Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          WrIFVxng6ut3xs4+pyH5kVTJAde5UC1m+oUFV7NNgJE=
Subject key identifier:   BD:12:CC:5B:70:E0:04:61:A7:B1:1D:1D:74:B8:A1:15:80:97:CA:87
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019D08F94FC8C87431A643C2B4BAA248BEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1104
Signing time:             Fri 20 Mar 2026 02:00:49 +0000
Manifest this update:     Fri 20 Mar 2026 02:00:49 +0000
Manifest next update:     Sat 21 Mar 2026 02:00:49 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: FxT2dFxRGo9QElPoNyaOV4rPirpdQGzIZydY5uIZhRA=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:08:f9:4f:c8:c8:74:31:a6:43:c2:b4:ba:a2:48:be:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Mar 20 02:00:49 2026 GMT
            Not After : Mar 21 02:00:49 2026 GMT
        Subject: CN=bd12cc5b70e00461a7b11d1d74b8a1158097ca87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:75:d4:b3:54:18:9b:24:89:9c:93:fb:d6:
                    06:6c:9b:c9:0f:cf:98:1f:5a:43:38:63:d7:db:5d:
                    d2:c7:58:46:cb:fa:1f:c1:bb:90:f8:ae:00:6c:66:
                    77:8f:ba:d7:19:43:0f:d9:7f:cf:e7:68:0e:d5:96:
                    8f:81:95:59:04:9a:0c:77:b7:5d:b3:4d:2c:8d:ba:
                    af:2f:c2:e8:bc:36:3b:c6:c9:36:8e:d9:d8:e8:1f:
                    22:91:e8:02:df:6c:0d:c6:30:b9:c7:28:6b:e2:f4:
                    3f:22:5e:37:93:23:b5:41:4f:cf:3e:a6:9c:4d:22:
                    f3:61:9f:1f:cc:e7:ee:76:ef:75:b5:a0:37:2d:e6:
                    8e:e2:2b:c8:ec:f3:94:6b:07:ff:72:c8:25:33:5a:
                    54:47:99:d2:ad:5e:ee:e7:f6:96:36:ed:20:41:6f:
                    db:b7:91:27:26:97:45:31:e7:9f:00:ca:d9:c1:ce:
                    0f:36:22:ec:97:35:8f:12:be:68:11:45:0c:e6:ba:
                    83:8a:73:f8:88:df:79:79:98:b8:55:7d:d4:27:9d:
                    b5:bd:d1:85:93:39:47:e0:75:dd:ca:e4:de:73:54:
                    b6:97:f5:1b:64:18:7a:70:50:da:36:2e:d7:1a:43:
                    9c:7f:de:14:fa:ee:5b:42:b6:50:9b:e0:a4:21:9b:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:12:CC:5B:70:E0:04:61:A7:B1:1D:1D:74:B8:A1:15:80:97:CA:87
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:a7:f8:d1:d2:e3:42:e2:66:34:cf:2e:43:ec:7e:ab:fe:
         68:10:b7:69:12:9c:21:b3:56:ff:1a:10:79:c6:60:4b:0d:9d:
         83:bc:e4:41:5c:0e:80:64:e6:e7:64:a6:c5:4b:54:51:ad:dd:
         90:95:94:86:9d:33:a3:44:ec:7a:8d:52:ee:61:90:3a:bc:d9:
         ba:38:ac:db:10:e4:de:b9:f9:c4:41:64:f3:a3:d3:5d:7b:41:
         44:0a:2d:53:7d:3c:8f:e7:fd:2d:44:e9:8e:4e:ae:1d:45:4b:
         72:e5:ab:21:55:88:a4:af:15:6d:f6:b6:2c:82:3a:a3:de:86:
         f7:f9:e4:c2:78:a5:43:d4:01:be:4d:87:7f:7d:a3:a6:14:78:
         4c:ae:89:63:d0:3c:e0:38:9f:91:5d:b2:8e:94:4e:b5:94:ff:
         60:5c:c7:80:bb:73:40:01:a9:b2:04:ea:1e:b5:c8:2a:59:30:
         8a:b1:07:99:e1:6e:c0:16:56:25:2f:9a:a7:84:3c:07:74:26:
         45:e3:c2:27:33:a0:60:e4:81:be:a3:58:87:b2:5d:55:94:9d:
         69:d6:ef:1a:e6:85:a5:96:6d:d2:1f:5f:44:04:ae:7f:5a:d4:
         10:26:a1:cc:0d:c6:78:d2:5d:61:8b:35:d2:1b:18:13:72:a7:
         1d:fd:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:49:21 2026 by rpki-client