Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          P5XQBGKe/OBmWuoAbaamySr++sm6d+UrMO/WUtk2HPM=
Subject key identifier:   3A:DB:C9:08:F9:48:A6:AF:1E:EE:6D:11:0C:0E:CC:77:42:CA:F8:C6
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019CCAF5CCC6E787260083448E140DB2F8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          185F
Signing time:             Sun 08 Mar 2026 01:00:32 +0000
Manifest this update:     Sun 08 Mar 2026 01:00:32 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:32 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: zpK5aCXrgBUX/iyEOLDXvQGXnqCrwdQMz7EKfrqYa10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:f5:cc:c6:e7:87:26:00:83:44:8e:14:0d:b2:f8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Mar  8 01:00:32 2026 GMT
            Not After : Mar  9 01:00:32 2026 GMT
        Subject: CN=3adbc908f948a6af1eee6d110c0ecc7742caf8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:8a:dd:21:b6:8f:67:e8:94:0d:1d:c7:86:
                    12:2f:70:12:00:43:0b:f5:71:5f:27:8b:0a:25:46:
                    58:29:98:0e:09:88:44:7b:7d:60:27:7f:ab:64:7a:
                    eb:77:94:31:be:94:2a:bd:ba:e7:14:29:8b:d1:df:
                    4d:09:fd:ac:76:96:74:f1:9f:af:b8:d9:00:9c:f0:
                    c3:7b:bc:ef:4a:85:4e:08:cd:2b:b8:5e:cf:b1:af:
                    63:e8:5a:76:ec:90:10:dd:76:c7:dc:06:56:70:e0:
                    6e:72:5d:88:44:b8:de:4f:ed:38:2d:3c:d4:e2:79:
                    ea:3c:14:ca:64:c4:84:6f:97:39:31:0e:a9:98:65:
                    c1:38:f0:24:cb:a8:45:63:b2:d3:76:ab:b7:fd:94:
                    a5:33:25:fb:4e:68:8e:fb:af:d7:08:90:af:ad:00:
                    9a:f7:89:b4:2c:ff:85:d3:e3:11:69:da:08:85:02:
                    d2:80:4a:84:24:db:dc:f2:51:e6:e3:c3:9c:d1:cf:
                    8a:84:02:a4:e1:d1:da:0a:93:be:fa:39:e5:c0:8a:
                    03:92:03:11:3a:da:49:37:28:eb:7a:0e:8f:a5:b2:
                    52:01:87:90:a7:1b:ee:55:30:00:a9:3a:e8:02:14:
                    31:09:6a:b4:60:9e:1c:9c:a7:20:13:d3:1c:6b:1c:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:C9:08:F9:48:A6:AF:1E:EE:6D:11:0C:0E:CC:77:42:CA:F8:C6
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:de:cb:da:a8:46:43:ac:76:a7:a9:79:7f:7d:c5:dc:64:
         d0:70:4e:d2:d6:5e:a4:63:1a:a1:e0:3f:09:ae:0d:0f:34:c8:
         da:3d:f5:f9:d4:08:7c:41:e3:9a:29:dd:46:ba:18:74:a6:24:
         a3:57:18:26:80:2c:0b:0a:31:6c:c8:d4:de:07:9d:80:b0:bc:
         9e:4b:7a:95:07:72:6b:30:0f:30:b8:27:be:31:d6:b7:49:cf:
         14:13:5f:b3:be:c9:cf:c6:d9:98:ec:2f:f4:4c:b5:fc:b3:e5:
         05:29:e2:cc:c6:c0:84:fe:f6:a0:69:5c:4a:9d:96:58:11:c9:
         19:97:71:af:74:2b:0e:cc:99:7b:d8:2d:a5:ca:dc:f2:92:b0:
         d7:bf:88:8f:43:b5:3c:86:2b:4e:0b:73:9d:71:36:4c:d4:54:
         61:b2:15:4d:fd:19:dc:47:6b:03:3d:9d:2c:5e:09:e7:f4:65:
         be:ec:e4:59:1e:b1:14:6a:88:62:95:96:7c:19:2f:6e:ba:99:
         4e:ad:c7:34:6b:66:ef:4b:5d:c4:4e:41:4a:3f:61:01:8f:e7:
         7d:70:e3:7f:a4:0f:fb:9b:c6:70:0d:bc:4a:92:ec:4e:2f:32:
         63:b8:2e:ad:50:26:9e:94:b2:07:bd:29:02:11:6e:1a:8f:ef:
         55:f6:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:07:59 2026 by rpki-client