Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
File:                     Bb_btqSxZjNp2kB9uXsCH3MoSig.mft (raw, json)
Hash identifier:          y0TNWBFKLx0tFMJCAoa0iFXGMKaayQoISAVUdSJoM7Y=
Subject key identifier:   50:37:93:2C:A8:C1:1B:D1:99:6E:25:D7:F6:4C:B5:78:6F:D6:CE:17
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019CA8D8379CB7FF29DE9578A1A72EE19FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
Manifest number:          149A
Signing time:             Sun 01 Mar 2026 10:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 10:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 10:01:08 +0000
Files and hashes:         1: 7VIKCa61Z75pFNublu7wlAtvkh8.roa (hash: d/0djTjrhOewyBKD6bQpZD7nKtygIdgcjwVz9/qNO9g=)
                          2: Bb_btqSxZjNp2kB9uXsCH3MoSig.crl (hash: JaStqPc99BUuuv03+IPhKF4sRovE8oWLAgCJPWuJHMA=)
                          3: JyAGENEBYI2RUrGflH3181W7wwE.roa (hash: HdxEi3V75II9paWrrSvMYM0URyA0KzY9zHOSzqzIBUI=)
                          4: uGgURm4xZb_PGCLcLHmslzE7biA.roa (hash: pIGXgkw2db69+0HAwWrFE2B3kXizGYdLfC7lC0LFfVk=)
                          5: wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa (hash: +vnxHkv9IVNBAo2p+O8n8zZLqGi1fGQbtfQSaGakEfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d8:37:9c:b7:ff:29:de:95:78:a1:a7:2e:e1:9f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Mar  1 10:01:08 2026 GMT
            Not After : Mar  2 10:01:08 2026 GMT
        Subject: CN=5037932ca8c11bd1996e25d7f64cb5786fd6ce17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:73:0b:66:19:91:a8:66:74:06:14:5c:19:
                    4e:53:d9:57:dd:fe:f7:34:83:23:af:d9:49:ee:cf:
                    b8:8f:d7:9d:98:a9:75:7c:1a:90:25:60:b8:e3:be:
                    e7:d5:34:85:3b:ec:3e:59:a8:cd:08:a5:a4:cf:9c:
                    b8:8e:ff:30:a4:bc:fb:f9:78:ef:4e:3c:08:bf:ab:
                    bb:83:bf:23:8d:0b:0d:19:24:08:24:4c:a0:f7:5f:
                    86:1f:ba:c6:31:6c:ee:43:fc:d9:68:6b:92:b3:fc:
                    cc:4d:c3:3f:28:cc:13:0f:63:c1:06:e9:f7:51:e3:
                    e0:77:e7:27:4c:ce:49:df:34:00:9d:38:44:df:77:
                    b0:16:81:3d:71:37:2c:8f:e0:62:25:3f:4c:fb:8d:
                    6d:3e:2d:50:0d:2c:95:eb:63:90:6c:0c:91:b4:b9:
                    d2:8d:84:fe:84:b0:28:c1:df:52:89:72:74:5b:89:
                    b8:94:79:c3:21:7e:94:c2:28:3d:f8:4f:75:ca:46:
                    cc:41:c1:42:8b:0f:f0:f6:06:00:0e:77:0c:68:9b:
                    b3:57:6e:1e:7d:1e:0a:40:e9:dc:b6:58:c6:a7:4f:
                    c3:7b:25:16:e8:3c:ec:48:97:7c:da:eb:c2:5d:61:
                    ba:e3:74:59:57:e8:c0:cd:0b:a7:bd:ef:30:ec:0d:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:93:2C:A8:C1:1B:D1:99:6E:25:D7:F6:4C:B5:78:6F:D6:CE:17
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:20:e9:66:a2:e0:7b:97:fb:e9:dd:e6:31:0c:1e:ac:ff:
         51:53:8d:7c:c1:4f:6c:86:b7:2c:c2:46:95:e1:5d:a7:49:eb:
         4d:ea:f6:50:49:d4:33:c6:ad:5b:1f:6c:07:29:99:f4:da:b3:
         48:e2:cf:62:24:df:9d:20:b4:79:ee:7c:ab:cb:8d:71:b2:48:
         da:52:bb:ec:65:13:92:3c:0c:c5:33:5d:6a:24:ab:50:1e:6a:
         64:87:6f:d2:cf:14:a3:e2:8a:7a:d1:c7:ac:3c:e6:6c:94:3c:
         51:66:94:7d:61:12:08:2d:3a:c3:1e:38:90:c3:ab:5c:c7:18:
         4a:12:2a:87:d2:10:fe:5b:23:19:db:35:99:a6:9e:e7:de:7e:
         70:3f:19:e8:d8:c8:62:f6:e3:1e:ec:9a:07:ec:4a:f2:01:ba:
         dc:6c:d3:8c:62:d4:f1:72:16:40:3b:10:ad:f2:3c:96:23:67:
         b1:97:b7:0a:c1:4b:68:b8:51:bb:04:a8:78:87:24:88:5a:1d:
         4e:19:58:3e:97:a3:30:13:52:44:09:ac:08:d9:0a:43:0d:d1:
         e9:35:b9:9a:1e:cc:db:d4:04:fe:85:07:d2:15:70:66:a0:9d:
         77:06:84:05:b2:36:f3:bc:98:6e:e6:49:0c:59:a1:c1:97:0c:
         bc:f0:cc:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2Dect/8p3pV4oacu4Z+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy
ODRhMjgwHhcNMjYwMzAxMTAwMTA4WhcNMjYwMzAyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg1MDM3OTMyY2E4YzExYmQxOTk2ZTI1ZDdmNjRjYjU3ODZmZDZjZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqStzC2YZkahmdAYUXBlOU9lX3f73
NIMjr9lJ7s+4j9edmKl1fBqQJWC4477n1TSFO+w+WajNCKWkz5y4jv8wpLz7+Xjv
TjwIv6u7g78jjQsNGSQIJEyg91+GH7rGMWzuQ/zZaGuSs/zMTcM/KMwTD2PBBun3
UePgd+cnTM5J3zQAnThE33ewFoE9cTcsj+BiJT9M+41tPi1QDSyV62OQbAyRtLnS
jYT+hLAowd9SiXJ0W4m4lHnDIX6Uwig9+E91ykbMQcFCiw/w9gYADncMaJuzV24e
fR4KQOnctljGp0/DeyUW6DzsSJd82uvCXWG643RZV+jAzQunve8w7A3LxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA3kyyowRvRmW4l1/ZMtXhv1s4XMB8GA1UdIwQY
MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt
MDYwZGFjZmViZTBmLzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm
LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACicg6Wai
4HuX++nd5jEMHqz/UVONfMFPbIa3LMJGleFdp0nrTer2UEnUM8atWx9sBymZ9Nqz
SOLPYiTfnSC0ee58q8uNcbJI2lK77GUTkjwMxTNdaiSrUB5qZIdv0s8Uo+KKetHH
rDzmbJQ8UWaUfWESCC06wx44kMOrXMcYShIqh9IQ/lsjGds1maae595+cD8Z6NjI
YvbjHuyaB+xK8gG63GzTjGLU8XIWQDsQrfI8liNnsZe3CsFLaLhRuwSoeIckiFod
ThlYPpejMBNSRAmsCNkKQw3R6TW5mh7M29QE/oUH0hVwZqCddwaEBbI287yYbuZJ
DFmhwZcMvPDMcQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:12 2026 by rpki-client