Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File:                     vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier:          yEXAV663HlRl8PtoZguN924j+KBGmuorvMpz6aTGYu0=
Subject key identifier:   81:92:B0:74:41:93:C9:F8:F1:B0:46:F8:D0:83:4D:32:BD:21:AB:0F
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer:       /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial:       019CF2A81F2C2DBE85E13D63F523A99955D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number:          18CC
Signing time:             Sun 15 Mar 2026 18:00:30 +0000
Manifest this update:     Sun 15 Mar 2026 18:00:30 +0000
Manifest next update:     Mon 16 Mar 2026 18:00:30 +0000
Files and hashes:         1: 8TA7t7HrUBV_MAyX5n-91LJHqkY.roa (hash: /S+gSBwTzcXM3LZzCzX/nuyybzqrF+WlaDQm17WzHkw=)
                          2: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (hash: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow=)
                          3: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (hash: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms=)
                          4: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: TORuDMa3nziFj5Igger1gLYDm4posrMRLUO9Uv6XDrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f2:a8:1f:2c:2d:be:85:e1:3d:63:f5:23:a9:99:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
        Validity
            Not Before: Mar 15 18:00:30 2026 GMT
            Not After : Mar 16 18:00:30 2026 GMT
        Subject: CN=8192b0744193c9f8f1b046f8d0834d32bd21ab0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:72:b8:ad:6f:ef:eb:42:80:e9:95:1c:42:
                    1d:52:d7:05:41:79:07:9a:86:ab:d4:d3:f3:9b:9c:
                    85:d3:33:b2:87:20:4c:54:49:70:c1:5d:1c:1d:87:
                    18:46:65:55:1f:fb:a6:0b:14:a3:da:93:7e:e3:08:
                    3d:94:7a:5c:01:f5:45:0a:4c:4b:28:10:02:eb:bd:
                    10:4a:a3:8d:16:c0:84:8e:f9:d5:2a:05:fa:e6:56:
                    17:13:ba:80:44:37:5e:cf:82:a9:27:15:a8:77:68:
                    ed:d8:47:0f:65:a1:71:c0:68:47:b7:97:54:49:b8:
                    cd:ec:7b:fe:c3:49:94:7a:30:61:95:0f:81:35:da:
                    29:38:3f:a5:39:dc:0c:4a:7a:3f:df:1d:22:65:e1:
                    63:94:ad:b8:41:d8:d9:12:fd:b7:dd:e0:9b:2f:66:
                    3b:f4:3c:e5:cb:5b:43:13:05:64:00:8f:2e:32:ae:
                    19:47:91:cb:28:a5:90:20:e8:cc:5b:cd:c5:b2:f5:
                    88:06:01:d8:d9:74:fb:08:6d:7e:48:fd:f2:fb:38:
                    37:9c:e2:1f:38:3f:16:27:d9:03:c8:c7:72:b6:0f:
                    32:0e:84:29:2a:45:f1:42:9e:c6:79:b8:fb:96:61:
                    c6:66:9d:df:a7:2b:33:b2:a3:b5:7e:d6:7b:d3:30:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:92:B0:74:41:93:C9:F8:F1:B0:46:F8:D0:83:4D:32:BD:21:AB:0F
            X509v3 Authority Key Identifier:
                keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:af:aa:d6:9e:50:65:91:e7:59:e2:71:be:7f:a7:1e:de:ad:
         e0:0b:94:2e:fc:2e:77:2e:39:a0:14:3a:10:8f:18:22:eb:05:
         6e:a3:8b:28:b6:84:b4:14:bb:f5:fd:f3:c9:74:be:cc:e5:91:
         a3:67:e9:24:16:86:c3:11:ba:5e:d1:c3:a4:57:fc:22:42:c6:
         fb:0b:86:31:24:c4:bf:9d:77:0e:0a:ee:77:cf:2e:55:81:b9:
         98:e3:35:ed:72:f5:14:69:10:a2:82:6f:85:6b:98:13:c6:fe:
         29:8e:89:f4:45:55:69:f7:d9:f9:62:ab:4b:5d:0d:f1:58:75:
         0c:63:d7:cb:54:55:b9:2e:a2:1f:fd:41:52:74:02:17:c0:bb:
         a7:bd:35:80:b3:3f:74:5e:78:a6:12:c5:cf:a2:b1:89:79:c7:
         6f:e5:77:d2:39:f3:25:59:45:5c:89:a6:99:de:ad:be:8e:5f:
         f7:f1:c2:0c:16:e1:75:c8:d4:b7:b6:e1:8f:aa:3d:a5:a4:1d:
         ba:06:e5:cb:fa:7d:72:50:b3:ff:e0:01:8b:71:d9:55:af:b4:
         8b:cb:4b:f7:49:09:20:86:ad:49:e4:af:1b:20:c0:7a:11:84:
         00:47:d7:33:93:0f:7d:14:5a:ea:f2:bd:92:d8:27:18:9b:15:
         d1:54:9b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzyqB8sLb6F4T1j9SOpmVXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjYwMzE1MTgwMDMwWhcNMjYwMzE2MTgwMDMwWjAzMTEwLwYDVQQD
Eyg4MTkyYjA3NDQxOTNjOWY4ZjFiMDQ2ZjhkMDgzNGQzMmJkMjFhYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ByuK1v7+tCgOmVHEIdUtcFQXkH
moar1NPzm5yF0zOyhyBMVElwwV0cHYcYRmVVH/umCxSj2pN+4wg9lHpcAfVFCkxL
KBAC670QSqONFsCEjvnVKgX65lYXE7qARDdez4KpJxWod2jt2EcPZaFxwGhHt5dU
SbjN7Hv+w0mUejBhlQ+BNdopOD+lOdwMSno/3x0iZeFjlK24QdjZEv233eCbL2Y7
9Dzly1tDEwVkAI8uMq4ZR5HLKKWQIOjMW83FsvWIBgHY2XT7CG1+SP3y+zg3nOIf
OD8WJ9kDyMdytg8yDoQpKkXxQp7Gebj7lmHGZp3fpyszsqO1ftZ70zAAdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGSsHRBk8n48bBG+NCDTTK9IasPMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6+q1p5Q
ZZHnWeJxvn+nHt6t4AuULvwudy45oBQ6EI8YIusFbqOLKLaEtBS79f3zyXS+zOWR
o2fpJBaGwxG6XtHDpFf8IkLG+wuGMSTEv513Dgrud88uVYG5mOM17XL1FGkQooJv
hWuYE8b+KY6J9EVVaffZ+WKrS10N8Vh1DGPXy1RVuS6iH/1BUnQCF8C7p701gLM/
dF54phLFz6KxiXnHb+V30jnzJVlFXImmmd6tvo5f9/HCDBbhdcjUt7bhj6o9paQd
ugbly/p9clCz/+ABi3HZVa+0i8tL90kJIIatSeSvGyDAehGEAEfXM5MPfRRa6vK9
ktgnGJsV0VSbLA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 01:57:10 2026 by rpki-client