Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File:                     bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier:          yZ8dnUjrykJMdpjafPOhEfcEW2VsXEzzeHEGvIqflvA=
Subject key identifier:   2F:B8:3D:82:35:78:00:A1:8B:E5:B7:A8:8A:2E:3D:43:E8:A8:F7:29
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer:       /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial:       019D98F4A0F6856F1CE983C8300935B3D75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number:          1850
Signing time:             Fri 17 Apr 2026 01:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:01 +0000
Files and hashes:         1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
                          2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: TQAYqB62LAavOpfMJLy6+SkvFuhHCTfS1AXycEDM9uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:a0:f6:85:6f:1c:e9:83:c8:30:09:35:b3:d7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
        Validity
            Not Before: Apr 17 01:01:01 2026 GMT
            Not After : Apr 18 01:01:01 2026 GMT
        Subject: CN=2fb83d82357800a18be5b7a88a2e3d43e8a8f729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:db:9d:2a:1a:cb:65:f6:29:d8:6a:01:12:
                    30:ab:cd:f9:c2:bd:56:79:60:52:fe:57:71:9f:07:
                    61:b4:75:52:d1:aa:9e:08:a8:e1:eb:89:03:05:c7:
                    ac:9d:7e:8c:48:bd:ff:9d:4a:5c:f9:9e:68:1f:e8:
                    f8:c2:fc:18:29:47:60:76:a4:f2:73:44:41:fd:8e:
                    30:d7:45:ef:74:ea:1b:32:81:d8:1c:ce:58:44:4b:
                    35:48:94:fd:04:75:26:a4:7c:91:f9:3f:04:92:ba:
                    8b:e8:c5:59:d2:f0:61:c6:0b:14:ac:28:8f:16:ee:
                    5d:51:24:ab:48:32:b5:48:8c:62:d7:de:93:9b:87:
                    30:f3:85:4d:03:72:f4:8b:e6:e7:cb:c3:64:a9:50:
                    e1:90:ec:2a:95:c5:5d:ea:0b:9e:d2:60:7b:73:48:
                    2f:db:47:5d:2c:3b:2c:60:44:e2:02:9c:51:11:53:
                    47:85:8b:ce:19:6d:2d:d1:2d:fe:b6:c3:17:d0:30:
                    34:17:94:5e:c9:6a:31:af:8b:b3:03:36:83:41:cb:
                    71:b2:40:40:46:7c:bf:69:16:b2:86:87:6b:47:49:
                    3e:4e:ba:e7:63:a0:eb:a1:d2:10:dc:75:09:60:3d:
                    cf:d2:85:9e:95:c2:ac:76:4b:4f:e3:3b:8a:50:1f:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:3D:82:35:78:00:A1:8B:E5:B7:A8:8A:2E:3D:43:E8:A8:F7:29
            X509v3 Authority Key Identifier:
                keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fc:ba:d7:c4:96:0f:40:da:52:bb:73:8e:b7:bc:ec:5f:93:
         cb:f3:7d:30:30:1c:10:f5:96:23:5b:9d:7f:90:cc:b6:8e:a6:
         20:30:2c:84:d9:84:a0:e8:a3:9c:01:12:e3:1c:0a:59:46:d4:
         3f:7f:5f:5f:36:67:f9:15:07:f4:bc:15:92:d5:04:c2:ec:63:
         1e:14:22:df:88:fd:e3:f6:e7:de:8c:57:db:d2:45:0c:83:51:
         48:4f:e2:ce:d9:8f:0e:e2:89:71:98:51:a2:e8:43:24:33:dd:
         d1:cd:ae:5f:66:53:a5:f5:19:f4:c3:b6:58:63:f6:77:c4:70:
         3f:1c:3a:51:c3:6f:d2:50:7f:b7:ce:17:cd:a5:87:da:fc:ce:
         5f:25:b7:19:ff:48:d9:17:13:74:45:5f:27:7f:f6:e1:1f:9b:
         95:92:a3:8f:53:4a:2d:24:55:a5:bb:7a:4e:11:4f:65:dd:78:
         76:ac:0d:cb:46:e6:2b:6a:a3:b1:81:66:c6:04:ba:f6:1c:39:
         bf:28:df:47:ac:ec:20:53:66:9f:fc:db:70:72:be:3c:bc:f8:
         21:13:7e:23:8a:fb:26:0a:ea:a3:c2:c7:22:de:c4:77:70:05:
         b0:85:09:3d:24:05:45:a5:51:55:71:fa:2f:2f:81:bc:4c:bb:
         57:19:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:23 2026 by rpki-client