Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File:                     vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier:          wwxckKue2dt//tPwNQsesf62NUiyTwhUoaD80vizBa4=
Subject key identifier:   5A:20:1F:99:21:F7:D2:95:34:D7:34:C3:44:5A:92:93:40:A8:4B:A5
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer:       /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial:       019CBF289372862FCA7BB675C009CC2D3ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number:          1853
Signing time:             Thu 05 Mar 2026 18:00:33 +0000
Manifest this update:     Thu 05 Mar 2026 18:00:33 +0000
Manifest next update:     Fri 06 Mar 2026 18:00:33 +0000
Files and hashes:         1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
                          2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
                          3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
                          4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: ZyhkaPbL3/zsNZ4LRJt7/KUJs1avpS2YP3hkL7fJlik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:28:93:72:86:2f:ca:7b:b6:75:c0:09:cc:2d:3a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
        Validity
            Not Before: Mar  5 18:00:33 2026 GMT
            Not After : Mar  6 18:00:33 2026 GMT
        Subject: CN=5a201f9921f7d29534d734c3445a929340a84ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:99:c2:03:1f:1d:79:0d:b2:85:47:bf:7e:
                    58:38:60:71:8c:9c:70:68:60:22:f7:96:f8:2f:ec:
                    63:de:61:e8:82:a1:e2:25:4d:42:a4:6d:1b:76:8a:
                    02:f6:81:06:1e:1b:4b:d1:18:a0:d8:87:c5:57:8d:
                    68:6c:67:ce:43:6f:d2:8e:93:e2:24:ab:a6:3e:d5:
                    7f:8e:d6:b5:e3:f3:2a:5b:ae:fd:db:82:a2:73:f9:
                    91:17:b0:29:4c:b5:f0:be:65:65:e3:62:7a:17:31:
                    45:94:e0:61:30:e4:14:7c:5b:be:0c:54:97:c6:25:
                    9a:f4:cf:40:aa:51:93:ba:c5:37:bd:9e:82:b6:87:
                    0b:61:ea:a9:5c:95:78:be:32:8f:66:98:6e:a5:83:
                    c1:25:03:b2:bf:1e:d2:d7:76:99:01:79:91:fe:e4:
                    73:a0:b7:48:4f:dd:93:87:21:4b:cd:b9:16:64:38:
                    f1:da:3a:16:d4:83:0e:78:4b:17:4d:56:73:c5:cc:
                    e5:2b:41:0d:59:ac:ad:8b:d8:49:a3:28:36:3c:b9:
                    38:35:c2:53:20:62:d1:1e:d0:ae:80:33:b4:0a:17:
                    99:20:97:24:10:d5:de:49:a2:30:4a:f6:2e:aa:48:
                    2b:14:93:01:3d:52:12:2c:de:c3:df:41:5a:ac:8e:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:1F:99:21:F7:D2:95:34:D7:34:C3:44:5A:92:93:40:A8:4B:A5
            X509v3 Authority Key Identifier:
                keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:42:65:c6:dd:08:5b:79:05:ff:a7:4a:42:d5:d8:c3:b0:b7:
         0d:8c:f9:50:88:e7:ce:92:f7:4c:ca:be:54:9f:ab:b1:24:ce:
         bd:28:c6:14:72:a3:bd:bf:20:3d:93:02:b4:d9:fb:1f:ea:70:
         72:03:cc:b8:15:29:17:20:b0:35:0c:11:99:2c:46:1f:2d:41:
         71:7c:f2:ed:a9:08:7c:42:cf:3d:a4:03:2a:8b:2d:5f:2a:34:
         36:5a:95:5e:1e:50:31:46:7d:fc:5f:a7:67:85:30:a1:21:c0:
         ef:75:a7:df:21:6c:c8:30:3f:49:f6:74:69:d3:cb:46:e9:ea:
         ae:92:4d:02:d5:50:09:f2:d1:39:d7:b0:0c:72:b5:79:e1:d8:
         14:19:03:79:40:05:b8:b9:cf:10:79:54:c7:b6:10:83:68:0c:
         7f:12:45:5c:fa:d2:51:39:13:f0:f2:d0:b0:91:96:87:6c:cc:
         ff:23:6d:f8:40:3a:a2:03:1e:f6:37:ad:73:ac:a6:8c:d2:78:
         d1:e2:d3:3b:83:17:d7:12:2b:50:28:63:f7:34:66:b5:3c:f6:
         be:0b:33:61:fc:8e:21:11:f1:0b:c8:1c:c8:a3:c8:72:c5:7c:
         86:7a:72:c4:13:f0:8d:fd:08:21:9c:b9:ee:6c:7e:1f:b5:d3:
         7b:44:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:01:25 2026 by rpki-client