Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          DkkzfuG8cZSnuj0jW/fHzu7nAAzpmSaVkzFEoXf4eBA=
Subject key identifier:   C0:77:6E:75:8B:47:A2:5B:88:F9:3B:BA:BC:99:36:37:34:6C:AC:2C
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       019D3752ACD0A58D725E8F1DD3290850E338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          159D
Signing time:             Sun 29 Mar 2026 02:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:57 +0000
Files and hashes:         1: eYgS2cJVh772gy1pgvA3zUVmNp8.roa (hash: 4VAqg2+Asr08BiNWdZozWkmimj3+ybcUk/eeWDDiz3c=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: 8fQxYcH8J58j9vJ4FJP68njA3j+Bs05XjvdBa5kDizI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:ac:d0:a5:8d:72:5e:8f:1d:d3:29:08:50:e3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: Mar 29 02:00:57 2026 GMT
            Not After : Mar 30 02:00:57 2026 GMT
        Subject: CN=c0776e758b47a25b88f93bbabc993637346cac2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:46:1c:48:52:5c:95:10:d6:85:d8:09:f5:
                    f3:83:ae:75:32:c6:e7:7b:65:24:ac:04:dc:d3:43:
                    f9:db:d0:f3:93:ba:dc:b0:30:fa:bc:b3:c0:d6:ed:
                    73:e4:3b:f3:50:23:18:14:7c:3e:e2:e7:a2:1e:cf:
                    45:7b:71:26:21:fe:6d:1e:03:fc:86:be:3c:ed:8c:
                    ad:d4:38:02:e4:74:8e:ed:7e:3c:75:29:59:09:22:
                    3f:67:c8:91:a9:1c:e6:f5:82:bd:d6:ae:cc:5e:49:
                    24:a9:b8:f2:6e:d6:32:43:08:52:36:38:b0:70:0a:
                    b6:97:7b:0d:b1:25:f6:fe:4b:6d:c8:1f:60:14:9e:
                    5e:ff:6c:11:ef:c2:26:3a:2e:26:35:90:1d:50:74:
                    f0:77:05:91:73:f1:64:98:34:63:47:6d:12:57:73:
                    d0:ec:9f:17:51:84:6a:26:5c:14:87:d5:b8:48:fa:
                    54:bc:3c:29:79:3f:df:01:a2:1c:7d:53:55:7b:5d:
                    83:3d:bc:c4:90:a7:a2:94:bc:35:a5:e6:d0:2d:e2:
                    e3:b7:0b:ec:ca:93:26:7a:d0:2b:9f:7a:5b:33:7f:
                    5a:fb:96:e6:dd:d1:9c:49:4f:33:98:3c:93:3d:42:
                    c9:38:5c:e7:2e:25:9b:db:27:6a:e6:9d:89:7f:86:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:6E:75:8B:47:A2:5B:88:F9:3B:BA:BC:99:36:37:34:6C:AC:2C
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:63:7d:e5:65:ae:69:d8:9c:9a:43:67:e0:68:4a:60:26:
         9e:5f:8b:3b:c6:a6:68:70:86:b0:62:fb:55:45:50:c1:0a:32:
         26:04:57:2b:10:03:76:08:9b:42:95:ae:8a:e4:0b:b0:60:bd:
         08:87:47:8f:44:48:21:9f:1a:97:4e:fa:55:57:4a:db:65:6a:
         a3:be:a4:f6:78:eb:b9:bb:8b:b4:70:ab:18:d2:e5:bd:14:eb:
         91:e5:75:c8:93:bb:63:15:06:08:87:3d:ca:ed:fb:bc:0e:85:
         62:73:7b:13:15:af:18:f0:21:2d:6c:41:ac:81:c2:d9:b3:20:
         81:bc:2d:43:bb:db:9c:08:b8:ea:f8:ce:48:86:ec:3e:fc:2a:
         f5:63:d3:97:94:fd:3a:88:f1:3e:b9:4c:62:cc:07:c6:c2:ae:
         80:62:2f:c7:aa:f6:5c:d2:da:ba:b7:fd:0a:29:11:18:9b:54:
         4d:d9:cb:88:96:3e:a4:c4:00:1d:ac:f5:af:fe:3a:6a:a3:aa:
         8e:0f:ec:cf:ad:94:3e:19:11:a8:22:b0:d7:ee:d2:b5:17:92:
         2e:62:9b:45:c2:b4:0e:47:bd:68:93:13:b8:9d:0e:41:67:0c:
         a7:a7:76:76:ef:e4:e5:b6:62:80:e0:68:9a:40:09:42:c7:bb:
         c2:53:cb:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqzQpY1yXo8d0ykIUOM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmYwOWMyZjhmZmY5N2VmOGFlYzJmODE3MzU3OGQwYTNh
NzRjODEwHhcNMjYwMzI5MDIwMDU3WhcNMjYwMzMwMDIwMDU3WjAzMTEwLwYDVQQD
EyhjMDc3NmU3NThiNDdhMjViODhmOTNiYmFiYzk5MzYzNzM0NmNhYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH5GHEhSXJUQ1oXYCfXzg651Msbn
e2UkrATc00P529Dzk7rcsDD6vLPA1u1z5DvzUCMYFHw+4ueiHs9Fe3EmIf5tHgP8
hr487Yyt1DgC5HSO7X48dSlZCSI/Z8iRqRzm9YK91q7MXkkkqbjybtYyQwhSNjiw
cAq2l3sNsSX2/kttyB9gFJ5e/2wR78ImOi4mNZAdUHTwdwWRc/FkmDRjR20SV3PQ
7J8XUYRqJlwUh9W4SPpUvDwpeT/fAaIcfVNVe12DPbzEkKeilLw1pebQLeLjtwvs
ypMmetArn3pbM39a+5bm3dGcSU8zmDyTPULJOFznLiWb2ydq5p2Jf4YhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB3bnWLR6JbiPk7uryZNjc0bKwsMB8GA1UdIwQY
MBaAFL6/CcL4//l++K7C+Bc1eNCjp0yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYt
Y2NkNGZhZDk1MGVkLzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYtY2NkNGZhZDk1MGVk
LzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDZjfeVl
rmnYnJpDZ+BoSmAmnl+LO8amaHCGsGL7VUVQwQoyJgRXKxADdgibQpWuiuQLsGC9
CIdHj0RIIZ8al076VVdK22Vqo76k9njrubuLtHCrGNLlvRTrkeV1yJO7YxUGCIc9
yu37vA6FYnN7ExWvGPAhLWxBrIHC2bMggbwtQ7vbnAi46vjOSIbsPvwq9WPTl5T9
OojxPrlMYswHxsKugGIvx6r2XNLaurf9CikRGJtUTdnLiJY+pMQAHaz1r/46aqOq
jg/sz62UPhkRqCKw1+7StReSLmKbRcK0Dke9aJMTuJ0OQWcMp6d2du/k5bZigOBo
mkAJQse7wlPLNg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:48 2026 by rpki-client