Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          MVCyCmmxeVh6K14zvF1qT+KHelev932RU1wPzQiBoko=
Subject key identifier:   E4:6B:8E:EE:27:D8:22:A2:47:0B:74:B0:65:29:80:F4:7A:C6:A2:EB
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       019CA9B3F0E03EA999A550A4AD13F53EFF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          075B
Signing time:             Sun 01 Mar 2026 14:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 14:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 14:01:07 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: o9bzcgD8YgKAa0+8qiFLCOYd+N01ymc4LjtH1snWY9M=)
                          2: SvlrZHFg845ZhN1Rz3nRAlL1Haw.roa (hash: QGEa378gKuRJuCW4Gpo84qPKj3oloBziyCo0m8Zc5kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:f0:e0:3e:a9:99:a5:50:a4:ad:13:f5:3e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Mar  1 14:01:07 2026 GMT
            Not After : Mar  2 14:01:07 2026 GMT
        Subject: CN=e46b8eee27d822a2470b74b0652980f47ac6a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:6f:22:a8:97:bd:ee:83:58:e1:6b:13:b2:
                    9c:4b:8d:a1:a5:ec:c5:41:07:c0:b8:0d:68:3d:69:
                    97:f9:47:f7:00:22:63:bb:4b:5f:d8:78:43:85:30:
                    18:35:7a:d0:26:d6:91:09:d3:20:dd:62:d1:b8:15:
                    fc:09:2d:c1:e9:81:bc:4d:57:42:71:d8:f0:3d:5c:
                    82:d5:f9:01:3f:a9:a6:15:fe:c4:81:7a:8c:85:ab:
                    35:83:c0:82:09:d7:9b:f2:c3:e5:ea:ef:70:bc:23:
                    de:d9:55:0d:cd:8e:95:7c:fe:ea:dd:02:e4:db:09:
                    13:2d:64:cd:7f:83:2f:30:33:fb:35:a2:7b:28:2c:
                    78:9e:de:c6:df:dd:5d:ff:81:df:ea:35:3f:50:a0:
                    0f:1f:bb:1a:5e:50:23:bc:65:70:b5:51:68:87:33:
                    c1:e5:9d:e3:09:62:63:ae:06:64:4b:f0:38:82:d8:
                    de:28:43:fe:14:25:df:cd:2e:55:2e:0a:c5:b1:90:
                    5a:da:d8:f5:e1:8c:df:9d:e2:b6:fe:74:96:99:63:
                    a3:bc:b7:15:8e:84:77:db:92:0f:a0:2d:3b:04:7f:
                    97:4b:e0:79:66:f4:1f:ec:6d:07:4e:4f:b7:12:61:
                    41:9b:57:fa:58:a7:4c:cf:c4:87:19:f6:36:3e:fe:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:8E:EE:27:D8:22:A2:47:0B:74:B0:65:29:80:F4:7A:C6:A2:EB
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:45:f5:21:0a:4d:4d:25:ea:ad:bb:98:fe:ba:66:98:bc:
         b5:22:ee:8b:01:7c:d1:f5:0f:5d:59:ea:8f:25:52:3f:2a:1c:
         99:0d:a8:2f:f4:3a:a2:1c:72:68:e3:47:be:de:e0:7a:59:39:
         cd:be:d9:c7:15:94:f1:9d:c7:2e:6a:5d:4e:9d:a2:ac:90:cd:
         e3:54:bb:9b:86:cd:96:26:44:e7:9f:6e:46:39:a4:27:6d:d2:
         22:ca:e7:64:28:fa:e3:27:ba:29:3e:e7:b1:8b:51:b4:1b:38:
         4a:4a:23:b9:78:a3:da:78:30:4a:a0:ee:2d:d7:08:36:7b:e5:
         1d:a3:ef:47:3d:d6:0c:d0:d4:88:69:f0:9e:d2:6a:0b:50:0b:
         c2:8f:6a:3f:2e:60:76:63:a7:e7:8e:94:87:91:5b:8a:96:ca:
         c2:16:e7:31:e3:83:57:32:ca:6e:d4:4c:c2:ac:d1:4d:4b:b2:
         d6:78:67:ed:a8:24:4c:7e:9e:bb:82:3d:36:ca:8a:85:0d:c7:
         4c:9a:8e:cd:c2:d0:5e:b0:92:9f:d6:4f:62:d0:95:e7:89:04:
         25:64:62:38:c6:87:5d:40:6e:b2:46:20:21:9c:92:a3:67:33:
         35:e8:2f:a7:76:cd:bc:52:7d:cb:3f:7a:13:68:f7:9e:98:d7:
         05:3a:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:58 2026 by rpki-client