Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
File:                     vOLbTWWaY-QstUTFf5mjNvfZjtA.mft (raw, json)
Hash identifier:          ri26/c7YD00ad9zUiHrRFluvQAsJWghe4tpn3bZQ3JU=
Subject key identifier:   BA:B8:54:FB:01:8C:56:DF:A2:8D:E2:FF:30:83:C1:E5:F0:43:D7:25
Authority key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
Certificate issuer:       /CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Certificate serial:       019D38D328F6D1E51F838196623A6F45A01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
Manifest number:          03D3
Signing time:             Sun 29 Mar 2026 09:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:55 +0000
Files and hashes:         1: t7QPfbM-YZ_9joduRFWOnsNDWuo.roa (hash: 9tCgD+egQCTnLC/7CRp4aMoJJc5yBODacvlEtSrWz0E=)
                          2: vOLbTWWaY-QstUTFf5mjNvfZjtA.crl (hash: 7nuLt3hl6JBvtKWQrHpLIs9r3DIU2az6LmbEgp5Qjkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:28:f6:d1:e5:1f:83:81:96:62:3a:6f:45:a0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
        Validity
            Not Before: Mar 29 09:00:55 2026 GMT
            Not After : Mar 30 09:00:55 2026 GMT
        Subject: CN=bab854fb018c56dfa28de2ff3083c1e5f043d725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:a9:31:94:04:de:f3:a3:ed:f5:fc:bc:52:
                    16:2a:a3:49:ed:b7:ba:f0:6a:78:ef:c8:ad:aa:2b:
                    92:9c:e0:65:0f:7f:c1:09:a3:79:09:59:86:12:8e:
                    f0:1d:ba:aa:28:d8:d1:1d:08:6c:ff:f7:77:b7:0c:
                    6e:07:45:5c:ac:fe:ea:2a:d8:b0:8a:d5:bc:9f:c1:
                    ef:41:3e:6f:25:19:92:de:20:3c:4a:c2:df:ef:8a:
                    bb:b6:aa:68:5c:35:d6:f0:0f:1a:2b:6e:4d:4f:c4:
                    15:87:26:b6:b3:6e:b4:7e:38:05:bc:6d:17:b8:d2:
                    b6:aa:d3:2b:bf:1f:a0:c3:c7:9c:6d:14:ab:2e:63:
                    84:55:dc:f8:ae:bf:21:ab:fe:62:7f:24:b2:cd:46:
                    78:22:ec:c7:41:b5:e7:2f:ef:fc:a7:79:c7:7a:6a:
                    1a:70:ec:bd:05:c8:36:95:6a:53:95:c3:3e:8a:3c:
                    e9:bd:8b:72:d3:78:9c:95:8c:63:ce:81:d5:de:6e:
                    f5:e9:99:b1:2c:3f:2e:f5:13:8d:32:72:70:1a:58:
                    e9:68:65:ee:b1:fe:95:54:92:35:df:ae:f9:73:1a:
                    62:1f:b4:6c:47:e9:94:8d:30:43:48:82:68:e6:ea:
                    31:a8:b2:c2:76:29:dc:f4:26:65:12:68:50:10:ae:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B8:54:FB:01:8C:56:DF:A2:8D:E2:FF:30:83:C1:E5:F0:43:D7:25
            X509v3 Authority Key Identifier:
                keyid:BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:f1:32:ea:8b:a8:13:9f:fb:b6:8b:6e:38:3a:8f:82:31:
         1b:b4:c3:5d:28:20:2b:04:38:1b:84:73:da:54:47:25:c9:f1:
         e1:fc:d3:da:19:00:d1:91:0f:36:5c:d0:8f:88:35:e0:fd:6b:
         79:05:5f:90:24:b4:63:fa:ed:6c:08:42:30:db:13:4a:8d:4f:
         41:e3:c0:84:a4:83:9d:b9:b5:48:cb:3f:6f:77:61:95:cb:4f:
         d5:2e:3d:a0:8b:0c:bf:24:4c:15:85:3c:13:0e:20:a7:5f:28:
         a1:77:00:7a:23:88:a2:ad:10:cf:65:e1:ae:20:62:1e:49:97:
         7f:c3:96:0f:53:2f:c0:4a:5d:c3:3b:d6:74:3e:1e:0e:1e:e1:
         65:7e:80:43:43:af:29:83:a4:b6:22:8e:71:b5:4e:c0:20:de:
         b5:dc:da:a8:8c:04:7f:fc:fa:23:8a:16:3a:e5:84:ae:3f:35:
         80:75:4b:ee:d7:ef:ee:54:fd:f2:d4:51:19:92:f0:d1:4c:7d:
         d3:0c:59:46:a1:fd:a0:66:58:90:33:71:4d:90:ef:0d:f3:83:
         b9:c9:16:25:72:8c:ef:31:f3:3b:8b:5e:27:0d:06:bb:30:ab:
         fc:12:1b:f8:42:c6:6f:6d:82:36:2b:1b:e5:3c:0a:d5:02:15:
         23:1a:bd:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yj20eUfg4GWYjpvRaAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZTJkYjRkNjU5YTYzZTQyY2I1NDRjNTdmOTlhMzM2Zjdk
OThlZDAwHhcNMjYwMzI5MDkwMDU1WhcNMjYwMzMwMDkwMDU1WjAzMTEwLwYDVQQD
EyhiYWI4NTRmYjAxOGM1NmRmYTI4ZGUyZmYzMDgzYzFlNWYwNDNkNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi6pMZQE3vOj7fX8vFIWKqNJ7be6
8Gp478itqiuSnOBlD3/BCaN5CVmGEo7wHbqqKNjRHQhs//d3twxuB0VcrP7qKtiw
itW8n8HvQT5vJRmS3iA8SsLf74q7tqpoXDXW8A8aK25NT8QVhya2s260fjgFvG0X
uNK2qtMrvx+gw8ecbRSrLmOEVdz4rr8hq/5ifySyzUZ4IuzHQbXnL+/8p3nHemoa
cOy9Bcg2lWpTlcM+ijzpvYty03iclYxjzoHV3m716ZmxLD8u9RONMnJwGljpaGXu
sf6VVJI13675cxpiH7RsR+mUjTBDSIJo5uoxqLLCdinc9CZlEmhQEK6fgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq4VPsBjFbfoo3i/zCDweXwQ9clMB8GA1UdIwQY
MBaAFLzi201lmmPkLLVExX+Zozb32Y7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEt
NzZjMjkyMGVjMzMzLzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEtNzZjMjkyMGVjMzMz
LzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAU7xMuqL
qBOf+7aLbjg6j4IxG7TDXSggKwQ4G4Rz2lRHJcnx4fzT2hkA0ZEPNlzQj4g14P1r
eQVfkCS0Y/rtbAhCMNsTSo1PQePAhKSDnbm1SMs/b3dhlctP1S49oIsMvyRMFYU8
Ew4gp18ooXcAeiOIoq0Qz2XhriBiHkmXf8OWD1MvwEpdwzvWdD4eDh7hZX6AQ0Ov
KYOktiKOcbVOwCDetdzaqIwEf/z6I4oWOuWErj81gHVL7tfv7lT98tRRGZLw0Ux9
0wxZRqH9oGZYkDNxTZDvDfODuckWJXKM7zHzO4teJw0GuzCr/BIb+ELGb22CNisb
5TwK1QIVIxq9UQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client