Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File:                     bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier:          +jZ2hPPNMxMJCE5n4q9FXr/PPdLllcgXY32Uq27/STs=
Subject key identifier:   60:2A:B6:0A:22:54:6E:8D:70:F1:B2:E9:C2:E5:07:3A:DD:C7:98:38
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer:       /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial:       019D9998DF19BCE240A556C31EDB17B8DCED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 04:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:25 +0000
Files and hashes:         1: FkBYBYI1w_8sdm78v5aJB0nOcFI.roa (hash: Fw6MQHjHYJDNyao+2q2Z1XBGBba4KG6qJIVCOw9sOiM=)
                          2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: B97zvQm0mGuTCzcCUIgyVQ3Q42Nbo46Y2KjBnSZ3XsA=)
                          3: l2HM9TjAmlQ51Kjpvur50iHMyUI.roa (hash: UMn59r+IaSm5xbsWtuAVHtlw48z/K2CcexPZldv0ZrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:df:19:bc:e2:40:a5:56:c3:1e:db:17:b8:dc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
        Validity
            Not Before: Apr 17 04:00:25 2026 GMT
            Not After : Apr 18 04:00:25 2026 GMT
        Subject: CN=602ab60a22546e8d70f1b2e9c2e5073addc79838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:1e:33:20:21:29:48:da:9b:e0:b8:7a:c0:
                    a0:44:88:31:60:c9:97:a7:46:fe:78:56:5b:1b:f3:
                    10:27:9b:5f:14:9b:2e:32:86:b0:c7:ea:d3:83:e8:
                    cb:27:fa:c2:fb:23:18:b0:e9:61:29:01:6b:fb:ca:
                    da:64:8f:c0:93:7a:7e:87:07:fa:91:db:a8:6a:11:
                    6d:d7:da:7b:38:99:cb:4a:04:89:95:24:66:78:44:
                    d0:66:6f:56:36:69:d5:6f:65:5d:1e:92:09:fd:77:
                    dc:33:1e:aa:25:7f:14:e7:54:c5:68:87:66:01:05:
                    89:ef:16:aa:82:32:ce:51:f4:9c:ef:69:b0:98:5f:
                    8b:37:35:1b:be:6f:99:58:d7:8d:13:24:d2:9d:20:
                    b1:00:9e:9d:e1:f3:54:cd:ab:3c:4d:36:d6:30:00:
                    03:24:d4:b1:b5:86:95:d5:7f:9c:67:07:c2:7e:0c:
                    b5:6c:bf:25:e8:84:40:47:12:e8:0b:5b:ce:4d:dd:
                    73:37:16:b6:c5:f4:8d:35:44:a2:8a:eb:55:ed:99:
                    4e:06:9a:af:60:c3:73:c2:03:0b:fc:7b:81:96:28:
                    1a:b0:f2:cc:24:f3:34:75:52:63:34:c3:d9:1e:17:
                    b9:63:a0:7e:a1:2e:7c:82:5a:29:4a:db:11:9c:0e:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2A:B6:0A:22:54:6E:8D:70:F1:B2:E9:C2:E5:07:3A:DD:C7:98:38
            X509v3 Authority Key Identifier:
                keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:4d:26:32:28:23:d0:70:bc:f4:3d:5b:05:63:39:49:31:
         f1:0d:1f:aa:1d:9c:3f:b3:bc:bc:92:94:17:f9:ee:f9:35:5b:
         f7:9c:da:d7:eb:cf:68:e6:80:a7:bc:c7:77:76:76:19:bd:17:
         aa:22:5e:da:0c:bb:7b:e0:27:73:db:91:35:88:bd:fa:42:77:
         5c:59:b5:87:04:cd:7a:f6:c9:43:09:ee:ed:be:11:c4:d9:57:
         d0:26:77:d6:96:0b:8a:cf:f7:41:3c:9b:1e:4e:be:53:56:2d:
         4b:1b:ac:81:05:44:36:2c:54:fb:c6:c1:32:a9:07:86:66:e7:
         8c:73:a6:41:00:7c:d9:69:d1:5a:12:8c:d5:cc:2f:d2:5a:a9:
         04:f5:99:09:d2:39:34:9d:c2:91:89:34:f5:90:1c:ed:27:7f:
         97:c9:a2:2d:d7:af:38:eb:8a:43:8c:38:85:27:42:ce:f1:62:
         3d:c8:aa:8a:72:8f:c6:92:81:2f:a7:c6:25:d2:f3:69:74:24:
         48:f6:32:d4:45:64:6c:c0:68:4b:dd:29:c9:51:54:d8:b7:b1:
         7c:35:1e:45:c0:64:f5:3f:2b:56:d0:a3:b3:26:0c:2c:bb:63:
         ef:2c:51:0b:d4:68:06:60:dc:48:b3:5d:0e:99:16:06:1f:17:
         6b:5c:7b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmN8ZvOJApVbDHtsXuNztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1
NGY0ODEwHhcNMjYwNDE3MDQwMDI1WhcNMjYwNDE4MDQwMDI1WjAzMTEwLwYDVQQD
Eyg2MDJhYjYwYTIyNTQ2ZThkNzBmMWIyZTljMmU1MDczYWRkYzc5ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXceMyAhKUjam+C4esCgRIgxYMmX
p0b+eFZbG/MQJ5tfFJsuMoawx+rTg+jLJ/rC+yMYsOlhKQFr+8raZI/Ak3p+hwf6
kduoahFt19p7OJnLSgSJlSRmeETQZm9WNmnVb2VdHpIJ/XfcMx6qJX8U51TFaIdm
AQWJ7xaqgjLOUfSc72mwmF+LNzUbvm+ZWNeNEyTSnSCxAJ6d4fNUzas8TTbWMAAD
JNSxtYaV1X+cZwfCfgy1bL8l6IRARxLoC1vOTd1zNxa2xfSNNUSiiutV7ZlOBpqv
YMNzwgML/HuBligasPLMJPM0dVJjNMPZHhe5Y6B+oS58glopStsRnA6cWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAqtgoiVG6NcPGy6cLlBzrdx5g4MB8GA1UdIwQY
MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt
YzJjNjE1MTg1ODlmLzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm
LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH9NJjIo
I9BwvPQ9WwVjOUkx8Q0fqh2cP7O8vJKUF/nu+TVb95za1+vPaOaAp7zHd3Z2Gb0X
qiJe2gy7e+Anc9uRNYi9+kJ3XFm1hwTNevbJQwnu7b4RxNlX0CZ31pYLis/3QTyb
Hk6+U1YtSxusgQVENixU+8bBMqkHhmbnjHOmQQB82WnRWhKM1cwv0lqpBPWZCdI5
NJ3CkYk09ZAc7Sd/l8miLdevOOuKQ4w4hSdCzvFiPciqinKPxpKBL6fGJdLzaXQk
SPYy1EVkbMBoS90pyVFU2LexfDUeRcBk9T8rVtCjsyYMLLtj7yxRC9RoBmDcSLNd
DpkWBh8Xa1x7xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:04 2026 by rpki-client