Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          U1f7gthG3AKjIFFKOt2UGGgvcmZ1IrQi9efFntWA4/g=
Subject key identifier:   96:A4:9E:A2:4D:BD:EF:FB:F9:54:72:D8:45:D4:8E:0F:69:30:1F:FF
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       019D38658A939986842C12D6B6493865FA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          0A77
Signing time:             Sun 29 Mar 2026 07:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:11 +0000
Files and hashes:         1: diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa (hash: xBkybsQcEpoTXkJLBjkUd7QB1bLl7/Ehg38seV+oQ+w=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: EBeywRtkwQbmfTJL4tW7qtDYTD48RYkp8R92/8VZpz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:8a:93:99:86:84:2c:12:d6:b6:49:38:65:fa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Mar 29 07:01:11 2026 GMT
            Not After : Mar 30 07:01:11 2026 GMT
        Subject: CN=96a49ea24dbdeffbf95472d845d48e0f69301fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:e3:f2:46:d8:ca:cb:b5:fb:e0:ae:2b:96:
                    ec:21:ec:8e:ac:32:f2:8a:8b:8f:29:08:2a:f1:b5:
                    3c:7e:44:2d:1c:13:92:5d:a4:40:6f:e7:1c:08:af:
                    ee:c3:8c:7b:6f:9b:2e:28:0d:f7:e7:e8:48:b3:d7:
                    12:c7:2e:bc:bb:7d:05:da:88:7a:a7:8f:08:93:7e:
                    80:0d:79:06:74:76:70:f0:f2:b7:62:19:40:52:d0:
                    43:8f:01:e4:a0:dc:47:18:29:72:e8:bb:ed:bc:5d:
                    f3:d5:72:d7:ec:c3:52:9c:97:8c:3f:37:35:b2:fb:
                    dd:52:95:4a:3d:40:1a:af:6f:79:1e:55:9e:0c:0b:
                    99:2d:de:39:8c:f8:ba:25:ba:a6:76:d1:49:d7:29:
                    66:d4:76:56:5f:4f:0f:e7:b8:88:f1:d6:a8:6a:d5:
                    b6:5b:52:cd:a1:1b:70:6b:eb:2b:1c:7a:89:c3:c9:
                    74:ec:21:1f:dc:f0:ff:6e:c6:04:aa:97:91:82:45:
                    2e:ec:bf:81:bf:bc:b6:2b:0e:1e:82:ad:a3:80:ba:
                    d5:63:01:b7:e1:4f:3f:29:cc:4a:eb:72:4c:22:81:
                    c4:64:6f:e6:19:bd:1c:93:9d:50:ad:ca:be:73:3d:
                    46:14:12:6d:fd:9b:84:c8:c0:74:09:a5:cc:7f:00:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:9E:A2:4D:BD:EF:FB:F9:54:72:D8:45:D4:8E:0F:69:30:1F:FF
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:2b:94:1e:4b:69:48:f9:d8:85:c5:93:ea:94:37:a9:8e:
         62:af:8b:5e:e1:a1:fd:0a:17:8b:a1:9a:15:b4:cb:a9:a7:bc:
         e8:95:b0:b0:c3:8d:95:dc:59:d8:52:3b:e9:ab:c4:0d:6a:a1:
         7a:2e:08:a8:68:b4:c8:62:da:50:42:68:5f:a1:38:ea:af:2f:
         35:fc:ea:2c:43:e3:41:71:15:8d:ae:80:35:ce:10:dd:c9:55:
         47:bd:fb:31:26:a5:c9:e7:dd:4a:0e:52:77:d3:67:de:f4:a4:
         08:ef:68:1d:f6:27:c9:66:73:d9:d6:b2:f4:05:6e:11:57:dd:
         74:6d:79:72:8f:c5:91:73:e8:9d:88:20:10:76:b8:b5:27:a1:
         78:21:a0:02:8f:40:e8:e3:d9:c3:44:1e:8f:6f:91:d1:0d:69:
         bd:ce:6f:fa:39:3f:ef:28:7c:f3:4e:0f:d8:65:99:8e:a8:f0:
         46:55:2e:31:be:52:db:f9:61:a1:1b:b5:92:7e:ee:66:dc:88:
         55:a4:1b:0a:dc:15:53:1d:54:f2:d0:df:03:ae:70:5b:fd:a5:
         0f:07:a0:20:13:b1:0a:c4:86:23:32:bc:62:53:bc:92:46:69:
         a4:81:8c:9d:34:8a:90:a2:7a:2f:7b:14:c4:56:cd:9b:14:f1:
         a4:91:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:13 2026 by rpki-client