Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          7CGnlsF0DGOwqICLv8v4H52deaE1VQ7sVCIPH9L9bLk=
Subject key identifier:   89:80:02:E5:C4:9B:E1:E9:42:E3:68:07:E1:0B:CE:7C:A0:A8:0C:1D
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       019D99620D1082B653BBD61CE4901DAB72E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0EB1
Signing time:             Fri 17 Apr 2026 03:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:33 +0000
Files and hashes:         1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
                          2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: Ko9hcGKSm2YypGNWeAW6KvwZJItyv9cy7AcZgBzWmJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:0d:10:82:b6:53:bb:d6:1c:e4:90:1d:ab:72:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Apr 17 03:00:33 2026 GMT
            Not After : Apr 18 03:00:33 2026 GMT
        Subject: CN=898002e5c49be1e942e36807e10bce7ca0a80c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:95:82:cc:19:59:0b:42:85:73:9c:ee:e7:
                    9a:c7:e0:d4:19:7b:6a:4b:59:0b:d0:62:b7:19:25:
                    21:52:ad:41:fd:13:67:fc:c8:9c:7c:69:45:6b:ad:
                    45:7a:ff:d9:41:90:ac:26:40:79:03:a6:86:13:64:
                    4d:41:a9:f0:63:45:d4:57:72:19:d0:c4:62:15:52:
                    60:74:b0:38:fe:48:54:b7:75:8f:7c:44:10:35:38:
                    d0:ab:a0:19:0e:0d:f3:b1:fd:47:3c:6f:2a:1f:ce:
                    33:83:12:68:98:49:67:28:d8:f1:34:3b:8b:cc:da:
                    43:14:a0:e6:3a:ca:9f:ff:8b:e3:ed:a0:92:ab:98:
                    06:90:36:ef:69:e1:6e:40:49:bb:d8:b4:4c:16:49:
                    e5:06:4d:f8:96:5f:b6:98:49:b2:d4:7b:b5:24:6c:
                    87:2d:73:ea:3b:70:7c:71:67:a2:6a:41:77:8a:6c:
                    c1:b1:dc:8c:5c:6c:ac:cf:1e:18:9c:49:87:f3:e6:
                    14:09:8e:22:84:79:8e:31:eb:52:e0:7c:26:44:cd:
                    51:fc:a7:15:89:ab:98:24:50:1d:f6:37:4a:a9:3d:
                    33:43:14:bf:6d:17:1d:9c:6c:09:13:70:ef:4a:2b:
                    f5:42:fb:36:29:6c:4e:13:b1:8d:4d:30:61:c3:5d:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:02:E5:C4:9B:E1:E9:42:E3:68:07:E1:0B:CE:7C:A0:A8:0C:1D
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:63:be:6e:f3:41:d4:11:ec:3f:f5:d5:9c:c3:47:2a:34:56:
         1b:cc:8d:14:23:d4:c8:29:23:72:1b:e3:e5:7e:b4:60:d5:09:
         38:04:5a:bc:b9:93:ce:2d:7d:20:95:f1:4f:f0:af:16:6d:5f:
         ac:0f:ae:b2:79:18:42:63:2b:7b:80:9c:5a:53:19:bb:49:b9:
         62:df:c6:85:f7:a1:60:9b:da:9c:bb:e3:01:f4:38:29:cd:10:
         19:1a:56:42:f0:34:8e:5c:a2:72:7c:7e:67:97:7f:0a:73:98:
         fa:5c:6b:8e:8c:5a:8c:61:76:33:b5:fb:d3:6c:e7:35:f5:52:
         02:48:41:6c:79:50:e4:c7:e4:9c:fe:b4:a7:4c:f0:0b:58:b9:
         f9:35:c0:e4:d0:84:2a:a0:24:d8:4b:85:d3:5e:7b:31:ac:a7:
         ca:ea:fa:1f:92:20:ff:ca:54:e8:e2:49:55:08:28:0c:5c:13:
         40:6e:c1:7b:06:42:54:69:19:59:4b:b7:1c:72:b7:d0:b7:4d:
         72:e1:b6:8f:65:43:0e:63:5c:35:3a:be:5b:14:48:8e:d5:b3:
         db:57:e1:4d:7b:92:ce:8f:a4:68:89:3f:8e:da:7d:9e:8b:1e:
         c0:a8:30:2d:d4:49:02:29:93:e4:f6:b7:63:bf:7b:83:4b:82:
         8b:02:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:33 2026 by rpki-client