Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          m8cLLaltkVLdcPmf7ZlWQW0IasYr6Az3pd0tx50I3oI=
Subject key identifier:   CC:07:F7:58:91:40:60:D6:86:0F:CD:4F:8A:21:30:55:5C:9B:18:79
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       019CAB6AE8000A562E910D981CCD7AB74934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          16F6
Signing time:             Sun 01 Mar 2026 22:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:35 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: pXEQZq5A/FfIj1GfasT0v3I1OH6mc/zNUFrDhgeFVJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:e8:00:0a:56:2e:91:0d:98:1c:cd:7a:b7:49:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Mar  1 22:00:35 2026 GMT
            Not After : Mar  2 22:00:35 2026 GMT
        Subject: CN=cc07f758914060d6860fcd4f8a2130555c9b1879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:85:0a:aa:0b:28:3d:47:5f:e0:0f:48:bb:
                    c0:85:3c:72:13:ae:7b:1e:8a:c5:27:38:2e:ef:10:
                    71:66:82:6d:ab:17:44:e7:a3:bc:9e:af:97:42:86:
                    63:1b:8f:2e:9d:7b:d0:3e:7f:55:81:17:43:34:b9:
                    e9:47:64:c5:0c:c7:34:ea:e8:33:30:d1:85:ef:bb:
                    6e:69:a3:32:26:29:67:d7:e6:b0:24:f8:e2:d0:57:
                    8d:87:b9:78:57:50:e0:cc:ac:66:74:c5:cf:df:18:
                    38:5c:5d:dd:5c:8d:b2:0a:dd:74:02:ff:9e:08:07:
                    a7:25:bf:19:b0:3b:fc:46:c8:75:1e:f0:64:1f:f4:
                    68:c5:49:e8:55:7f:72:aa:57:58:28:16:ea:65:67:
                    15:aa:dc:eb:9b:e2:8c:92:c7:76:ac:16:db:5f:11:
                    b0:79:fc:c9:76:5d:09:dd:8b:c8:36:75:b7:d7:98:
                    cb:7b:bc:2a:fa:59:91:bd:41:56:d5:fd:24:8c:ef:
                    d0:64:ac:3a:2a:e0:5e:12:43:14:92:07:49:39:47:
                    f3:8f:17:ef:8b:6a:f8:22:23:ca:8c:90:e5:87:fd:
                    b5:e8:ba:a1:55:30:03:a4:23:23:d5:5b:47:be:16:
                    f7:13:4f:0e:ce:cf:59:94:06:e1:80:6d:9f:56:e6:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:F7:58:91:40:60:D6:86:0F:CD:4F:8A:21:30:55:5C:9B:18:79
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:16:3a:1a:40:9a:57:7f:ab:6b:88:3d:0d:38:45:cd:1c:
         e1:a3:7f:cf:0e:01:02:92:28:be:78:34:eb:47:1f:43:cc:d7:
         ea:b7:eb:51:36:3b:46:80:28:82:a0:49:11:15:f8:89:21:0b:
         2a:d3:c1:11:56:2f:b5:c9:d3:26:97:b3:a8:1e:1c:61:53:b8:
         c4:d3:7b:5c:f9:df:aa:51:ce:11:1e:29:53:fb:c4:e2:e8:c3:
         59:2d:ae:12:34:bc:0f:1d:03:d4:0d:6d:9f:8a:f0:74:f7:fd:
         db:57:60:2c:03:35:b6:97:f0:cb:da:61:a4:71:90:fd:10:c1:
         3e:35:e9:bc:40:76:52:4a:52:00:25:c3:b4:3c:34:a1:2c:6e:
         3c:15:dc:72:8f:7e:f4:29:12:12:1a:6e:9f:7b:33:3e:72:fa:
         26:3b:4e:2d:b3:67:5f:42:41:b7:c8:8c:72:96:5b:d5:4a:e2:
         40:f0:c1:c1:02:ee:63:96:b8:c6:29:fe:55:19:1d:ff:f5:02:
         63:61:4d:00:5d:32:54:53:f3:ad:61:6d:a9:67:6c:08:29:39:
         27:16:73:35:f2:a1:0f:b6:0a:37:0c:76:e3:97:a3:82:5a:bd:
         a1:09:2d:98:c9:f4:d5:00:33:a1:60:a0:2a:3a:12:44:cd:1f:
         02:3e:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:45 2026 by rpki-client