Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          u8L8MaK310S7YmRZpaJm5EosX7JguZWwJYiCAEc1xI0=
Subject key identifier:   68:3B:F7:BD:87:B6:6D:B8:E0:6D:BD:71:C9:BE:5A:0C:40:8B:FF:35
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019CF98700CF9CCFD936CB3CA9CA9F2A2412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          15F3
Signing time:             Tue 17 Mar 2026 02:01:40 +0000
Manifest this update:     Tue 17 Mar 2026 02:01:40 +0000
Manifest next update:     Wed 18 Mar 2026 02:01:40 +0000
Files and hashes:         1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
                          2: 10rcPrImsu8PZEdla8aGpqVO6qU.roa (hash: L3JiXE1iCTndxNrL5q/bo9206BV+caOYpXrLh1CtuNU=)
                          3: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
                          4: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
                          5: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
                          6: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
                          7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
                          8: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
                          9: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
                          10: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
                          11: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
                          12: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=)
                          13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
                          14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
                          15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
                          16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
                          17: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=)
                          18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=)
                          19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
                          20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
                          21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: WeMa+YnKbVrQ+8Zt0pkrWYxvUTb9sm4ax9DRJTe/7N0=)
                          22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:87:00:cf:9c:cf:d9:36:cb:3c:a9:ca:9f:2a:24:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Mar 17 02:01:40 2026 GMT
            Not After : Mar 18 02:01:40 2026 GMT
        Subject: CN=683bf7bd87b66db8e06dbd71c9be5a0c408bff35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:f1:04:84:04:34:46:0d:7d:02:7d:14:c8:
                    8d:3f:dd:d0:7e:2b:7d:70:80:46:fa:23:69:c1:84:
                    0c:90:23:36:83:25:e4:c0:45:5c:8f:33:ec:a5:46:
                    c1:c9:bf:7d:e0:55:d1:92:d7:e2:12:f1:94:8f:d2:
                    b7:2a:8a:a5:5a:34:b8:1c:d8:0b:52:57:f7:07:d3:
                    d3:31:34:7c:56:99:56:e2:4b:92:81:49:96:e0:d4:
                    2d:68:ed:a8:18:30:12:f8:69:e8:da:2c:29:98:42:
                    ff:7c:85:cf:95:32:a7:22:d4:ae:98:d8:18:70:4c:
                    e1:c8:ec:6d:d8:03:84:ae:25:98:37:69:d8:ae:69:
                    87:86:95:5b:be:59:d6:3b:22:35:dc:bd:89:c4:15:
                    cf:a4:3b:5d:ba:93:7e:09:1b:3d:ed:bf:85:ac:fe:
                    89:dd:05:34:2e:c2:b4:3f:5b:c9:85:79:6a:74:29:
                    85:79:95:a8:1b:7f:70:de:89:9c:3d:f0:8d:cc:e2:
                    6b:8c:e2:e2:27:3b:3c:e3:ed:d8:95:4a:c7:1c:1b:
                    fc:2c:a3:be:7b:4d:7a:a0:f5:43:29:2a:bb:a6:99:
                    3f:9a:25:9d:c2:ad:70:fd:7a:63:52:54:78:b3:b6:
                    5e:9c:69:c8:cd:3e:32:c3:ed:ca:ab:8b:9f:0d:4b:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:F7:BD:87:B6:6D:B8:E0:6D:BD:71:C9:BE:5A:0C:40:8B:FF:35
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:20:ea:c6:54:43:e6:4c:40:ce:ce:5a:82:11:5f:6f:9d:
         91:bc:8c:f2:72:24:19:c6:1b:f1:a2:2d:d9:0b:65:c0:74:29:
         9e:a5:9b:7d:13:ff:53:21:56:dd:6e:09:1c:38:b3:33:c4:37:
         ea:2e:88:f7:be:6d:d6:ee:52:60:0f:21:b1:0d:db:61:38:16:
         9b:24:6f:3e:3e:55:ed:a9:e1:ce:b8:37:67:cd:b8:29:1e:f3:
         f9:df:63:7f:ac:47:09:ce:48:93:a1:90:8e:a9:fd:c2:ba:17:
         49:77:71:83:f8:19:58:5b:71:af:b8:32:84:09:70:b6:35:87:
         28:eb:43:26:08:2c:08:a6:e5:32:25:1e:83:a4:72:08:16:ff:
         66:a2:0c:80:bd:e4:a6:15:ae:16:42:4e:d6:5c:ca:dd:c1:c7:
         3c:f0:77:e3:58:b3:ac:15:06:58:ca:3d:45:3c:23:19:a0:6e:
         97:e8:34:d3:b8:50:21:4b:ea:d4:e6:e0:00:3f:54:f1:76:84:
         b5:b3:d4:04:ab:66:81:d2:e4:d1:d0:39:fc:a2:b8:e3:08:e7:
         18:20:34:f4:57:66:9a:6b:02:f3:96:75:69:61:07:61:2f:5e:
         81:d7:2d:21:db:58:e6:e1:b0:e3:5d:80:98:01:96:4f:e6:95:
         22:4e:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:51:43 2026 by rpki-client