Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          mnmopCPF2bmPjfyJwPXiM9lDqiz34U85rp/zerQKNb8=
Subject key identifier:   BC:9C:DB:BF:F7:96:7D:92:FF:7D:20:F3:B4:A4:48:22:07:53:CE:5D
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019CAAC64689BD35B2924E20E67540B694DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0C73
Signing time:             Sun 01 Mar 2026 19:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:46 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: cgA+dGbMZJHrd0/elAo+jGa9LE8Tg/YN9ZNWeKRGFYU=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:46:89:bd:35:b2:92:4e:20:e6:75:40:b6:94:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Mar  1 19:00:46 2026 GMT
            Not After : Mar  2 19:00:46 2026 GMT
        Subject: CN=bc9cdbbff7967d92ff7d20f3b4a448220753ce5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:04:68:fb:38:26:3b:b4:c4:ee:43:f8:b2:
                    4d:ae:47:bd:6e:5b:f5:c4:7b:62:21:eb:aa:58:10:
                    ad:e9:e7:33:fa:f4:87:7b:4a:0b:a9:92:e8:be:b0:
                    fa:2e:67:73:93:8e:8e:0a:87:df:38:d3:a9:ff:ff:
                    d4:52:df:bc:17:8f:d1:91:16:88:74:2e:b2:80:e9:
                    f2:90:21:3d:5e:d6:a8:3b:33:7b:a9:2c:36:80:0a:
                    00:46:b9:aa:b9:af:5f:f2:8d:a4:b3:15:cd:45:c9:
                    80:97:9d:26:96:5b:9e:e8:5a:ef:2b:a6:cd:04:cd:
                    84:66:5a:2d:61:91:7f:46:37:51:57:ca:d1:55:a6:
                    20:8d:ae:ce:6a:74:ac:2c:3b:59:b6:87:a1:b7:bd:
                    1a:06:fa:4b:da:2d:8d:96:97:2b:42:62:2e:95:65:
                    0d:74:41:1e:28:cc:20:33:8f:2c:09:33:65:4e:7a:
                    4d:8b:fb:73:2b:ae:2c:18:b3:58:c1:8d:f3:1f:df:
                    e4:28:c3:77:d7:12:15:b9:cd:36:4e:18:0f:5a:d3:
                    06:bc:00:e6:39:19:28:89:e4:98:99:ab:2c:a6:2b:
                    01:60:82:45:b3:93:81:1a:19:0d:8a:a6:4e:57:c6:
                    cd:00:81:08:86:2c:be:40:c1:de:4e:08:89:95:78:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9C:DB:BF:F7:96:7D:92:FF:7D:20:F3:B4:A4:48:22:07:53:CE:5D
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:e6:ee:b3:42:77:0a:45:47:3e:16:6d:a9:d5:f1:be:cc:
         48:65:27:19:b5:ee:07:7b:21:c0:25:89:4b:7e:58:07:b4:57:
         7c:cb:8a:ef:7d:d5:b2:06:ca:40:05:89:a8:f0:ff:84:89:de:
         49:59:13:07:ca:ec:fd:99:6c:3d:20:bf:af:41:0b:de:4f:3b:
         03:32:dd:6b:c1:e4:0c:77:e2:cf:a5:f4:84:59:2e:0d:cf:ce:
         b7:81:df:30:79:01:2f:c5:d4:c0:7e:2c:27:4c:8f:8f:e0:0d:
         3d:52:e1:c2:e7:31:50:90:ca:4f:fb:8c:d2:50:f3:64:49:d1:
         d0:11:ec:68:c5:18:f9:4d:dd:4b:3c:7a:6f:94:b3:dc:c5:c2:
         d6:5c:fa:43:68:ce:d7:15:97:94:aa:f3:51:60:10:c9:6e:4f:
         e7:77:72:f0:00:1c:ad:7a:14:de:7f:3f:f0:8d:0d:0d:61:5d:
         6b:56:82:08:29:69:1f:d9:bf:51:1f:f1:af:2a:c7:69:32:3b:
         2c:70:c0:35:de:ca:47:5f:d4:3c:90:44:26:f2:7e:f4:08:45:
         42:32:02:af:88:f5:4b:4e:88:02:28:1a:3e:87:c3:2d:27:61:
         46:58:02:f6:a3:54:c8:d7:01:d1:3d:25:64:6f:13:57:05:fb:
         89:d6:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:49 2026 by rpki-client