Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
File:                     By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json)
Hash identifier:          +TBR2GapyCuyjyiAf2k+Q+TsXSQOd5nHaHWarR5PS0E=
Subject key identifier:   E5:2D:31:BB:8D:2F:80:EA:9D:DA:00:AD:B7:D0:48:C4:FF:BD:43:F0
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Certificate issuer:       /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial:       019CACB4F401FEABB1A95EEE671F0617AF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
Manifest number:          45
Signing time:             Mon 02 Mar 2026 04:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:05 +0000
Files and hashes:         1: 0UcCLrH31OoiY9vn-H25YX85GRk.roa (hash: zsHhkNtCwbXR/M7zDVNWDz1iSQbLW5ZpHFri9xWmZ30=)
                          2: 39UtiwRanfdVAezzQQpEd13UB08.roa (hash: YxE7Edc+a6NH5tSiYV8kT6sjjgpdiQ4CkWE/R+15ILI=)
                          3: 6BtVcQ_ZYtduv1XLafyOLEJzY0k.roa (hash: Xu4eAyvLY8fcHbJYD67JsRTonGok8ykhcr1+fNZCbpw=)
                          4: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: HefNF3lh2EVGV+qK1yi3pq3pMHiKTEWlIw7+jdNZUwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:f4:01:fe:ab:b1:a9:5e:ee:67:1f:06:17:af:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
        Validity
            Not Before: Mar  2 04:01:05 2026 GMT
            Not After : Mar  3 04:01:05 2026 GMT
        Subject: CN=e52d31bb8d2f80ea9dda00adb7d048c4ffbd43f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:4f:53:5d:ff:4f:70:5e:73:dc:ed:0c:8c:
                    15:95:5b:cf:bb:2c:dc:c0:7f:01:eb:e6:14:74:03:
                    02:0b:9b:8d:90:8b:0b:dc:a9:40:14:55:5c:c8:d3:
                    cd:b0:64:b6:98:01:b1:8b:89:e3:4b:21:05:6c:8c:
                    0a:98:9a:7e:42:98:26:24:6e:6b:b8:10:6f:b6:3b:
                    e9:bc:db:46:1d:0e:93:43:18:62:79:2e:96:3e:9e:
                    d6:79:2e:38:9a:34:2a:99:6d:ff:78:ff:b7:e4:c8:
                    48:a9:21:ad:fb:7f:88:49:0c:1f:c9:cb:0c:ae:7c:
                    11:03:39:6c:f4:1b:80:10:cc:bd:74:c6:cb:e1:77:
                    bd:84:e1:c9:6d:75:ce:e1:ed:a8:96:3e:8c:a4:c6:
                    ed:3d:49:71:d0:6d:40:ae:aa:ab:e6:50:2c:eb:f9:
                    93:d3:87:d9:79:63:73:4b:de:bd:1f:9a:82:23:13:
                    87:8b:37:a4:11:15:91:a0:7f:5e:9a:49:ef:ce:1b:
                    fb:d6:1f:69:c0:ea:9f:45:dc:af:69:54:25:3b:83:
                    f9:69:5b:df:85:95:d7:6c:2f:f1:12:9d:96:f6:7a:
                    39:28:fd:d5:68:24:b9:01:7d:a4:89:18:26:2b:8b:
                    33:12:41:e4:30:1a:77:a9:96:78:fa:49:7a:40:e5:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2D:31:BB:8D:2F:80:EA:9D:DA:00:AD:B7:D0:48:C4:FF:BD:43:F0
            X509v3 Authority Key Identifier:
                keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d5:45:5d:c2:0e:00:54:10:c8:05:a5:92:12:aa:a2:21:e3:
         e7:3b:d7:2e:d0:e4:03:ec:52:2a:db:7c:b6:cc:47:bf:a4:be:
         07:c0:a2:e3:c6:15:5f:23:43:f7:0b:c4:cc:0c:14:77:87:3a:
         9e:ad:a9:e0:76:61:61:b1:0e:17:0f:53:b4:c8:2a:d9:bf:a9:
         b7:24:83:43:5e:a8:05:0e:dd:c5:e7:e7:02:fe:27:7d:43:c4:
         94:70:7a:bd:42:77:40:1b:fa:4f:05:3e:29:3f:32:74:80:29:
         08:31:67:a0:2c:59:f8:59:bb:71:8b:d8:9e:02:a0:d2:a6:53:
         9f:1a:2a:68:d1:0a:8c:37:ad:e4:83:41:cf:32:a5:bf:62:cd:
         25:ba:8c:e1:eb:ca:b8:5a:47:55:2c:af:f0:50:44:a4:81:48:
         64:06:5d:c6:f2:60:77:a6:b6:a6:28:3e:b1:84:4f:57:62:39:
         01:0c:29:60:8e:7c:71:2c:e5:d8:05:f9:a7:36:c6:8c:c3:b8:
         59:70:a3:8c:2d:95:56:d5:36:3d:56:d4:92:27:b5:79:a6:ae:
         d2:1c:cd:cc:ee:5a:10:f3:f3:93:f6:b8:86:52:dc:b9:1f:50:
         ee:cd:5a:87:32:9b:e2:a4:b1:ab:24:f8:ac:b0:9f:f0:a5:de:
         70:f1:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:21 2026 by rpki-client