Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          IglM63gFXAEvtvL5NdgCAqiYlZp+qnRazmWybxflobs=
Subject key identifier:   C2:2E:AA:0F:3D:04:8C:60:01:B1:CC:81:21:99:3B:8A:7C:58:BB:E8
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019CC2611B1976ED6BD561A4B0695C8A44F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          43
Signing time:             Fri 06 Mar 2026 09:01:09 +0000
Manifest this update:     Fri 06 Mar 2026 09:01:09 +0000
Manifest next update:     Sat 07 Mar 2026 09:01:09 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: O6RdfQEwYj7ag8+yZMvih8wR5Wx4YAlL1XWkxojN7wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c2:61:1b:19:76:ed:6b:d5:61:a4:b0:69:5c:8a:44:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Mar  6 09:01:09 2026 GMT
            Not After : Mar  7 09:01:09 2026 GMT
        Subject: CN=c22eaa0f3d048c6001b1cc8121993b8a7c58bbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:85:2e:7b:ed:64:ba:07:59:25:e3:7e:26:
                    f9:f1:73:bb:65:04:a6:ed:12:eb:12:74:a4:70:b3:
                    b4:9e:a1:ef:48:13:8a:9d:bf:b8:4f:dc:40:63:e4:
                    1e:d2:4c:d0:27:65:a9:98:5b:29:08:fa:e4:d8:2a:
                    3a:d4:38:f7:7f:10:c3:c2:8e:cf:88:19:43:8b:6a:
                    f6:14:42:11:fa:b4:1a:c4:3e:bf:a2:cb:aa:eb:ec:
                    40:af:0d:c9:2f:9a:dc:66:cf:20:29:7f:74:22:9f:
                    43:7d:4b:8e:83:79:01:2e:9a:da:1e:9c:47:b5:f9:
                    e0:2e:dc:ba:9a:06:96:1b:7e:c3:b4:b6:52:be:2c:
                    53:81:11:63:7d:80:c6:51:fc:6b:88:1c:e8:81:fe:
                    16:d6:c3:0c:f7:39:40:2e:ea:39:0d:63:37:ab:59:
                    88:ce:89:07:9b:e9:b1:26:de:f2:09:64:3e:a5:eb:
                    20:62:f1:bb:b4:58:d9:2a:33:53:71:42:08:58:a4:
                    01:0a:63:dc:96:45:ac:26:da:4c:82:a3:b4:d6:4e:
                    80:0a:dc:ea:78:ac:58:91:5f:c0:d8:8f:7a:88:bd:
                    ba:23:6f:a6:59:31:6f:32:7b:2f:42:52:51:b4:ad:
                    b7:cf:90:85:f7:a0:85:02:3f:3d:8a:0b:d0:5a:fc:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:AA:0F:3D:04:8C:60:01:B1:CC:81:21:99:3B:8A:7C:58:BB:E8
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:45:ba:cd:55:42:3e:7a:07:fa:35:be:c4:80:e1:e8:1d:
         8a:39:19:24:8b:6d:b2:d1:a4:e9:0e:01:81:9b:10:e7:86:7e:
         fe:6e:6b:c7:54:2e:54:7e:48:45:3e:47:a7:99:81:8a:0b:6b:
         c3:3a:0b:3d:9e:16:7c:be:a9:64:69:bb:e2:a2:dd:31:d8:30:
         1e:5f:22:4c:2b:a7:d8:4f:75:51:ba:a3:b0:09:76:14:83:55:
         13:db:f4:48:4f:83:e0:12:a7:a4:f4:c8:c6:19:11:74:36:90:
         6e:bc:1a:33:91:c8:35:05:22:fd:a4:f5:b5:e2:8a:07:2f:a9:
         7c:63:a6:dc:bc:60:d6:4d:f9:fc:a1:ec:b4:f8:7e:8d:cb:fd:
         2e:87:bd:a4:4c:f7:f9:29:d2:cd:dc:ac:73:24:83:70:ac:aa:
         f1:5b:01:0d:3b:89:28:2d:7e:81:5c:07:46:56:be:d4:5c:99:
         7c:7d:be:8c:27:7c:e9:81:bf:17:ef:96:81:18:26:01:a0:ba:
         21:c6:d7:bc:39:d8:42:3b:40:d6:d5:8e:4d:c8:83:c3:57:91:
         6a:48:23:fd:0a:06:2b:13:78:0b:1a:2f:a2:a0:5b:97:88:54:
         e4:52:83:51:70:1a:75:13:c7:0e:fb:cd:e4:78:3c:c7:57:10:
         2f:2b:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:19:44 2026 by rpki-client