Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          G7S2z7bDDD2XSnDT6d4P8ArCeeLcXUJ1vhtbs9yjGPo=
Subject key identifier:   F0:F8:CD:17:6A:0F:74:48:F4:65:FD:F1:53:18:82:36:4A:3E:CA:DC
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       019CF6F2F8F56A330805F5EF0B81CECCC2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          1408
Signing time:             Mon 16 Mar 2026 14:00:44 +0000
Manifest this update:     Mon 16 Mar 2026 14:00:44 +0000
Manifest next update:     Tue 17 Mar 2026 14:00:44 +0000
Files and hashes:         1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: ercAntn3asTEKCW1vpKnM2UtOFHO8lEh/qBZKO1SiWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f6:f2:f8:f5:6a:33:08:05:f5:ef:0b:81:ce:cc:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Mar 16 14:00:44 2026 GMT
            Not After : Mar 17 14:00:44 2026 GMT
        Subject: CN=f0f8cd176a0f7448f465fdf1531882364a3ecadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:12:9c:d9:cb:cb:be:2e:15:f2:e7:d5:09:
                    07:72:a3:38:e2:d9:70:c1:86:0a:b1:c5:1c:41:8c:
                    78:91:14:02:35:31:41:a9:dd:71:47:f8:36:cb:e6:
                    59:1e:a2:ef:4c:63:0e:86:0a:54:c2:f6:df:a4:4e:
                    12:e2:96:27:6c:90:8a:78:27:ad:dd:67:43:5d:d4:
                    5c:fd:8b:40:28:3f:59:99:99:7f:a2:a3:9a:08:df:
                    b3:49:a1:4a:99:45:92:af:21:eb:e2:e4:7a:d5:5f:
                    3d:4e:bb:a1:01:c2:0d:c9:1a:8a:b2:0c:ac:65:38:
                    05:2d:2f:36:79:79:58:99:59:06:f0:a3:e4:f1:72:
                    a2:b3:04:b8:57:7d:d4:ae:51:22:00:4a:e2:a6:bd:
                    f8:5e:19:89:b7:33:87:db:2e:a6:21:be:f8:ec:bf:
                    41:c0:03:7f:93:41:78:f6:d6:d1:ff:2d:38:42:31:
                    16:4e:85:3e:41:eb:14:46:a7:e9:ae:cb:f5:0d:1e:
                    4f:5f:db:1c:c5:f0:2c:60:cc:cb:32:94:2b:75:65:
                    cf:d5:b5:80:9f:85:d4:cd:36:42:0d:4a:a8:8e:dd:
                    d0:48:c7:e7:f9:7e:a5:b2:f3:8c:bf:43:df:93:4b:
                    bc:33:e9:9f:c1:f4:c6:c7:0d:51:c7:5a:e1:48:a7:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:CD:17:6A:0F:74:48:F4:65:FD:F1:53:18:82:36:4A:3E:CA:DC
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:fb:c8:19:ab:ed:b6:8b:0e:ed:48:78:37:2d:83:9d:90:
         13:9d:af:f5:7f:99:30:c0:9c:0f:74:ed:02:70:79:af:a1:77:
         26:ca:52:29:52:3a:4e:a9:6d:84:15:c2:a1:aa:84:64:31:db:
         a7:ff:73:3f:fd:ed:b6:16:d8:c9:68:51:82:c1:b9:db:44:07:
         ed:e9:37:17:48:bd:8e:13:80:8a:7c:da:e8:c4:69:8a:f3:65:
         0e:79:bf:25:96:c4:9a:b1:af:45:52:60:ca:6d:1b:56:cd:2c:
         d8:65:69:09:8e:2e:f9:0b:80:56:51:93:d5:21:11:c2:b0:cf:
         09:81:93:52:c2:b7:f6:6c:d5:40:c2:8b:56:b7:06:c7:c7:13:
         2c:47:af:e3:e0:1a:c1:11:97:c1:e2:a9:7c:e5:19:37:c3:8b:
         a1:aa:77:51:84:7f:ca:1b:12:81:0e:c1:f4:dc:10:be:77:7e:
         32:e6:7f:8d:ab:80:4d:93:e2:71:9c:5f:46:a2:ae:a2:e3:e6:
         3d:ef:c4:4c:3c:7f:4e:b9:1c:a7:c1:7b:1c:15:6c:e5:ab:d0:
         6e:9e:72:4a:95:f4:a3:9c:6b:ff:7b:f8:06:d5:b5:37:47:bd:
         5a:2f:1a:a0:73:7c:96:f2:78:6c:5a:a7:9a:b3:99:53:3d:d8:
         86:a6:3c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz28vj1ajMIBfXvC4HOzMK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjYwMzE2MTQwMDQ0WhcNMjYwMzE3MTQwMDQ0WjAzMTEwLwYDVQQD
EyhmMGY4Y2QxNzZhMGY3NDQ4ZjQ2NWZkZjE1MzE4ODIzNjRhM2VjYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d0SnNnLy74uFfLn1QkHcqM44tlw
wYYKscUcQYx4kRQCNTFBqd1xR/g2y+ZZHqLvTGMOhgpUwvbfpE4S4pYnbJCKeCet
3WdDXdRc/YtAKD9ZmZl/oqOaCN+zSaFKmUWSryHr4uR61V89TruhAcINyRqKsgys
ZTgFLS82eXlYmVkG8KPk8XKiswS4V33UrlEiAEripr34XhmJtzOH2y6mIb747L9B
wAN/k0F49tbR/y04QjEWToU+QesURqfprsv1DR5PX9scxfAsYMzLMpQrdWXP1bWA
n4XUzTZCDUqojt3QSMfn+X6lsvOMv0Pfk0u8M+mfwfTGxw1Rx1rhSKduQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD4zRdqD3RI9GX98VMYgjZKPsrcMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/b7yBmr
7baLDu1IeDctg52QE52v9X+ZMMCcD3TtAnB5r6F3JspSKVI6TqlthBXCoaqEZDHb
p/9zP/3tthbYyWhRgsG520QH7ek3F0i9jhOAinza6MRpivNlDnm/JZbEmrGvRVJg
ym0bVs0s2GVpCY4u+QuAVlGT1SERwrDPCYGTUsK39mzVQMKLVrcGx8cTLEev4+Aa
wRGXweKpfOUZN8OLoap3UYR/yhsSgQ7B9NwQvnd+MuZ/jauATZPicZxfRqKuouPm
Pe/ETDx/Trkcp8F7HBVs5avQbp5ySpX0o5xr/3v4BtW1N0e9Wi8aoHN8lvJ4bFqn
mrOZUz3YhqY8cw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 15:59:23 2026 by rpki-client