Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          fbpsynZlxqmN5QpTsuADl7zjTJ16yfmE+uzVOOr9itw=
Subject key identifier:   D3:B3:0F:88:2D:33:7D:78:19:2D:AC:4A:D8:74:C2:BB:82:97:43:D8
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       019DCDF4B1902B0D3F31F6AF07427A147FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          11DC
Signing time:             Mon 27 Apr 2026 08:00:58 +0000
Manifest this update:     Mon 27 Apr 2026 08:00:58 +0000
Manifest next update:     Tue 28 Apr 2026 08:00:58 +0000
Files and hashes:         1: 90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa (hash: IdtFKKH7Qq584DOaHWX8VE6Du+XS0AqFvI0No8Ac1k0=)
                          2: Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa (hash: Q2/ZJXr2QIdBa9yss5O/wJYnVVCvAGxuYe91JBXhEFQ=)
                          3: XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa (hash: Dg+JUKAIOOV2eZlMRBIqgsVw/ezQsbFdaqZ4m0NhuOU=)
                          4: pl1Py7_5cG6uwaKi4Bc9_AugnY8.roa (hash: KCPLzx7rL96OPRDYgl9749Lw9slDlQQEZQPo2q7M6vc=)
                          5: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: kisTqXDlNcooDFZ/yR525AfgQmdt+KAxM3N+RsiXqbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:f4:b1:90:2b:0d:3f:31:f6:af:07:42:7a:14:7f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Apr 27 08:00:58 2026 GMT
            Not After : Apr 28 08:00:58 2026 GMT
        Subject: CN=d3b30f882d337d78192dac4ad874c2bb829743d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:2c:da:b1:f1:54:b6:72:93:c2:ee:b3:d7:
                    44:9b:ca:f1:20:63:30:37:7d:82:e8:20:50:dc:b6:
                    23:a4:a0:b2:a3:8f:50:ba:a4:d2:ba:dd:a6:80:b3:
                    9c:5d:f3:17:2a:24:e5:53:01:52:ba:8d:57:95:7e:
                    f5:e0:4c:94:09:eb:a8:15:89:ec:60:56:9d:be:a0:
                    ce:fb:7a:68:bd:81:19:cc:69:ea:23:f5:1c:3d:03:
                    92:70:8a:4c:36:1a:98:d6:43:df:04:1e:fb:58:28:
                    43:cd:89:4f:74:e7:7f:b3:09:7a:b9:18:a1:11:ba:
                    86:9a:e0:8d:dc:1e:57:dc:35:cd:40:6c:10:dc:52:
                    43:be:09:d4:09:0b:f8:7a:e8:d8:e8:23:9e:2b:c7:
                    0f:05:a2:62:46:c8:93:96:15:e0:fe:93:df:8a:76:
                    e3:32:b9:45:35:0f:60:ef:62:61:10:55:55:bd:67:
                    da:20:6b:95:6a:b1:e7:71:62:d0:cc:d4:d5:f3:2d:
                    3a:51:d8:d1:65:62:60:dc:fd:d1:c9:45:db:e4:93:
                    12:43:f7:15:df:a5:a0:95:bc:96:bf:01:29:8d:b9:
                    ab:eb:b7:15:99:71:ee:20:ef:45:11:e7:ab:b3:de:
                    f7:8f:54:ae:07:04:13:e7:a2:f3:81:96:92:97:03:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:0F:88:2D:33:7D:78:19:2D:AC:4A:D8:74:C2:BB:82:97:43:D8
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:cc:cf:67:f5:d3:a8:3a:28:c2:28:be:c2:01:f5:0d:dc:
         0d:b6:c3:87:96:33:9e:35:ac:19:d3:22:7c:73:f8:95:cd:11:
         cb:ad:8b:38:f9:ca:fe:99:1c:88:6d:ff:b6:ba:d9:3e:c2:eb:
         08:f5:13:28:2c:3d:bb:36:cf:78:38:7e:07:64:6a:00:0c:c9:
         5d:37:0e:58:1c:35:de:37:03:ce:bf:72:70:a3:56:9f:1c:72:
         0d:62:ec:1e:b7:f0:ce:53:da:9e:b6:29:dd:e0:71:18:ea:24:
         8c:08:3c:d3:d6:ab:1b:7b:73:e3:c6:d6:1b:1f:a9:e8:6d:65:
         37:2e:dc:2b:dd:db:5e:73:2c:38:f4:cd:f9:33:74:82:25:04:
         06:47:d1:1f:cd:ca:5e:d5:a0:69:15:1b:7a:21:07:5f:84:8e:
         a2:22:13:29:ed:7b:09:d5:53:60:44:25:b6:56:29:f7:3f:10:
         dd:e6:7d:e8:3d:4f:f2:b9:4b:99:46:99:6f:3b:69:16:23:84:
         8f:51:bf:d2:49:88:1a:85:33:85:b4:f6:67:8a:a8:44:ce:a0:
         2f:eb:19:0e:f6:75:78:7a:2a:d6:e8:ca:7f:d8:67:47:b7:a0:
         1d:d1:20:63:63:64:b9:7f:4e:75:ca:6f:86:eb:2b:bf:c7:12:
         62:de:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:41:51 2026 by rpki-client