxCV/N7P1Um6U586/l5XgFjBvwzM7c2rUdENhKMFs=)
                          5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: hw073LhybDkO1C0k+2277I7i+I9ZxduJLPagr5YduUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:ac:a0:06:9a:12:38:64:bd:43:65:ea:6f:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Mar  2 00:01:35 2026 GMT
            Not After : Mar  3 00:01:35 2026 GMT
        Subject: CN=dda140eedef5c52d221ccb4f383d09f4b131b6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:a5:f5:87:b3:10:43:df:26:bb:f3:ab:61:
                    f7:50:14:89:62:1d:e6:b4:3d:8b:a1:b3:70:1c:27:
                    19:ef:d1:8e:a8:ea:19:bc:b0:9f:37:49:1a:23:52:
                    09:1d:e3:e6:2b:8d:da:c6:72:9c:ef:f1:cb:00:5c:
                    57:b0:61:c0:ef:15:c9:5a:96:96:62:30:db:ae:d1:
                    fc:1a:77:01:88:84:a6:18:25:19:12:a6:cc:cf:17:
                    4d:b1:d9:8d:ee:e0:6a:24:b6:00:1e:20:6c:43:ca:
                    b8:c3:e5:e9:6a:a0:17:41:4b:c0:42:1b:58:02:ae:
                    e0:54:96:fb:32:a7:68:c6:8e:33:55:71:d2:a0:52:
                    39:6f:b7:c9:d5:11:bb:c1:55:93:dd:c3:3e:70:dd:
                    c4:2c:9b:16:c9:d9:a4:44:8a:62:69:27:90:81:b9:
                    89:87:c0:00:1a:3e:ad:5f:f1:4e:41:80:99:00:3d:
                    99:94:f3:7d:05:53:48:ee:43:66:03:7f:02:b9:e9:
                    e4:c3:9e:7d:67:be:10:36:a6:1f:5d:f5:80:0a:45:
                    ed:e1:4f:12:75:f0:46:8c:3e:36:ab:ec:83:ea:67:
                    64:3b:5b:4c:b8:c7:5c:cf:63:cb:5f:ca:e6:90:1b:
                    e0:81:90:82:6f:45:06:03:a8:d9:9a:8f:4d:a6:81:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:40:EE:DE:F5:C5:2D:22:1C:CB:4F:38:3D:09:F4:B1:31:B6:BC
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:cf:a1:09:0d:4c:59:6b:2d:03:11:89:44:da:5d:74:75:
         b4:cc:5c:92:3b:a0:ab:e9:96:8f:89:94:5c:04:eb:b2:1c:91:
         55:e2:e3:44:63:7e:e6:d9:b8:cb:92:77:51:c8:66:d8:53:df:
         6a:09:0d:c4:52:c4:94:5f:17:0f:b6:d9:ef:b1:fe:1e:ee:34:
         b1:07:04:c0:7d:b5:40:53:8d:cd:70:0e:8d:26:96:7a:64:8b:
         0f:ba:e3:6a:14:fb:70:3e:65:62:99:91:be:2e:ac:46:b7:da:
         50:d3:99:9d:d6:9b:ea:f3:48:3c:56:44:26:99:6b:04:65:6c:
         e4:98:ad:1d:8e:3f:1a:e3:22:01:c7:8a:64:24:6b:b9:6a:8b:
         0f:c3:07:eb:de:e9:a6:05:f0:a4:b1:ac:e0:ef:e1:af:28:77:
         c4:95:92:bf:fd:a2:05:4f:67:c0:91:75:d3:15:c3:e8:87:0e:
         9f:e8:b3:59:f3:7e:73:db:db:9e:f2:f7:df:f3:a7:4c:5f:78:
         a2:c0:35:81:42:b2:04:c2:4c:e0:43:33:cb:0e:e8:a4:13:48:
         d9:ec:94:10:08:13:a7:d0:6b:7c:ce:52:76:cd:5e:49:7a:46:
         0d:4f:b5:6b:ca:f6:cc:c9:6e:84:04:63:80:97:a7:6f:30:ff:
         17:38:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:46 2026 by rpki-client