Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File:                     vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier:          ++i5HMTtyKglt6ZDFPZot1Z7xKkV66E9mjlDEw2/veg=
Subject key identifier:   34:FF:F5:3F:56:D3:8E:72:78:2B:D5:3C:53:28:F0:03:45:DC:8A:B9
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer:       /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial:       019D062EE9386442A52428B1C32169E898DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number:          1656
Signing time:             Thu 19 Mar 2026 13:00:30 +0000
Manifest this update:     Thu 19 Mar 2026 13:00:30 +0000
Manifest next update:     Fri 20 Mar 2026 13:00:30 +0000
Files and hashes:         1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
                          2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
                          3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
                          4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: WAHNjofsjj598iJwrhiHd/QGSap8uMU/HEu1BH6umz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:2e:e9:38:64:42:a5:24:28:b1:c3:21:69:e8:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
        Validity
            Not Before: Mar 19 13:00:30 2026 GMT
            Not After : Mar 20 13:00:30 2026 GMT
        Subject: CN=34fff53f56d38e72782bd53c5328f00345dc8ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:74:68:65:88:51:28:fc:10:cf:d4:fc:71:
                    74:f8:de:8f:5b:b4:83:ec:28:b0:ca:a3:dc:8c:12:
                    e4:e9:e7:18:51:3a:0a:91:79:f7:0a:f4:ce:ba:7b:
                    9e:27:8b:c6:da:5b:d1:43:e9:e6:36:a1:43:ab:e7:
                    b6:51:fd:63:40:dc:45:32:bd:e8:f8:58:11:44:b6:
                    06:cb:c2:3a:1f:df:d9:b4:cd:2c:22:4e:b4:d0:78:
                    52:e0:dc:bb:9e:2a:85:73:c2:3b:6b:2f:88:a8:4d:
                    7f:e2:6f:b0:40:9a:2e:26:ce:a8:61:29:e1:2f:35:
                    8b:ee:d7:57:11:b8:f1:23:f6:66:e5:7e:ba:86:cd:
                    37:8d:92:00:94:b3:ba:2f:47:93:62:b2:0f:2d:0e:
                    12:2d:5a:ce:ab:29:ad:52:b0:82:4a:1c:6f:e6:96:
                    53:c0:1e:c7:e6:d2:2a:14:18:de:7a:91:8e:f0:6d:
                    9b:b7:79:59:d1:21:cc:87:31:0c:2a:b4:cd:5c:f5:
                    0e:1f:9d:b3:97:d0:18:b1:b4:5f:9e:65:e9:14:72:
                    09:98:0a:26:f4:ab:27:e0:23:5f:b3:0f:fe:f7:fb:
                    7b:e3:6f:cd:a0:5e:a3:20:c0:05:da:56:27:56:ca:
                    1f:81:c8:3f:49:c5:d6:d4:60:c2:ec:ba:bf:28:c8:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:F5:3F:56:D3:8E:72:78:2B:D5:3C:53:28:F0:03:45:DC:8A:B9
            X509v3 Authority Key Identifier:
                keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:27:b2:9d:44:df:9e:45:5c:32:80:c3:08:c7:cc:3e:f8:76:
         8c:ac:13:26:86:e4:4d:a4:5b:b3:32:b2:27:fd:72:f3:4e:64:
         ff:1e:be:d8:43:9d:f6:72:ed:20:33:21:9f:9c:9e:1c:04:ef:
         6e:ac:b4:aa:d0:b4:c7:cb:95:e4:22:88:0c:99:b2:86:ae:b0:
         1e:74:75:cd:b9:65:11:fa:6e:5b:22:5f:63:63:cc:be:a0:76:
         a4:30:f3:8f:55:d3:1c:e0:6f:f5:ac:4e:8a:33:7f:35:93:75:
         20:c5:e9:a1:53:8c:7f:4b:64:ce:3c:2f:67:72:9d:22:7e:a2:
         22:bd:a4:11:b3:3e:e6:b3:43:33:fb:9c:1c:30:99:0f:d6:7e:
         47:65:0d:57:80:63:7d:3b:b3:1f:6e:01:12:a8:3b:a5:a6:a9:
         2c:d3:87:4b:bd:ae:80:80:a3:ca:8c:bc:9a:dc:16:ce:7a:63:
         f3:07:f0:28:f8:6b:03:3c:2c:4c:b8:e5:87:07:e4:d1:06:1e:
         0e:73:f0:e0:5e:8b:a4:d8:d3:16:6f:b8:ce:55:12:e5:cf:02:
         28:28:d4:c7:06:19:b9:48:98:77:c9:5b:61:5f:a0:e1:0e:f6:
         4b:a7:d2:ea:53:4a:3c:99:dc:ae:5b:38:ec:68:87:a1:1b:23:
         3d:69:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:11:25 2026 by rpki-client