Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File:                     bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier:          h+mFILq4Z/sSu9utiycrEvXMN8NiSJPQIN/irDiYa6M=
Subject key identifier:   0D:96:20:0A:A5:6F:9D:E0:15:39:6F:BD:85:D5:68:1A:19:F8:30:FB
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer:       /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial:       019CAC7DF4C4FF20CB910777B24642207B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number:          0748
Signing time:             Mon 02 Mar 2026 03:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:01 +0000
Files and hashes:         1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: yMHsxAZ8ZDnqW+3oNtVeD9/WJVxz34kfLsAyZvAfNdQ=)
                          2: zqPQFXRJf74G4JhmRgtWhS_jMk4.roa (hash: ikDZT7vRt5mAD1vPpg5L69iXwnQy7gbLVQl9JYyhzUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:f4:c4:ff:20:cb:91:07:77:b2:46:42:20:7b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
        Validity
            Not Before: Mar  2 03:01:01 2026 GMT
            Not After : Mar  3 03:01:01 2026 GMT
        Subject: CN=0d96200aa56f9de015396fbd85d5681a19f830fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:0c:bf:0e:38:49:84:4f:2b:bd:76:c4:7c:
                    1f:9d:8f:91:6e:92:a5:d4:91:56:a9:7a:f6:f6:96:
                    c2:8e:91:d2:b7:b9:79:72:6b:d2:0a:09:8d:a7:53:
                    f7:31:e7:c4:fc:5d:e7:37:fd:8f:8c:55:37:62:ce:
                    e4:74:53:26:93:24:9f:f6:81:71:f6:a8:92:2a:6d:
                    d8:19:e0:e6:94:4b:b1:2c:8e:6d:03:ea:4d:c0:4a:
                    6a:03:d2:c3:a3:49:44:0b:98:31:62:fa:c9:bd:99:
                    2e:6d:58:f1:68:dd:90:2c:98:0f:6c:b2:ce:e2:9c:
                    de:7c:1a:c0:ce:f8:2c:41:10:ba:f7:02:51:47:88:
                    48:3e:a5:e8:42:c8:a0:49:12:62:ec:14:fb:6b:88:
                    53:6e:d1:ff:04:66:51:65:fe:3d:f4:4e:c7:81:bd:
                    d8:57:29:bb:0d:60:7d:bd:4e:78:82:bf:a1:30:c3:
                    17:51:8d:7f:4c:ea:41:b7:a8:35:b6:8e:47:0e:80:
                    46:bf:e6:d5:bf:5a:55:aa:aa:d4:80:07:96:6b:88:
                    66:33:dc:28:aa:b4:d8:01:a4:cb:06:3c:6b:8d:79:
                    96:68:71:cb:46:3b:a3:01:a4:03:9c:2e:87:18:49:
                    60:18:c4:f2:81:bb:cb:7d:46:3f:89:d1:64:8d:b3:
                    b7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:20:0A:A5:6F:9D:E0:15:39:6F:BD:85:D5:68:1A:19:F8:30:FB
            X509v3 Authority Key Identifier:
                keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:db:78:0e:92:ce:84:3a:2c:86:92:72:7e:ee:8f:1b:82:
         94:1d:e7:a6:d3:8f:e6:bf:0f:9d:1e:bd:3a:d4:cc:7f:a3:42:
         65:8a:4f:46:69:fa:49:15:46:4d:39:a3:6d:a9:a6:b7:9d:93:
         e2:f2:5e:7b:87:8a:28:04:e3:79:64:2d:e2:bf:96:31:4b:fd:
         d1:31:b8:49:7d:f1:19:9c:66:7d:47:65:c8:8b:3b:06:ed:13:
         fe:63:a0:35:40:95:d7:ca:84:01:18:e8:9f:13:45:91:17:67:
         81:a9:8e:5a:f6:fd:68:b8:0f:6c:b5:f4:ca:36:bc:94:b4:67:
         cf:98:cd:72:ce:43:75:92:aa:85:e1:9d:24:18:63:6b:d4:d4:
         54:23:51:b3:3f:b3:fd:ad:bf:5d:c3:38:32:b7:7f:eb:99:f3:
         0e:8e:7b:9b:0b:d1:8e:f4:ea:aa:a4:d1:b6:cf:12:ad:0c:3a:
         88:bc:ea:39:59:c7:e7:4c:8d:53:59:8c:be:7d:18:0d:81:c6:
         ec:b6:fe:29:00:13:5f:1d:ce:6b:73:38:46:83:95:35:0a:c0:
         6d:eb:dd:21:e6:4d:ec:2e:c6:45:e4:08:8c:2b:54:a8:be:47:
         83:5e:eb:46:de:4f:52:56:d6:fa:5c:29:5d:7d:f7:0a:d0:72:
         3f:ff:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:45 2026 by rpki-client