Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          gHfslZEyT7ukj6oo+mVsrsUaoifOZdgXsG+tGB9ZF4s=
Subject key identifier:   FC:96:28:86:C5:93:F4:E8:FA:D8:04:90:4C:32:9A:58:B5:03:15:47
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       019D382E7EA1BD46E80BE285A6F9B84EB39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          10B8
Signing time:             Sun 29 Mar 2026 06:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:04 +0000
Files and hashes:         1: 75GtR8MU0hokzNxKXIWlMPnolv0.roa (hash: Fey2h9ggN57tWJ2x6VzuQ69CSI5bRiEMaqNk0Q05Fuk=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: 9etChPsKDlJ0HIvHc1xRBAV1bhT2KGExKA2i8QTQWGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:7e:a1:bd:46:e8:0b:e2:85:a6:f9:b8:4e:b3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: Mar 29 06:01:04 2026 GMT
            Not After : Mar 30 06:01:04 2026 GMT
        Subject: CN=fc962886c593f4e8fad804904c329a58b5031547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:58:ed:64:21:b8:13:b9:35:29:3c:32:f9:
                    e0:3d:27:03:c0:ad:34:ce:25:0e:fd:ca:1d:7a:c4:
                    ab:13:7a:e3:be:c6:f3:d3:49:3d:54:fc:ef:6b:63:
                    8c:92:74:d9:e7:d5:6f:59:8b:fc:02:ca:3c:65:9a:
                    ee:61:79:5d:d4:53:da:55:c2:b9:05:0d:f5:8b:70:
                    60:31:81:f3:b1:57:59:69:9d:83:a7:77:1a:84:64:
                    31:44:05:28:76:7e:97:6d:c9:00:59:bc:2d:62:83:
                    33:40:9f:78:16:88:85:bb:58:c4:c2:73:f2:fa:81:
                    8c:94:28:42:43:b7:ff:2c:df:05:53:63:4c:03:a6:
                    58:7e:d6:88:cc:b1:66:5e:87:68:10:bb:f9:dc:fc:
                    24:9a:bd:0b:35:d1:80:fa:dd:3d:32:d0:d7:3a:62:
                    5c:29:cc:20:69:1d:ec:ba:4e:e0:98:23:3d:a0:a8:
                    ee:59:a4:02:3c:f7:77:3e:4b:d8:11:48:a5:0a:84:
                    3d:29:ab:fd:d9:3e:86:84:ba:98:79:9a:9f:b1:02:
                    b5:fd:3f:35:ce:c6:38:56:13:1a:d9:4a:7b:0e:f2:
                    37:57:f6:86:75:ae:b9:89:9a:2c:04:16:83:97:ae:
                    94:1f:19:89:f2:2a:8e:66:76:19:86:66:fa:2e:0b:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:28:86:C5:93:F4:E8:FA:D8:04:90:4C:32:9A:58:B5:03:15:47
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:df:6f:a5:74:1d:62:54:de:4d:08:73:ca:38:15:e2:4e:
         af:4f:06:e7:61:12:1f:7a:d2:7e:2d:fd:50:7e:35:59:89:7e:
         a5:b4:03:9c:17:dc:40:b2:45:45:7a:93:4d:2e:f1:b0:19:61:
         4f:88:9c:a5:43:37:47:12:49:fb:c6:12:d8:b0:70:ac:6f:5d:
         b5:ed:34:8b:50:90:4c:5f:9d:0f:f4:0f:70:d8:3e:24:eb:1d:
         21:e2:03:7d:b0:eb:34:81:9c:3f:0a:19:bc:75:01:57:11:d8:
         03:a5:d1:06:1a:bd:40:39:98:3b:9e:d8:e4:0a:6b:5d:fe:e7:
         91:f3:1d:0f:72:33:01:c4:75:84:68:7d:c0:10:ce:87:ee:4a:
         d9:a9:13:6d:e5:e8:88:83:e3:06:ef:26:25:3e:1e:38:fa:c4:
         53:98:e7:52:80:df:69:7e:56:fb:70:09:ac:e9:fe:ad:3b:a3:
         c4:02:46:bb:8f:d5:f4:cd:56:c9:8a:bc:e8:38:1e:51:f8:2c:
         5b:8b:8b:f5:95:bf:f2:d3:77:39:94:a1:b5:ec:a7:ba:79:b6:
         90:74:5d:ec:a6:29:8b:6c:ee:8b:48:6a:f9:d8:ee:9b:75:aa:
         e2:fd:f0:57:f0:35:bf:bf:25:2e:0a:43:a2:7c:3e:ef:34:71:
         c8:56:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:55 2026 by rpki-client