Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          rvb2mi8OaZw77BOtb3y6WMoppUPPOcDZRTHowQZIw5Q=
Subject key identifier:   90:10:EA:CE:C4:C4:63:A5:E2:2A:9D:12:6B:C6:C7:86:53:DE:5C:51
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019CAA8FC58504103F7A86B18775B291C124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          052E
Signing time:             Sun 01 Mar 2026 18:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:14 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: DmX4KRAVuvHpf2vi35GI2d6AIu/LTbXeTZFRUTMHqtA=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:c5:85:04:10:3f:7a:86:b1:87:75:b2:91:c1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Mar  1 18:01:14 2026 GMT
            Not After : Mar  2 18:01:14 2026 GMT
        Subject: CN=9010eacec4c463a5e22a9d126bc6c78653de5c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:5a:ce:d6:0e:19:ce:a2:ea:81:09:e1:25:
                    e3:55:2a:aa:a4:bd:55:31:af:5e:04:51:da:d2:21:
                    e8:1b:a5:02:2e:ea:93:12:03:ca:28:11:51:a2:55:
                    e3:b0:fe:9f:32:84:2f:ff:3f:e7:4e:95:35:c2:5f:
                    15:7b:76:a9:dc:04:b0:29:46:8c:a5:b2:d4:fa:48:
                    f4:3e:fb:9a:eb:f2:35:a1:b3:f9:76:aa:be:1d:d0:
                    49:0a:cc:16:b9:98:17:ec:77:49:01:63:72:52:e4:
                    9b:e1:85:f6:ca:34:e8:e2:a3:a0:a6:e7:0d:ad:9f:
                    9f:c6:41:1b:f5:74:2e:6f:2d:04:34:5c:25:fe:98:
                    10:76:bc:13:2d:3d:43:2f:31:e2:32:b9:53:a0:e7:
                    ce:db:db:30:39:fb:64:3a:56:b3:82:3f:46:82:c2:
                    bd:35:88:43:c3:0a:43:40:85:84:fb:0a:9d:a0:7c:
                    94:fb:24:16:af:10:34:74:ca:d3:a7:08:ec:e7:73:
                    1a:6e:e4:01:c2:84:e4:22:61:21:d6:99:8e:87:4c:
                    c0:6d:5e:62:66:9c:f1:74:82:e7:2d:b0:16:c6:55:
                    08:66:03:c1:fe:6a:be:cb:c4:2f:df:ed:e1:36:4e:
                    75:dc:64:ba:26:db:6d:21:04:46:08:b8:58:5b:37:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:EA:CE:C4:C4:63:A5:E2:2A:9D:12:6B:C6:C7:86:53:DE:5C:51
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:68:e7:7d:ca:50:d5:c1:4c:78:68:d4:30:06:9d:39:25:16:
         26:0c:15:31:90:f8:3a:23:16:e7:c2:af:0c:15:13:bc:06:e5:
         4f:81:53:1b:51:25:ac:b3:ce:d9:8f:0b:b2:4a:cd:37:74:20:
         32:7e:20:53:34:31:15:5d:11:db:eb:4b:53:0a:09:33:d8:42:
         80:bc:b6:67:a4:a7:6f:6e:16:92:65:30:35:df:30:a3:24:41:
         fa:da:8c:3d:b6:45:4b:f7:8c:19:a1:74:36:78:29:76:fb:00:
         2a:e6:77:5a:fa:9b:d0:f4:29:09:9b:fe:12:85:6f:42:e4:06:
         22:c2:e6:7c:ea:3d:d7:3b:0b:4e:63:a9:4e:ed:11:d5:d0:50:
         4d:80:85:7a:73:82:bd:5e:ef:a5:94:0a:0b:6d:31:56:74:25:
         44:7a:2f:7d:43:6f:cd:de:76:5d:f6:dd:df:a8:f3:a1:a7:0a:
         82:8b:3d:6c:b1:13:8d:22:90:da:0b:b1:e5:02:80:3b:09:4c:
         ac:e5:2d:23:4a:30:20:b7:8d:4a:ce:e8:28:73:5c:1d:2b:a4:
         88:fc:70:a4:2e:1d:9d:c3:f6:92:95:31:68:ab:3f:85:91:5b:
         e5:bd:4b:aa:61:32:14:2d:5b:5b:75:72:cd:11:0e:b9:e1:86:
         55:91:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:24 2026 by rpki-client