Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          CaCdor9lwDlrktP4zrR08Pf8p05I691tm2mq1XypWYU=
Subject key identifier:   C9:BB:56:A0:34:DC:49:2B:A7:68:C8:91:41:05:4A:64:28:6C:BD:39
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019DB2B4C0DB23C72C5C54957F7D38B3F235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          18D7
Signing time:             Wed 22 Apr 2026 01:01:23 +0000
Manifest this update:     Wed 22 Apr 2026 01:01:23 +0000
Manifest next update:     Thu 23 Apr 2026 01:01:23 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: 8/ORwcFkbYUPxafDRsqT1ZuxiV4OtJBFkg5jCjH0NmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:b4:c0:db:23:c7:2c:5c:54:95:7f:7d:38:b3:f2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Apr 22 01:01:23 2026 GMT
            Not After : Apr 23 01:01:23 2026 GMT
        Subject: CN=c9bb56a034dc492ba768c89141054a64286cbd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:3e:56:cb:80:1f:6a:ea:c6:01:07:86:0f:
                    9e:60:80:7b:cd:83:84:3f:95:5d:29:c0:1f:c5:e9:
                    12:d6:4f:5b:83:f0:78:8c:2a:24:97:e6:36:7d:18:
                    b5:ef:ef:aa:dc:b4:ed:49:c1:15:2d:c8:7b:12:22:
                    52:1f:8b:8a:4a:e9:9a:4a:ac:5f:49:d2:c3:75:16:
                    3a:12:1e:56:2e:c1:ac:2d:cb:8e:aa:4e:85:0f:72:
                    b1:9e:6b:20:f8:19:99:91:e4:ea:76:f8:d1:27:d5:
                    39:ca:b7:30:de:8e:71:19:53:56:e7:20:ea:b2:1f:
                    e5:d7:58:2e:d1:a0:c8:ae:d9:42:77:f4:89:d6:ce:
                    62:26:1b:90:72:dd:8f:54:ee:e6:e9:79:ee:34:0b:
                    c4:b1:6f:54:0f:13:bd:ef:37:d5:6f:7f:e9:2a:8f:
                    14:89:28:f5:d2:22:0a:b0:11:5c:1e:0d:68:3b:9b:
                    50:d6:e9:6a:c1:dc:79:b4:a3:53:e4:4d:cb:0c:1b:
                    bc:d8:87:88:1e:e1:2f:fb:8c:ad:c7:71:b0:f8:db:
                    68:5b:fe:42:03:f4:d5:cf:25:3c:21:1d:42:71:f4:
                    42:b7:c8:92:bb:71:91:e7:fc:78:47:ca:e9:90:5b:
                    56:3d:e6:d8:c2:cf:2f:20:67:f7:c8:ad:25:6e:e8:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:56:A0:34:DC:49:2B:A7:68:C8:91:41:05:4A:64:28:6C:BD:39
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:0d:2b:f3:c3:78:02:36:3a:5b:04:93:65:e9:22:72:c1:
         ed:26:b0:42:12:cd:fe:14:f4:34:07:8c:69:f1:30:fd:2c:d8:
         e0:b1:16:25:7e:c6:50:71:22:c7:71:bd:71:32:51:32:d4:52:
         e3:e5:7d:db:9c:c7:f6:19:96:d3:43:be:31:4b:7f:b5:2a:97:
         3d:46:cd:4f:18:98:04:00:6c:70:5b:c6:34:67:ac:56:39:67:
         28:46:58:22:8a:f0:89:e7:5d:2d:5f:28:91:6b:94:b9:16:88:
         04:9a:63:dc:79:d9:ef:39:9c:c4:f1:ae:13:ba:87:0b:e2:2c:
         fa:37:a9:91:f7:da:7c:2f:36:ce:cd:ad:bc:0e:15:74:16:27:
         c2:a6:81:fc:09:cf:77:00:7d:98:4b:a6:15:55:96:e3:03:ef:
         ff:50:91:76:2f:ec:f9:3f:cb:e3:88:dc:a0:ab:23:27:ca:f9:
         09:be:de:b2:07:8a:10:1c:e4:2b:42:d4:4e:2f:88:3f:34:3b:
         f7:63:cb:e1:23:35:08:d6:14:ca:a3:44:af:d8:00:a6:74:60:
         c3:b9:a9:53:94:9e:74:55:42:82:83:a0:68:5a:10:d9:8f:e1:
         9f:87:7c:c4:58:14:4f:b3:60:31:08:bd:d2:cc:49:7e:2c:0c:
         98:70:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:17:35 2026 by rpki-client