Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          TrnUYKg/FGAmr2pOSMxlzyOB1+7DhP48hpa1nwyqgOk=
Subject key identifier:   02:6B:EF:D2:8C:12:0D:A4:60:D7:D6:D6:1C:64:6A:E6:A0:95:FB:64
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019CAFB5B8F4D266451D6DA6F6941683FD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          031B
Signing time:             Mon 02 Mar 2026 18:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 18:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 18:00:48 +0000
Files and hashes:         1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
                          2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: OcHiSQqhgIsVIFQwL8fa3KA/j1fd2dgve/owZmLkL4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b5:b8:f4:d2:66:45:1d:6d:a6:f6:94:16:83:fd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Mar  2 18:00:48 2026 GMT
            Not After : Mar  3 18:00:48 2026 GMT
        Subject: CN=026befd28c120da460d7d6d61c646ae6a095fb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:4a:37:de:a9:44:53:f5:ef:13:88:7a:7f:
                    97:9f:7e:ca:5f:89:f7:10:29:ed:71:b0:84:2e:ef:
                    ba:a2:05:61:21:31:0f:f6:c7:ad:e0:bc:c0:9f:d6:
                    aa:6d:b1:75:b1:8e:b9:08:3d:5d:0a:6e:41:0d:63:
                    94:62:a6:fd:5c:fd:e4:e9:0e:0b:02:0c:cd:03:f2:
                    80:cd:4f:f8:42:c2:cd:93:cb:17:a3:f0:b7:e6:a8:
                    36:6c:01:09:65:60:17:60:fc:82:4c:79:52:42:ef:
                    18:a1:fb:4e:3b:cc:9c:7a:b4:92:18:f9:53:d6:73:
                    5b:33:71:cf:0b:91:a5:39:eb:69:19:85:91:5c:7c:
                    be:a6:00:12:dc:dd:73:62:8b:28:fb:61:f0:af:66:
                    98:b5:e9:68:63:1f:20:cd:6b:ac:45:8a:24:df:3e:
                    ba:94:2e:71:1c:14:93:72:0f:3f:17:2c:4c:90:ea:
                    e2:16:5b:53:ee:22:6b:bc:d6:3c:be:d0:33:66:cb:
                    69:84:23:eb:d3:52:48:d8:32:dd:1b:50:58:cf:18:
                    0a:34:8c:6f:7b:89:3e:56:ab:30:4d:19:63:66:2e:
                    81:f6:1d:f3:1e:67:c9:71:04:d2:32:81:07:6a:28:
                    a5:3a:ac:0e:76:04:28:4c:f4:7e:1f:e4:74:b8:d3:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:EF:D2:8C:12:0D:A4:60:D7:D6:D6:1C:64:6A:E6:A0:95:FB:64
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:f1:3b:42:6d:db:9d:2e:96:70:44:eb:be:0a:3a:33:45:
         2a:95:74:ac:b0:b4:97:77:3b:a3:80:6a:c6:90:0f:4c:e3:72:
         73:82:6e:15:0e:b2:e1:ac:1b:c2:39:b2:21:8b:5f:23:cb:c4:
         fb:36:aa:6d:34:f3:24:a4:4c:bd:00:4d:ed:b9:05:9b:c8:fc:
         2a:15:5a:54:f9:a0:40:61:83:9e:5f:d3:29:b6:ae:23:18:75:
         52:48:38:e0:fe:7c:ba:c6:8a:21:0f:93:ba:37:3b:0d:4b:bb:
         26:83:b9:26:3f:22:2e:03:13:2f:e4:4c:6a:46:9e:31:5f:c3:
         b7:3d:d0:16:6c:30:a6:b5:10:bf:76:63:a1:48:22:f5:61:21:
         f4:27:66:fd:4b:14:0e:60:68:13:d0:83:9f:d9:b3:a1:7d:58:
         4f:cc:b2:f6:9f:0d:0e:2a:74:49:6d:c7:d2:7b:eb:54:c4:96:
         58:0c:b2:1a:19:75:41:75:94:bc:75:d8:71:c3:69:8b:d1:90:
         17:fd:44:3b:67:dc:07:f6:b2:51:68:31:66:e1:df:af:2d:af:
         20:95:27:37:b9:ac:7e:31:77:73:87:04:d1:f1:71:34:07:3f:
         8d:29:87:b8:b7:21:77:7c:3d:f1:08:7f:43:d7:f4:59:b4:2f:
         01:97:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:29 2026 by rpki-client