Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          3SHtsjh0vJZcNK4R4ac0PHPEBuEiDW/AWRYC5ebdLmg=
Subject key identifier:   A1:29:A8:5C:B1:78:80:90:B3:13:56:E3:13:41:08:D3:F4:65:AF:AF
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       019CAB34AD675BCEA7355F4E6D6DDF3C1C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 21:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:22 +0000
Files and hashes:         1: hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa (hash: tVKpwayqN7JLwz8QolMBhYOxzzJLIK1oL+xvKaEZs9o=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: D8eQCgoAWtQk2P8htlK4lk0/YLkl0LOl0NWoiZgvz/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:ad:67:5b:ce:a7:35:5f:4e:6d:6d:df:3c:1c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Mar  1 21:01:22 2026 GMT
            Not After : Mar  2 21:01:22 2026 GMT
        Subject: CN=a129a85cb1788090b31356e3134108d3f465afaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:d5:67:c7:69:6f:50:b7:ac:7e:5a:41:73:
                    9c:c3:05:5a:71:6d:b1:77:d3:d1:e9:88:69:bd:1a:
                    53:94:d6:55:f6:2a:15:28:c9:71:84:5a:b8:3d:0a:
                    c3:2a:e6:82:88:cb:d4:cc:0e:42:aa:2e:63:aa:fc:
                    01:6b:e4:9d:b4:4c:9b:bc:24:e9:75:bb:e9:48:aa:
                    49:65:d4:34:9d:6d:fd:d2:66:85:82:5b:ae:bf:59:
                    d0:95:a0:5e:7d:df:ce:4d:b6:0c:2e:90:fa:6e:0f:
                    81:bf:d0:f5:07:f1:e7:d4:4f:f4:98:03:83:60:ab:
                    d5:4e:99:a7:1e:9e:ab:37:26:6b:57:c3:5c:f8:ac:
                    58:c6:79:e5:23:c2:2f:c9:4e:fc:fc:5d:f5:a1:53:
                    65:cc:4e:d6:9c:da:93:af:82:ba:7c:ca:c2:fe:57:
                    2b:e1:39:63:d8:65:4a:65:a2:4e:2f:3f:ee:41:b2:
                    34:c1:ca:ea:12:fb:fb:13:a3:59:22:20:d8:8e:81:
                    67:3b:88:29:29:08:02:48:f9:ce:b9:d7:d2:b7:16:
                    58:9d:ac:15:b6:a8:67:cb:12:db:fc:00:30:66:8c:
                    fa:c5:a4:fe:94:7f:ce:30:be:25:fa:1b:ce:50:12:
                    40:c9:2d:77:ad:3a:12:1c:f2:79:36:66:22:c0:e6:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:A8:5C:B1:78:80:90:B3:13:56:E3:13:41:08:D3:F4:65:AF:AF
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:60:48:78:2e:bf:fd:9a:70:59:e3:d8:de:bd:da:d4:1c:1b:
         74:fc:3f:9b:a2:2f:7e:d3:18:5b:9d:42:39:f1:6b:25:0e:13:
         57:0a:ae:b4:1e:30:87:3d:de:23:84:e3:27:b8:98:72:bc:58:
         ea:dd:92:36:e6:62:5b:1f:ae:36:76:a9:45:ec:1a:43:e9:f2:
         c0:85:59:5a:51:09:90:8f:aa:b2:43:0e:01:60:ad:0d:51:f9:
         40:85:7b:64:ae:a2:41:b1:ab:b5:d2:c8:6e:16:8c:0e:18:b9:
         cb:f4:e1:ec:82:c6:62:66:ae:5f:bc:f5:1d:de:bc:04:b9:43:
         82:56:3d:4c:13:28:50:d4:40:db:43:df:57:04:ad:95:1d:3c:
         0a:f4:12:e2:e3:55:14:4b:ee:18:33:f9:1d:bb:43:9e:b5:59:
         3a:df:8f:3d:53:5c:e6:72:58:e0:44:5c:79:a0:15:75:69:58:
         c5:20:29:f3:31:5e:e4:55:a3:da:d7:20:bf:a3:ca:4c:d6:86:
         a4:6e:99:c0:11:b6:cc:b3:a0:bf:e6:6e:f8:92:7a:d3:66:71:
         95:dd:57:32:21:f5:13:94:64:43:0e:01:58:fb:66:51:c2:9a:
         1b:e1:d1:12:0d:ab:4b:43:b6:fc:59:7b:35:c7:a8:e7:8c:cd:
         5f:28:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:42 2026 by rpki-client