Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          rTqRz2zaYpvYlO3mP5dvhiY3b+3bRv1SWXJ5zRhMhIY=
Subject key identifier:   02:EC:25:E7:E4:1B:71:47:80:13:EF:62:45:C6:76:48:64:85:6A:ED
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019CC82C29B74940993880CF23150F874EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          1855
Signing time:             Sat 07 Mar 2026 12:01:03 +0000
Manifest this update:     Sat 07 Mar 2026 12:01:03 +0000
Manifest next update:     Sun 08 Mar 2026 12:01:03 +0000
Files and hashes:         1: GMFbMXRu6EBkQ9myYXVyJDahzbg.roa (hash: +dgTRqdqVNlrN9h5FoD/gUpBUreTgCju2UOGfnCCQFM=)
                          2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: kMyjo9VoUIwMPOjshrTpRFOiQxb9CtVJ2oUgYId6xfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:2c:29:b7:49:40:99:38:80:cf:23:15:0f:87:4e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Mar  7 12:01:03 2026 GMT
            Not After : Mar  8 12:01:03 2026 GMT
        Subject: CN=02ec25e7e41b71478013ef6245c6764864856aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:bd:9b:56:be:17:cc:4e:9f:65:8d:44:91:
                    fe:69:f3:3a:df:2a:40:94:e4:68:f1:4e:9a:a1:b8:
                    a5:30:b6:86:b2:3a:c6:df:b5:ba:d8:48:72:26:09:
                    c6:b9:2f:4d:b9:1c:d1:9b:c1:35:82:e4:8c:2c:00:
                    ba:44:09:14:59:d5:84:62:b1:72:0c:30:4f:e4:67:
                    c4:08:c3:b4:cf:97:ab:ac:09:9e:54:fe:61:1f:1a:
                    b7:b6:fe:08:6a:e2:30:78:60:9e:71:8b:d2:76:e8:
                    4b:f4:3f:ea:c5:b5:76:80:5e:cd:a7:ad:1b:53:4b:
                    1d:42:5a:3f:15:71:8f:14:68:8b:6f:4a:52:c3:79:
                    79:49:03:da:b7:59:0b:97:ee:96:01:b1:75:37:9b:
                    b5:3f:7b:b1:ee:ea:6c:40:ce:54:c9:34:7a:a4:16:
                    34:4f:5a:27:6d:3b:8f:94:29:7b:7b:92:0c:03:d7:
                    cd:8f:86:7d:a8:de:7e:5a:4b:7c:68:df:1b:0c:41:
                    79:36:ec:b8:53:f5:66:12:f6:7b:b1:21:85:24:2d:
                    63:0b:e4:06:ba:0f:1c:04:3c:bd:da:f8:a5:c7:39:
                    99:38:23:85:ef:6f:2a:16:18:47:9a:23:fc:f2:74:
                    62:c6:11:7a:8d:7d:84:08:2e:de:21:4a:96:64:89:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EC:25:E7:E4:1B:71:47:80:13:EF:62:45:C6:76:48:64:85:6A:ED
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:59:ab:38:1a:2c:80:f9:39:b6:c6:ef:9c:d6:e5:a1:3d:2c:
         93:c7:63:e2:c9:08:dc:77:2d:04:f7:48:5a:eb:ce:51:62:dc:
         a9:c4:ba:7c:1b:b5:f5:c7:a9:43:0f:aa:f5:0f:60:87:ec:9d:
         ec:79:d1:6b:77:dc:ed:51:7b:a3:03:9f:cb:ed:0c:bc:ef:19:
         ef:ef:47:39:46:8c:12:0d:fa:4b:c1:49:b8:fc:10:3e:a0:b0:
         c1:91:9e:da:99:33:55:c3:f3:e8:59:ed:ce:f6:f4:ec:59:db:
         05:70:e5:a9:48:5b:e8:e9:57:78:23:8a:04:5b:5e:8a:db:bc:
         9e:55:b6:e2:71:dd:48:fa:3f:f6:f6:6d:99:41:71:8b:57:3b:
         80:07:c6:99:0b:c9:9d:9e:fe:32:24:3e:99:a5:ad:15:06:df:
         98:11:17:c4:d0:15:aa:04:43:88:19:e4:ec:d5:b0:7b:d0:da:
         03:8a:78:f2:41:d5:46:b3:ae:89:e3:f1:94:cf:f4:15:29:00:
         c1:bd:06:d9:db:be:4d:33:d0:d4:60:57:04:7d:8e:81:9f:56:
         ee:68:cd:f9:82:6f:96:3d:5a:d7:a6:12:f1:d4:98:0e:87:8e:
         2a:79:e8:6e:70:75:60:48:f0:cd:0a:07:c1:11:b0:85:65:2d:
         b2:a4:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:30 2026 by rpki-client