Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          yOn7cgVwP31XX0MKBcrQGsx5Tnu8AObwGHmRzNDuphM=
Subject key identifier:   D2:48:11:42:01:26:92:37:72:DD:F0:16:59:6E:EC:5F:9F:7D:2A:14
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019D1E37892EAA1A7B63C274090861D90575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0E91
Signing time:             Tue 24 Mar 2026 05:00:49 +0000
Manifest this update:     Tue 24 Mar 2026 05:00:49 +0000
Manifest next update:     Wed 25 Mar 2026 05:00:49 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: yagIVnqlo9OR9T3CacE4AAssnGC9gNsb7MNjq5x7Nvo=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1e:37:89:2e:aa:1a:7b:63:c2:74:09:08:61:d9:05:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Mar 24 05:00:49 2026 GMT
            Not After : Mar 25 05:00:49 2026 GMT
        Subject: CN=d24811420126923772ddf016596eec5f9f7d2a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:33:09:e5:2a:b0:87:1c:16:d7:a5:f9:17:
                    87:73:7e:d9:50:39:b3:97:09:3e:29:89:d7:73:89:
                    ba:74:2e:e2:e0:6e:c0:c6:fe:8f:3d:1f:b4:58:bb:
                    1d:f5:41:7b:b4:2e:e6:7a:35:26:71:6c:02:86:8e:
                    12:08:1d:65:a7:fd:60:3e:bd:e1:0d:d6:1b:d2:8e:
                    fe:3b:13:5b:18:e2:41:f8:ef:79:32:39:38:20:f2:
                    36:81:db:6e:7f:f4:be:4f:a5:f2:fb:21:5a:2a:38:
                    14:b0:49:25:71:de:5e:59:75:18:2a:b1:eb:d0:e7:
                    c0:60:f7:fc:d8:f9:0d:74:89:af:78:71:69:e6:6a:
                    42:62:56:c9:10:1b:9b:89:13:56:e0:85:ed:6e:d1:
                    2e:c8:d2:5b:e8:6e:a7:b1:22:87:33:29:0e:07:cf:
                    09:9c:7b:66:55:8e:fc:20:57:75:32:36:04:df:b0:
                    61:30:3c:71:30:e4:f6:6a:de:16:1c:1f:fa:67:bb:
                    e0:c7:2f:01:b0:ea:0e:4f:4d:eb:30:38:e1:38:45:
                    7b:83:2d:54:c8:49:72:8a:69:00:11:0d:a3:34:7a:
                    48:4b:0e:47:62:07:b0:e0:81:03:64:49:39:02:8f:
                    16:a9:39:2d:c1:9d:fd:6b:9d:0d:95:5f:c7:97:4d:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:11:42:01:26:92:37:72:DD:F0:16:59:6E:EC:5F:9F:7D:2A:14
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:89:c1:ae:e5:68:36:3f:1a:c4:07:4a:15:6b:fa:09:50:db:
         ed:82:44:1e:70:0b:81:28:59:13:f4:b2:80:b4:3b:0b:70:1e:
         3a:31:44:60:f4:08:c3:e0:f6:de:93:6c:4d:f0:01:cc:89:43:
         65:f3:38:fc:f6:ef:d8:ff:3f:5c:63:59:fa:64:9b:91:5f:31:
         3b:63:7d:0e:4c:e5:2f:3d:09:30:e1:7a:40:b8:83:d7:08:80:
         da:ad:ef:04:26:17:77:7e:40:89:25:f5:5a:42:a9:86:03:d9:
         ca:2a:b7:21:68:08:36:c0:c6:70:cc:23:9d:04:8d:f1:24:ec:
         fa:2c:bd:a1:67:d2:f6:4e:87:f2:11:b8:4e:54:f1:d1:5a:fc:
         9e:66:7d:97:ee:9b:0e:73:8c:2d:e6:86:d0:57:84:94:b8:97:
         09:ab:53:c7:1f:c4:4f:df:69:ae:82:0f:10:33:25:30:3a:bf:
         70:10:e6:14:73:37:9a:11:e3:61:5a:e7:bb:ae:55:c3:dd:e1:
         c8:61:f0:ce:9f:9c:ec:31:30:b1:ac:a2:7e:47:92:62:0c:21:
         0e:1f:31:ce:52:1e:9f:4c:08:ba:b8:2a:d5:3e:97:31:34:6b:
         0e:c7:a5:f3:7e:71:d7:8c:c7:18:14:d6:5e:4a:f8:69:5d:02:
         a6:cb:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 15:50:16 2026 by rpki-client