Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          RKuG15lvTYkZ0E169U54NedYOmSRfcN5rdiM2fTcCos=
Subject key identifier:   65:25:07:62:68:9F:31:83:32:DE:89:4D:BE:76:F7:0F:DB:71:B6:36
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       019D3752A07CE54AF745C3B503AB319804B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 02:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:55 +0000
Files and hashes:         1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: XUFo9PGR5br9uQc0FgfY4+JNBCma6lLwuviZQABXT04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:a0:7c:e5:4a:f7:45:c3:b5:03:ab:31:98:04:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: Mar 29 02:00:55 2026 GMT
            Not After : Mar 30 02:00:55 2026 GMT
        Subject: CN=65250762689f318332de894dbe76f70fdb71b636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:f3:af:09:ce:6a:71:a8:e1:18:85:43:e0:
                    2e:64:72:00:ce:d8:4f:f7:8a:e6:e9:5c:50:67:00:
                    03:63:50:f7:5d:b2:d7:43:48:b3:0f:4a:51:b0:c6:
                    aa:ed:9a:1d:d7:c2:1e:e3:c2:aa:2e:3a:62:06:4f:
                    62:e8:6e:98:44:4c:6d:0a:4a:d7:50:63:45:00:c5:
                    0b:45:30:2a:c9:f1:71:26:12:56:b6:0d:43:d8:bb:
                    3a:61:d4:83:86:dc:e1:76:d7:ae:93:67:18:e2:bc:
                    89:8f:92:c2:8e:14:d9:f8:8a:3c:ea:c8:9d:5b:3e:
                    24:6f:03:0e:ba:5a:63:04:a2:20:9b:0f:10:3a:ab:
                    f1:28:c1:00:76:0e:41:cb:2e:12:9b:76:f5:15:e6:
                    08:ce:83:9b:7e:a9:cd:84:57:19:33:55:d5:65:77:
                    4a:c8:aa:9e:6a:07:b7:b0:31:8f:b9:4e:8e:b3:dc:
                    3f:d3:8e:f5:70:06:10:bd:e5:e4:6a:0f:86:7f:2f:
                    8d:11:c3:4f:9c:53:59:61:9e:a8:f9:52:ae:73:48:
                    dc:7a:fb:3e:6c:94:9b:ff:ea:bd:ae:ca:47:2f:06:
                    29:9f:65:f6:21:bc:8c:18:8a:bd:c5:d6:be:ab:13:
                    dd:68:76:17:70:19:ad:a3:87:b8:66:90:94:b6:ca:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:25:07:62:68:9F:31:83:32:DE:89:4D:BE:76:F7:0F:DB:71:B6:36
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:6e:1f:ec:e7:34:fe:af:3f:95:69:78:b0:f6:8d:d8:74:
         3d:1f:a7:6d:1f:cb:40:09:1e:d2:5e:19:aa:12:6c:b9:e0:30:
         90:05:9a:8c:be:29:e2:cc:4c:ec:7b:5b:00:1f:74:29:6f:dd:
         b0:c4:f3:a3:74:d1:ee:cd:fd:8d:56:10:dc:ef:d8:db:dd:fc:
         66:84:ac:57:e4:b8:22:73:b1:28:be:15:d6:d1:d1:3e:60:2e:
         0c:46:4e:03:b3:b9:f4:d4:1f:c1:05:92:d4:bc:61:5e:d6:39:
         f3:c6:e8:e9:f4:36:6c:f9:b0:8a:96:04:6d:46:a2:84:ce:85:
         1c:26:5e:44:a7:47:58:92:60:95:3a:87:95:a3:66:0a:b5:3b:
         fc:21:d7:74:49:0e:e2:17:1e:6c:0d:8c:c1:17:dc:87:55:42:
         e3:a3:fd:72:52:b6:40:f9:96:a3:22:6e:1d:96:c9:4d:a3:76:
         32:6b:07:7f:23:5e:b0:f6:a8:70:63:72:5c:f6:b8:f9:39:d1:
         39:6f:2d:56:07:5b:1e:d1:44:e4:c6:6a:db:26:32:c9:9a:7a:
         d2:be:55:ae:a6:24:12:43:84:18:24:c3:d4:7a:80:d2:7b:66:
         5f:69:0c:e3:5b:94:9e:0c:7b:f4:2a:40:07:6b:2c:a6:56:1b:
         5b:2a:93:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqB85Ur3RcO1A6sxmAS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl
MTQzYmIwHhcNMjYwMzI5MDIwMDU1WhcNMjYwMzMwMDIwMDU1WjAzMTEwLwYDVQQD
Eyg2NTI1MDc2MjY4OWYzMTgzMzJkZTg5NGRiZTc2ZjcwZmRiNzFiNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rHzrwnOanGo4RiFQ+AuZHIAzthP
94rm6VxQZwADY1D3XbLXQ0izD0pRsMaq7Zod18Ie48KqLjpiBk9i6G6YRExtCkrX
UGNFAMULRTAqyfFxJhJWtg1D2Ls6YdSDhtzhdteuk2cY4ryJj5LCjhTZ+Io86sid
Wz4kbwMOulpjBKIgmw8QOqvxKMEAdg5Byy4Sm3b1FeYIzoObfqnNhFcZM1XVZXdK
yKqeage3sDGPuU6Os9w/0471cAYQveXkag+Gfy+NEcNPnFNZYZ6o+VKuc0jcevs+
bJSb/+q9rspHLwYpn2X2IbyMGIq9xda+qxPdaHYXcBmto4e4ZpCUtsqJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUlB2JonzGDMt6JTb529w/bcbY2MB8GA1UdIwQY
MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbluH+zn
NP6vP5VpeLD2jdh0PR+nbR/LQAke0l4ZqhJsueAwkAWajL4p4sxM7HtbAB90KW/d
sMTzo3TR7s39jVYQ3O/Y2938ZoSsV+S4InOxKL4V1tHRPmAuDEZOA7O59NQfwQWS
1LxhXtY588bo6fQ2bPmwipYEbUaihM6FHCZeRKdHWJJglTqHlaNmCrU7/CHXdEkO
4hcebA2MwRfch1VC46P9clK2QPmWoyJuHZbJTaN2MmsHfyNesPaocGNyXPa4+TnR
OW8tVgdbHtFE5MZq2yYyyZp60r5VrqYkEkOEGCTD1HqA0ntmX2kM41uUngx79CpA
B2ssplYbWyqTMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 04:13:50 2026 by rpki-client