Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File:                     vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier:          1/YSjOLHDsF/gZVXyLjKX21NwRcpckA6gIgPPbOV0aU=
Subject key identifier:   09:BC:A5:B0:B5:C9:8F:90:4C:61:E2:3C:A4:46:36:AB:39:F2:D9:CC
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer:       /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial:       019CAC46D546B36234BFAE27E60ED570BDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 02:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:49 +0000
Files and hashes:         1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: +Jk7SW7TgNMrKPlf7CiPkpDYYIvMvsyNw/Ve1wBuw3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d5:46:b3:62:34:bf:ae:27:e6:0e:d5:70:bd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
        Validity
            Not Before: Mar  2 02:00:49 2026 GMT
            Not After : Mar  3 02:00:49 2026 GMT
        Subject: CN=09bca5b0b5c98f904c61e23ca44636ab39f2d9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:d0:35:d0:f3:30:71:e6:a9:88:dc:62:67:
                    ec:cb:f1:01:58:d3:f8:22:bd:22:d8:0f:0f:13:ec:
                    d1:f6:10:21:ec:9e:68:89:87:30:6d:18:23:b1:03:
                    ed:5e:a5:7f:f9:d7:35:c9:a4:91:f4:43:14:d5:47:
                    a4:60:cf:a5:7e:23:8e:b3:84:98:b6:e4:88:69:44:
                    81:d2:21:65:18:c7:36:ab:82:92:74:cd:39:11:79:
                    5b:06:a4:d3:b1:a3:2c:38:ab:7d:a4:ca:2d:f0:b0:
                    43:9d:ed:e9:ac:d6:5c:fc:00:ec:27:c2:e0:a6:16:
                    b3:2f:a4:1b:6e:42:86:42:e3:9a:00:32:f7:62:eb:
                    00:64:b0:fd:33:75:00:3f:36:7a:0e:68:1b:b3:68:
                    44:cc:35:c4:51:aa:ff:96:d2:e3:df:4f:ef:41:a4:
                    25:0d:fb:bf:5a:1c:1a:5d:71:ef:e8:37:88:d8:d7:
                    3e:46:b5:b6:cb:af:77:d2:0c:d1:64:c6:24:4b:7a:
                    da:dc:be:73:dc:86:5c:33:f0:35:31:95:3b:3d:c5:
                    fc:16:00:72:73:b7:ae:c8:53:fa:08:48:43:b5:66:
                    70:fa:2c:22:cc:c6:8e:97:01:d4:88:bf:ec:64:0e:
                    b3:10:d4:ca:11:7c:65:c4:a8:ab:96:46:e0:bd:d8:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BC:A5:B0:B5:C9:8F:90:4C:61:E2:3C:A4:46:36:AB:39:F2:D9:CC
            X509v3 Authority Key Identifier:
                keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:b2:c5:14:ac:5b:cd:de:af:3a:72:4a:0d:aa:19:0f:7e:
         32:4a:aa:82:1e:be:84:c5:68:65:d0:e3:01:d4:59:71:a0:f2:
         e5:7f:7a:b2:82:a3:64:b2:3c:ab:75:d2:72:22:09:f9:bd:8a:
         10:96:11:49:63:16:df:9d:a5:e8:ea:fd:24:89:96:ba:89:a3:
         a1:d1:8b:5d:8b:d7:59:d0:e0:54:d4:b5:18:82:d6:81:19:7e:
         fb:32:61:61:f2:44:01:e3:bd:b0:23:a4:e2:b2:dc:3f:4f:15:
         a4:3c:c7:2e:e8:7f:08:05:a7:a1:c5:54:13:29:7c:15:f7:0d:
         20:6b:41:48:82:dd:33:17:06:be:86:30:13:14:35:f6:9e:6d:
         21:98:a2:4f:14:ca:4a:c0:82:7f:78:44:38:e3:3f:e3:4e:e0:
         7c:55:44:75:5f:e4:70:1a:43:d8:06:0c:17:68:19:98:a7:39:
         96:23:d7:c3:38:91:52:ce:a0:62:ec:46:e6:27:22:d4:6f:48:
         f2:5b:a5:6b:60:07:05:4e:9a:87:f2:09:d4:d5:46:41:75:61:
         12:f0:f6:f9:0e:50:50:45:aa:fb:47:8b:93:da:27:ef:eb:61:
         4e:0a:e4:08:d4:0f:b1:f0:c4:9b:d8:f9:0b:27:b5:18:40:89:
         91:ec:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:11 2026 by rpki-client