Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          oWeGfwao9VuLLiapRJawsQugEvWou9ldvxItRwanPg8=
Subject key identifier:   73:DA:71:36:77:AF:A8:A6:53:E7:12:09:02:78:52:62:34:4F:FE:BC
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019D390991A619B3ECD85641E015C393915C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          1898
Signing time:             Sun 29 Mar 2026 10:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:21 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: ibXsWjQsbdGp18IMBqUGE6QaHskjS8FnBIODtH8wl5s=)
                          6: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:91:a6:19:b3:ec:d8:56:41:e0:15:c3:93:91:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Mar 29 10:00:21 2026 GMT
            Not After : Mar 30 10:00:21 2026 GMT
        Subject: CN=73da713677afa8a653e7120902785262344ffebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:e9:4d:25:af:ef:fa:fc:63:c5:b8:82:d6:
                    ac:69:90:e7:95:01:7d:9f:ab:c0:9c:5e:a9:22:9b:
                    0e:b7:d8:be:98:45:0d:74:67:8f:d7:f3:4a:0a:d1:
                    f3:d4:fc:f7:10:8a:fb:4d:e1:47:2b:a4:e4:b8:da:
                    fb:71:0b:7f:e9:bc:7c:b2:cb:99:e2:29:aa:d0:98:
                    ca:e5:4d:43:a9:81:8f:7a:0c:7c:1e:9f:ff:fd:8c:
                    d8:3d:3d:c3:75:58:be:12:f9:87:5d:1d:56:4a:0e:
                    61:d2:09:b0:a5:fc:13:50:6a:95:be:e4:28:0a:b0:
                    cc:57:a2:b3:04:d1:eb:c1:6d:eb:48:41:f4:c5:6f:
                    29:0e:92:49:c9:80:21:e5:fc:5e:91:45:86:e3:de:
                    4d:d9:cd:57:f7:72:27:21:b1:6c:c6:b6:a3:5d:fd:
                    96:48:35:e6:1c:df:ac:13:fe:94:e2:0c:2f:1d:68:
                    0d:de:31:5f:b8:c3:a8:5b:f8:93:c8:a0:0d:cc:c1:
                    e6:ef:cb:1e:5a:3b:95:8e:ec:1f:ee:5f:09:e9:e1:
                    1e:76:a2:87:52:6f:15:82:44:d7:7c:fe:33:46:a4:
                    f1:14:b5:90:5c:8b:c6:0b:ca:4b:31:12:7b:6f:f1:
                    75:68:b0:3b:89:29:e6:ea:d0:2e:01:23:a1:fc:d3:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:71:36:77:AF:A8:A6:53:E7:12:09:02:78:52:62:34:4F:FE:BC
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:79:88:3e:d0:52:c6:f7:bb:d1:86:54:47:fc:44:5b:b8:
         3d:76:94:a4:64:dc:d7:ca:af:e2:98:90:99:69:c6:e5:a7:58:
         0b:61:32:70:d3:72:34:8e:fc:12:53:6d:45:ec:3c:bc:a7:96:
         81:0f:c6:92:36:be:d7:57:f8:c6:67:41:a0:a6:78:5c:bc:60:
         f2:9d:fb:a4:6d:a9:10:24:14:d8:9a:c9:ba:5d:4b:1f:e6:fb:
         50:64:33:2c:13:df:00:5c:98:e6:b4:fc:a3:41:7f:77:93:f3:
         04:28:60:91:e6:72:04:6a:27:46:78:4c:a3:f3:0e:b2:e9:66:
         d0:db:30:97:90:c9:80:ba:92:bf:43:fc:42:2e:4c:7b:ef:85:
         4b:30:dc:bc:ba:fd:6f:7e:88:a0:03:df:54:da:85:3f:17:10:
         28:3f:1b:b2:55:ac:2c:9d:56:15:40:c7:8e:e6:28:b6:07:84:
         e6:dc:52:16:bf:b8:20:0a:d1:1f:dd:fa:1f:42:96:00:51:76:
         aa:6a:a2:27:3a:ae:ea:4b:94:62:25:91:f2:4d:3b:bc:7d:50:
         f4:ca:86:68:bf:4e:9a:23:87:70:96:23:ee:d0:d7:e7:1e:42:
         e4:ae:4f:b4:bd:79:53:06:96:44:0f:b4:78:f2:05:25:65:e7:
         c1:c4:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:53 2026 by rpki-client