Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          6u2vjZg7vLccmzaspZXo2W+p7jZaeJSA2fSBmzri1kY=
Subject key identifier:   62:D2:B3:9C:B1:B1:2D:D2:13:0B:87:17:B5:61:2D:89:46:68:F9:76
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       019CAD223ADC09FB16962099ED195D04A2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 06:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:27 +0000
Files and hashes:         1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
                          2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: DdqypErXM/y2UN76QxownAdgPUrISFtQzas1PqE7vOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:3a:dc:09:fb:16:96:20:99:ed:19:5d:04:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Mar  2 06:00:27 2026 GMT
            Not After : Mar  3 06:00:27 2026 GMT
        Subject: CN=62d2b39cb1b12dd2130b8717b5612d894668f976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:5a:02:25:e1:bf:87:66:8a:d5:f8:fb:31:
                    2e:27:35:7d:7e:3f:f9:c1:7b:0c:82:23:21:a9:8c:
                    70:fb:f1:7d:89:a4:2c:91:ec:a5:45:db:0d:af:6e:
                    31:27:d9:15:40:36:93:b2:ce:38:ba:c1:a5:d8:ea:
                    2b:db:1c:04:3c:11:eb:5c:f9:6a:b0:77:a8:da:00:
                    98:04:7d:cc:81:9b:1a:fd:62:ac:7b:ec:32:3d:72:
                    61:61:f9:b6:48:d3:8b:38:d9:f4:c6:79:7c:bb:23:
                    d8:03:81:55:72:69:31:23:ea:b7:47:33:db:be:f8:
                    71:e3:75:75:a4:e8:c5:de:6e:81:aa:23:9d:39:93:
                    8c:36:50:48:30:01:76:da:78:05:cf:f3:68:90:68:
                    1f:87:6c:ff:19:d7:b4:2d:20:e8:d6:f4:ff:c7:27:
                    b7:02:f3:da:bb:47:f8:53:10:9e:d5:4a:81:37:bb:
                    3e:cd:f4:25:18:74:b3:40:5a:2a:b9:61:62:70:9c:
                    6d:cf:09:33:e6:9d:a8:0b:db:0c:47:a8:43:97:fc:
                    5e:99:37:5e:cc:74:21:73:2c:b9:e4:ae:bd:1f:88:
                    d7:35:b4:23:eb:ae:75:72:c4:c7:55:cf:fb:11:8a:
                    bc:f3:54:d4:ea:bd:c3:df:13:8d:37:87:bb:eb:06:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:B3:9C:B1:B1:2D:D2:13:0B:87:17:B5:61:2D:89:46:68:F9:76
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:1e:1e:f9:55:1b:fe:1d:1d:7b:95:ab:81:11:96:db:48:
         b7:09:a7:90:3d:40:c4:e4:e3:73:e8:9f:12:47:9f:dc:85:ed:
         50:92:0d:5c:4d:20:6c:df:6f:77:58:43:62:b8:d5:10:e1:7b:
         83:8c:d8:02:c6:43:51:dc:04:6c:6f:88:7e:57:e7:31:18:6b:
         9d:10:0e:a0:a1:78:99:de:45:b3:55:ff:c2:ea:4e:97:5c:ed:
         7e:2b:cf:98:ed:37:3f:8b:58:4f:59:f4:0e:6a:cc:46:a5:89:
         68:8a:2b:94:42:af:ce:34:89:af:89:6b:fe:5c:ea:98:99:93:
         0a:c6:af:8a:59:28:ab:40:12:ee:75:a8:a9:f7:eb:97:ed:27:
         d4:98:d0:52:3c:8b:48:7b:c3:5e:5b:81:96:7b:9d:38:92:9c:
         ad:36:8c:a4:56:03:8c:24:de:50:77:78:5f:e0:78:99:c8:5c:
         96:28:a2:bd:e0:37:6f:02:30:43:c1:f4:d6:79:74:7d:3d:0c:
         88:e3:d8:6a:a8:db:95:04:c7:71:3d:8f:01:17:53:22:d6:6c:
         4e:e3:cb:38:de:14:26:c1:82:81:c3:67:60:83:46:a8:ee:2f:
         2f:88:80:6c:95:eb:c5:b4:50:ba:9b:2b:62:c5:45:da:71:7c:
         2d:e0:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:18 2026 by rpki-client