Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          +rK/d+TqckjrHpIm3bOeYhwk0EOXJnRLhUuqkEiHGgo=
Subject key identifier:   16:8C:02:92:21:2F:3A:7A:67:97:E0:5D:8B:27:8A:27:E3:5E:C3:77
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       019D100E9DE527E8BD939BC6C42F087A334E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          187B
Signing time:             Sat 21 Mar 2026 11:01:26 +0000
Manifest this update:     Sat 21 Mar 2026 11:01:26 +0000
Manifest next update:     Sun 22 Mar 2026 11:01:26 +0000
Files and hashes:         1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: 84J3+AZytjTyYMSQWt5LkxfclVd0ExUyhd1M7plqZP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:0e:9d:e5:27:e8:bd:93:9b:c6:c4:2f:08:7a:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Mar 21 11:01:26 2026 GMT
            Not After : Mar 22 11:01:26 2026 GMT
        Subject: CN=168c0292212f3a7a6797e05d8b278a27e35ec377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:44:ff:07:11:4c:9f:48:1a:76:3d:9e:f2:
                    b4:0e:d6:4c:d3:a7:a8:cf:bf:d6:79:49:b9:c1:ae:
                    95:e5:8c:ce:87:1c:ec:0a:a0:e2:3f:e1:de:b6:e2:
                    6b:7b:e2:46:13:a8:f3:69:ca:9d:c7:1d:87:63:58:
                    2f:44:88:aa:f6:c1:67:f3:60:0c:ad:b8:52:f2:26:
                    32:0a:ff:a6:8a:3d:c8:42:d5:3e:06:17:fb:af:b0:
                    61:7a:e3:a2:7d:fc:0c:66:81:81:06:53:72:83:92:
                    4d:de:b4:61:96:d2:5d:1f:77:fe:59:4e:59:16:0f:
                    fd:e4:f9:07:c7:e2:f1:76:c8:3b:57:bc:99:6e:91:
                    09:f7:3e:26:6f:91:a8:5f:3b:b8:72:f1:67:c7:80:
                    76:ee:5d:d1:d8:f0:9c:1e:0d:cb:09:22:08:0d:56:
                    83:4e:0d:71:d2:dd:c9:86:62:8e:94:9e:a5:70:ad:
                    42:5d:c2:2d:16:27:da:36:29:99:d7:03:d2:3b:b8:
                    0a:f0:47:19:d1:fb:20:77:04:8b:5b:25:07:fc:2a:
                    4c:50:41:af:71:26:23:6b:86:4e:a3:ef:b2:eb:69:
                    2f:a2:4d:58:1a:51:71:cb:97:4f:3f:cc:8a:4c:c5:
                    e9:c4:59:5c:f4:ef:cf:71:20:2c:bd:54:8d:36:82:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:02:92:21:2F:3A:7A:67:97:E0:5D:8B:27:8A:27:E3:5E:C3:77
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5e:5b:ac:26:ed:02:85:7f:6e:95:17:20:92:84:98:57:72:
         3b:e6:ff:3c:07:fe:fe:1a:1a:20:66:d8:94:6c:15:6c:77:59:
         3a:0e:06:e4:2c:0b:5c:8c:a4:51:73:0a:f4:ae:ad:4a:b2:68:
         0b:99:73:09:06:42:1b:60:7e:23:de:30:71:9d:89:64:ca:de:
         9d:4c:e1:09:cc:dd:2a:c0:3b:bf:13:15:9d:4b:da:eb:62:96:
         c0:6a:6f:47:e8:7f:28:e1:b1:b9:ff:8d:59:95:87:1f:e1:05:
         20:6f:0e:45:3e:09:17:3a:f5:69:fa:80:b3:91:87:b0:9b:c0:
         2d:0e:c3:86:1f:ab:0b:8e:a3:df:a3:be:b7:ac:36:6c:9b:70:
         d0:d4:16:ca:22:b7:dc:1b:11:76:81:de:a9:57:7e:6e:51:d8:
         dc:5f:5c:6e:22:e9:d3:0c:72:7d:10:2e:0f:d1:0e:f4:4e:d3:
         b0:87:17:6d:b3:06:59:3e:9e:fc:55:ef:8a:0f:22:b0:95:ca:
         7d:36:a4:b7:a3:6c:84:a5:11:b4:f6:59:6e:2e:dd:1f:fe:62:
         fa:85:ed:8e:93:60:87:06:21:7a:08:9f:b3:a5:18:fc:f3:0e:
         fa:f7:de:10:b2:ad:72:06:ef:b4:85:66:94:01:ab:a1:7d:4e:
         90:a0:b9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0QDp3lJ+i9k5vGxC8IejNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjYwMzIxMTEwMTI2WhcNMjYwMzIyMTEwMTI2WjAzMTEwLwYDVQQD
EygxNjhjMDI5MjIxMmYzYTdhNjc5N2UwNWQ4YjI3OGEyN2UzNWVjMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDpE/wcRTJ9IGnY9nvK0DtZM06eo
z7/WeUm5wa6V5YzOhxzsCqDiP+HetuJre+JGE6jzacqdxx2HY1gvRIiq9sFn82AM
rbhS8iYyCv+mij3IQtU+Bhf7r7BheuOiffwMZoGBBlNyg5JN3rRhltJdH3f+WU5Z
Fg/95PkHx+Lxdsg7V7yZbpEJ9z4mb5GoXzu4cvFnx4B27l3R2PCcHg3LCSIIDVaD
Tg1x0t3JhmKOlJ6lcK1CXcItFifaNimZ1wPSO7gK8EcZ0fsgdwSLWyUH/CpMUEGv
cSYja4ZOo++y62kvok1YGlFxy5dPP8yKTMXpxFlc9O/PcSAsvVSNNoJnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaMApIhLzp6Z5fgXYsniifjXsN3MB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ15brCbt
AoV/bpUXIJKEmFdyO+b/PAf+/hoaIGbYlGwVbHdZOg4G5CwLXIykUXMK9K6tSrJo
C5lzCQZCG2B+I94wcZ2JZMrenUzhCczdKsA7vxMVnUva62KWwGpvR+h/KOGxuf+N
WZWHH+EFIG8ORT4JFzr1afqAs5GHsJvALQ7Dhh+rC46j36O+t6w2bJtw0NQWyiK3
3BsRdoHeqVd+blHY3F9cbiLp0wxyfRAuD9EO9E7TsIcXbbMGWT6e/FXvig8isJXK
fTakt6NshKURtPZZbi7dH/5i+oXtjpNghwYhegifs6UY/PMO+vfeELKtcgbvtIVm
lAGroX1OkKC5GQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:19:53 2026 by rpki-client