Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File:                     VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier:          dl+QdnnJIO8skqBz3ufXMPF1Co6WgQStxeVXClgLsxY=
Subject key identifier:   BB:CF:31:1A:71:9F:87:89:AE:5F:5D:16:DC:FF:C6:9F:CF:84:AB:E7
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer:       /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial:       019D37C08E217246628C476703462AD56D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number:          1331
Signing time:             Sun 29 Mar 2026 04:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:59 +0000
Files and hashes:         1: PYk6RC5m7OJWXRNYO3x9foVmPwM.roa (hash: PyAWpAbdnvAvMuGXImxWil5LYMDe43kyqM8HknJO3mg=)
                          2: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: 2bnm3Tty4VPj+3JCqzZ0dij2XiWFnvx8K1qVI0BnoIE=)
                          3: VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (hash: X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:8e:21:72:46:62:8c:47:67:03:46:2a:d5:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
        Validity
            Not Before: Mar 29 04:00:59 2026 GMT
            Not After : Mar 30 04:00:59 2026 GMT
        Subject: CN=bbcf311a719f8789ae5f5d16dcffc69fcf84abe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:53:0c:ce:94:6a:d6:73:62:24:56:bc:74:
                    c9:37:83:9b:62:02:f8:57:d7:5c:2a:72:f4:93:11:
                    71:04:b1:75:f7:55:88:24:b5:d4:b5:59:63:a7:09:
                    c6:72:e8:24:e2:35:cc:1f:90:42:e7:b4:8b:5c:b8:
                    a3:9d:c2:32:03:56:a2:6e:1e:cd:92:9f:aa:42:5d:
                    9a:b1:b9:68:4f:6a:cc:f5:2f:a7:29:9c:1b:3b:72:
                    79:10:1d:61:db:44:8e:d3:4b:5b:23:5c:e6:ae:3c:
                    81:6c:0d:f9:0e:4b:ac:aa:92:a9:76:c9:3c:d2:c1:
                    85:2e:50:5f:14:a1:6b:62:ba:be:0c:95:56:bb:e3:
                    4f:1b:24:98:63:b9:d6:c6:18:e2:70:18:b9:78:bf:
                    15:57:6d:30:ed:2f:b3:1d:e0:53:9b:ae:26:8d:89:
                    0e:76:0a:c7:9e:15:76:b9:03:6b:46:33:10:2d:95:
                    1b:d2:b4:ec:f1:6e:32:d8:32:ad:0f:91:5f:e0:38:
                    38:8b:16:ab:af:b0:c1:58:48:64:f6:9a:54:11:45:
                    88:b5:ab:53:5d:7c:d3:d8:8f:b4:b2:3b:b6:ba:bc:
                    38:6a:d6:75:e4:59:2f:09:5d:fb:4c:4f:d5:81:26:
                    7f:19:aa:30:bf:1a:f2:a0:5b:9f:3d:89:a7:47:c1:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:31:1A:71:9F:87:89:AE:5F:5D:16:DC:FF:C6:9F:CF:84:AB:E7
            X509v3 Authority Key Identifier:
                keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:98:d1:89:b4:51:fc:5b:32:43:2b:85:75:fb:f9:49:86:
         3c:c4:8b:96:98:8d:b9:38:fd:bf:9e:f0:e8:06:f3:d1:2f:f7:
         7b:31:41:7e:b4:d1:32:34:18:56:30:22:22:7a:1d:41:85:0d:
         82:bb:29:da:35:f9:c1:bf:2c:27:7a:a6:b2:20:3e:ff:f5:87:
         72:84:ed:6e:9a:5d:90:d2:3a:e8:51:cf:92:9f:d9:eb:e6:74:
         21:7f:8b:42:f9:19:09:de:ec:8e:dd:64:4f:dd:a8:88:3e:b6:
         01:29:2c:27:3c:41:f4:a7:0a:49:a9:7c:e5:7d:f2:2b:dc:af:
         04:cc:97:4a:8e:36:3f:ce:6d:e8:67:82:4e:7b:4d:57:ac:19:
         46:e0:a2:12:1f:d5:8d:95:45:8c:ae:94:13:1d:1b:c0:20:b5:
         a4:68:28:33:b7:9b:fa:e6:b1:17:e4:b1:67:4d:e0:ad:07:f3:
         de:3f:95:1a:e5:c8:be:ba:66:f1:08:fe:b0:8c:2e:cc:ea:60:
         2d:cb:52:e6:9f:87:97:80:7b:eb:77:cb:e1:67:18:ae:24:b0:
         23:67:83:4b:7d:ba:47:4f:40:fc:7f:35:22:b2:e3:ac:cf:77:
         d6:bc:1a:09:5d:64:75:7e:c6:f4:83:9a:67:26:ec:42:fb:b5:
         06:6b:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:17 2026 by rpki-client