Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          w9Y7aO/k9znyPa04amt6LUgT5q2Dx/ysJPYmX9H382k=
Subject key identifier:   80:CE:59:2E:8F:EA:A5:9C:33:A6:BB:70:73:7B:17:53:B9:91:F8:BF
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       019CE447B8F9E0A1A926E4618C1C62665658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          0F2C
Signing time:             Thu 12 Mar 2026 23:00:31 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:31 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:31 +0000
Files and hashes:         1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: IC6oN/k77ZHpadWsuPofXPdIXpYfG399qAil+2fKazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:b8:f9:e0:a1:a9:26:e4:61:8c:1c:62:66:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Mar 12 23:00:31 2026 GMT
            Not After : Mar 13 23:00:31 2026 GMT
        Subject: CN=80ce592e8feaa59c33a6bb70737b1753b991f8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:45:2d:20:54:af:67:57:e5:23:88:8b:ea:
                    3d:08:6e:99:f9:47:b6:41:b5:32:99:ec:ea:4e:6a:
                    ce:34:e2:4d:5c:69:82:6c:09:95:20:9d:d2:a6:36:
                    de:70:5d:8f:a1:70:fc:e4:00:c8:be:f2:e3:c4:1f:
                    88:c7:07:c9:e8:c6:16:77:63:4d:58:2e:1d:3c:db:
                    62:5f:92:df:3b:0f:98:6a:d3:ea:6c:4e:1e:d9:53:
                    77:ce:18:73:9d:d2:33:0e:56:06:c9:be:ed:3c:4f:
                    1c:5f:3b:01:56:9c:87:6c:a6:8a:17:01:e5:b3:ee:
                    e7:48:d3:d2:68:30:70:41:17:b4:5e:b0:93:0e:1a:
                    e7:5b:0c:d3:3d:56:72:f2:8b:e4:8e:24:7b:c6:b5:
                    73:37:2f:58:1d:e2:02:7f:ef:5d:aa:b1:ab:13:89:
                    55:cc:bf:0c:aa:32:ec:ed:42:21:e8:c7:39:d1:f9:
                    a9:0d:fd:64:0b:3a:8d:8e:a4:09:2e:95:6a:3e:26:
                    79:c3:ed:19:ee:6a:9c:64:26:0b:66:f1:cd:54:4d:
                    28:51:fd:37:2d:45:0f:a7:14:76:f7:fd:4b:a1:52:
                    8b:76:92:1f:48:5f:cd:9e:89:c6:2f:b1:13:fe:fd:
                    1d:96:21:4f:4e:fb:48:96:7d:2f:fe:d1:98:4c:72:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:59:2E:8F:EA:A5:9C:33:A6:BB:70:73:7B:17:53:B9:91:F8:BF
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:03:76:82:1d:38:c9:0d:dc:31:f2:7c:67:8a:a2:3d:93:2e:
         95:39:cb:96:86:0f:19:21:7b:26:fb:0e:dc:d1:29:7c:a5:cd:
         62:88:56:de:95:7c:3c:fc:e4:fd:29:49:e1:de:d6:64:84:e7:
         88:fb:07:39:05:aa:09:c9:5b:eb:5d:5c:d6:a8:a4:98:c1:5e:
         b7:34:bc:0f:a9:cd:da:f8:d0:7d:5b:37:7b:04:e9:02:e1:37:
         fd:5c:d3:4f:4a:da:d5:52:94:cf:26:ae:7d:38:03:ee:65:f1:
         5a:fc:39:11:62:31:0b:a0:8a:4f:e0:2a:19:2a:e8:98:4f:cf:
         e8:e2:cd:9d:72:41:8d:33:9a:ff:66:67:67:ea:3d:21:62:1d:
         db:74:2e:c7:74:d0:db:b2:79:e3:83:b4:0e:4e:ea:ae:e8:61:
         52:23:75:3f:55:dc:ab:4e:d1:58:c4:a9:69:5f:1e:60:1b:aa:
         72:59:c4:a2:17:93:9f:94:cb:07:fb:6c:61:1c:ac:89:66:dc:
         65:b3:79:9f:b6:7a:b6:4c:8c:14:9a:39:77:34:20:a5:a0:e2:
         4c:28:e7:1e:9f:f5:f9:40:64:3b:17:f5:83:ec:98:90:8e:ce:
         4c:dc:b8:e6:88:bc:5d:30:d6:0a:52:bd:fb:4c:43:0c:eb:9c:
         af:06:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:32:00 2026 by rpki-client