Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          0D7tQ0Y8d8gYvrKzbVJRXv22BfNEnQYst2w3FNdBgPQ=
Subject key identifier:   7F:5E:52:D0:64:7D:63:82:A5:B0:A2:49:94:14:C5:0D:76:71:9F:EE
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       019D3940C5A907FB8C7F0E12F83E14585329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          1115
Signing time:             Sun 29 Mar 2026 11:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:39 +0000
Files and hashes:         1: o6IB38C6xSOkxGBGXTts02Icg5E.roa (hash: 3kcNqmgdeYSwqNssdu/7Mxp1Q+Ah6H4caa+MFD2yuJ0=)
                          2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: nKEZLr7jvq0ZVB+2evRrVFMdNwkhmJfJiXwbCIyIe74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:c5:a9:07:fb:8c:7f:0e:12:f8:3e:14:58:53:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Mar 29 11:00:39 2026 GMT
            Not After : Mar 30 11:00:39 2026 GMT
        Subject: CN=7f5e52d0647d6382a5b0a2499414c50d76719fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:13:96:81:6a:d1:77:6a:5b:b7:9a:b1:30:
                    c2:ee:89:64:fb:b8:9b:1f:2d:72:39:1c:4d:c2:c0:
                    cc:3e:34:20:13:2d:7c:7f:44:1c:47:07:5c:22:a3:
                    d4:a5:b7:1d:ad:31:10:08:0c:de:45:71:ca:a4:bf:
                    5b:92:7d:d2:9b:1d:d5:43:53:62:ac:41:ed:24:89:
                    f1:48:ed:20:52:d7:22:9a:99:99:0b:71:68:60:9f:
                    7f:83:42:44:13:a6:56:f8:74:fe:a8:cd:5f:0e:74:
                    e4:64:d6:25:14:01:db:6a:6f:fb:d8:80:42:36:77:
                    d5:81:66:08:d7:d3:d8:f2:9a:64:5f:f0:d4:79:02:
                    b0:a2:c6:45:42:3e:59:aa:74:c6:3c:db:24:5c:83:
                    fe:13:7d:53:da:11:3f:4f:33:33:de:9b:13:9e:02:
                    24:4b:79:34:57:fe:2f:28:0e:8a:85:11:db:91:e8:
                    aa:a2:b4:ae:e2:76:47:8f:d6:ba:21:85:b1:e6:ab:
                    eb:38:b5:d7:d2:65:ce:9d:67:2d:03:38:d9:2e:4f:
                    1a:35:7c:c7:5a:f7:b4:51:d3:a7:9d:c5:29:04:2f:
                    ef:08:20:1f:15:ca:92:ce:ab:f7:3c:39:5f:65:84:
                    d7:31:fb:ea:a8:d8:f4:be:4e:98:66:04:d2:1c:3d:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:52:D0:64:7D:63:82:A5:B0:A2:49:94:14:C5:0D:76:71:9F:EE
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:32:a5:9c:57:d6:d7:b1:59:62:a6:a3:91:8f:49:a3:dc:ea:
         9d:9f:73:03:42:7c:83:94:04:90:06:5f:7f:48:41:07:8a:16:
         bc:2b:e5:7a:49:1b:97:dd:7b:72:2b:a9:34:b0:74:87:6a:44:
         c6:d8:2d:2a:9a:6a:ce:57:81:29:b1:b2:bb:a5:69:00:9c:56:
         d6:22:3d:46:2e:ca:6a:3d:0a:79:2f:45:5f:4d:e1:1b:dc:c0:
         3b:86:80:5b:8f:8f:fc:df:f6:53:5c:98:8a:0d:f7:49:07:10:
         bc:12:37:9f:b0:03:a7:8d:b0:22:71:76:17:c6:bd:cc:fc:9f:
         a3:70:0d:80:23:84:d3:fb:9b:17:7f:d7:0e:29:46:46:97:83:
         c5:d0:80:90:69:69:1b:3c:99:b0:36:33:73:0b:6b:7c:c0:04:
         f9:d6:bf:56:0f:9a:fd:4a:67:c5:4c:5d:dd:09:b0:5a:41:9b:
         a1:7d:34:47:84:99:94:14:7e:8e:c6:4b:af:d5:8b:0d:2e:a7:
         e0:05:d8:b8:15:b4:bb:f2:09:63:0e:b9:3c:4e:14:79:4b:4e:
         9d:f3:08:df:1a:81:eb:96:19:cc:40:15:39:0e:a2:1b:11:c6:
         38:ed:75:68:58:0d:0c:54:28:47:20:38:58:18:ad:bc:fd:ac:
         59:a5:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:50 2026 by rpki-client