Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File:                     vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier:          mEfI3OcNrh122KriRVtI7m/moU0OITIqotqxvmWjGZA=
Subject key identifier:   E6:C4:F8:90:8E:7E:41:5D:D9:40:14:83:C1:28:32:14:5E:AB:A7:DA
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer:       /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial:       019D0441AC7D0C2113CCA05057449A9691C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number:          1655
Signing time:             Thu 19 Mar 2026 04:01:46 +0000
Manifest this update:     Thu 19 Mar 2026 04:01:46 +0000
Manifest next update:     Fri 20 Mar 2026 04:01:46 +0000
Files and hashes:         1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
                          2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
                          3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
                          4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: GMcfFWrXCNV5itujPrynlDfL34E8/jH9ICr2Gj/tO6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:41:ac:7d:0c:21:13:cc:a0:50:57:44:9a:96:91:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
        Validity
            Not Before: Mar 19 04:01:46 2026 GMT
            Not After : Mar 20 04:01:46 2026 GMT
        Subject: CN=e6c4f8908e7e415dd9401483c12832145eaba7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:cc:0e:29:94:98:09:bf:5a:a0:2d:3c:e2:
                    a1:d0:8a:33:a5:6c:4e:06:9c:48:6d:af:2c:97:bd:
                    69:77:93:b4:05:27:7e:a9:36:07:67:eb:a9:97:74:
                    f1:13:d4:e3:2a:60:9d:44:21:3f:4e:a1:7c:2c:e8:
                    37:46:2f:0e:bf:64:3b:ef:62:af:3c:5a:ca:49:c5:
                    28:39:8a:82:26:b3:ad:1f:b4:f5:7c:c6:64:3b:b0:
                    3e:7c:a6:78:1e:dd:c2:06:8f:1a:fe:26:40:dc:6a:
                    87:06:5a:f3:39:ba:1c:03:76:3d:cf:bf:5f:cd:9d:
                    ef:e9:a8:34:82:38:67:6f:9d:ad:6b:55:b9:a9:13:
                    7b:7b:aa:fe:5a:ef:d8:98:ed:1d:e5:50:13:03:6f:
                    fa:ba:e3:44:57:e4:22:f9:d1:bf:30:37:6a:7c:37:
                    b8:81:5f:3e:63:dc:d6:4b:af:3a:5c:e8:d6:a0:17:
                    06:5f:ff:02:37:5c:e0:e3:81:56:ec:d5:45:0a:a3:
                    92:c8:43:04:7f:f0:40:85:39:96:8b:71:8d:3d:9b:
                    33:1c:37:bd:69:8c:ee:1d:6e:26:73:0a:d7:c6:52:
                    0f:18:b0:16:66:df:50:0f:7c:be:d4:df:4f:8e:b3:
                    d6:52:18:0d:6b:b1:5b:d7:5f:45:8a:a3:43:8b:d3:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C4:F8:90:8E:7E:41:5D:D9:40:14:83:C1:28:32:14:5E:AB:A7:DA
            X509v3 Authority Key Identifier:
                keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:59:82:e2:f9:0a:04:31:58:a8:13:2e:40:b8:5f:f9:a4:
         71:b9:16:25:5f:6d:67:94:eb:da:d0:ee:7a:47:03:10:7c:27:
         a5:b5:04:8c:5a:dd:d4:ae:a6:fd:60:5f:a4:c0:57:cd:bc:79:
         9e:5a:81:43:f0:00:a1:aa:75:04:74:b5:1f:4e:8c:9a:e8:d1:
         fd:52:9e:f8:aa:52:d5:d6:e9:65:a9:5e:b9:56:40:20:7a:e5:
         10:5f:a4:57:fb:5d:eb:54:e4:70:07:03:5b:8c:38:61:47:f6:
         c3:54:d3:9d:a2:2a:ff:61:dc:a5:46:b5:2a:79:00:07:9e:c9:
         b7:62:6b:16:16:1f:1f:d6:88:3c:d1:bf:08:89:05:6b:47:18:
         bf:99:6c:37:34:a7:5a:d9:73:41:f6:4c:d3:5b:5e:78:d2:27:
         10:1a:7d:9f:5b:33:f1:5b:d0:36:09:90:5c:16:5e:bd:ba:73:
         f4:e7:76:ce:7a:0e:41:21:3c:b7:8a:2d:52:df:c1:2d:8e:4e:
         bc:29:9a:c5:08:13:12:88:86:e6:09:17:c3:d4:f2:ac:62:16:
         29:09:b6:e2:c2:86:df:b5:62:28:60:59:88:de:53:2f:97:93:
         c2:a1:40:eb:8f:7e:b2:99:9a:2b:99:7d:a0:b8:9c:5c:d0:a6:
         54:09:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:50:23 2026 by rpki-client