Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File:                     vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier:          hh4O/ee/LaUERVwFxIrSN5GZQpcoIDzyhlvuR0M+fk0=
Subject key identifier:   4D:A7:4A:4A:A6:AE:F8:DA:B1:59:4F:32:73:9A:3D:9B:9C:67:1A:65
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer:       /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial:       019CAD90297EC52F473667A0FA50672F2AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number:          0E39
Signing time:             Mon 02 Mar 2026 08:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:31 +0000
Files and hashes:         1: hGGn56Yo_VSmgrsGFDnJfZjli00.roa (hash: IdVlpuGxDlB7X5s4S8Mv8+g/EUJ+VGMrKs3BCA2moLY=)
                          2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: zp4J0FnYuLCEpgQpQBpoAQYE8UUW05xTQWOiu3PPUKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:29:7e:c5:2f:47:36:67:a0:fa:50:67:2f:2a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
        Validity
            Not Before: Mar  2 08:00:31 2026 GMT
            Not After : Mar  3 08:00:31 2026 GMT
        Subject: CN=4da74a4aa6aef8dab1594f32739a3d9b9c671a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:3e:0e:69:40:68:6a:19:22:9a:99:b9:22:
                    39:e9:8b:9c:0e:01:8e:b4:2e:86:bb:ca:3f:3f:0e:
                    0f:64:ef:ab:ff:81:fa:b6:55:b4:cf:f8:4e:fc:5e:
                    65:e9:9e:60:88:4f:f7:50:f0:4a:e0:c8:fb:a9:0c:
                    5c:63:39:49:20:86:78:98:e0:fc:54:62:ee:be:78:
                    c8:6e:10:e9:41:33:dd:74:bb:11:58:8b:67:46:eb:
                    43:25:e2:11:95:3a:a0:91:5b:0f:b1:3e:3b:3d:c9:
                    7d:45:6e:9a:43:58:c5:20:f1:64:0d:2b:8e:48:c7:
                    a6:ad:6b:2d:3b:a2:65:ba:33:91:23:c3:3e:02:27:
                    c8:61:b1:55:a6:3d:c2:85:93:db:d0:f3:3a:5c:36:
                    bd:0a:6c:fe:e4:3b:cd:c3:69:87:0b:24:a3:da:45:
                    6c:f0:6d:f6:7d:ba:45:55:11:aa:02:0e:bc:0e:28:
                    66:e1:41:92:4b:d8:c4:55:e4:fa:2d:13:4a:84:32:
                    b9:74:f9:ff:d4:3a:d8:c7:7c:49:97:8b:db:b5:28:
                    50:18:91:a0:14:7b:40:5b:b8:d2:d8:57:46:32:83:
                    5b:88:35:d0:7f:6e:ab:6d:27:84:36:4c:0e:1a:71:
                    97:44:ca:37:f3:c9:28:13:18:29:3f:15:70:74:2f:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A7:4A:4A:A6:AE:F8:DA:B1:59:4F:32:73:9A:3D:9B:9C:67:1A:65
            X509v3 Authority Key Identifier:
                keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:39:07:aa:0a:ef:ad:ba:04:e4:ef:5d:b5:39:d1:75:9e:f0:
         f1:73:13:c0:56:67:d4:dc:72:5a:64:7c:5c:13:2a:66:e1:0b:
         6b:35:56:5d:43:27:e2:0b:b5:9d:aa:bb:20:24:77:1f:d9:d1:
         f9:0f:fa:b0:65:b8:5e:3d:97:7e:27:ea:10:bd:b5:31:b8:f0:
         fb:0a:38:82:81:ff:d7:ab:fa:63:9f:50:fc:5a:5a:06:ff:ec:
         f7:3d:16:04:25:59:25:1b:ab:65:46:37:33:0e:1f:6f:19:a6:
         82:60:5c:fb:d9:42:b7:64:83:5f:5e:80:13:24:87:0c:11:b4:
         5b:f6:85:18:a7:13:47:50:d3:61:76:7b:a2:6b:6e:c3:ed:a7:
         1f:85:58:61:b5:f7:4e:89:db:7b:26:0a:44:5f:7d:3f:a0:50:
         85:8a:2a:a7:9e:9e:37:cf:bc:fc:c9:3a:62:77:56:1c:e1:16:
         e2:48:af:94:54:e0:d8:bd:53:0c:5f:70:11:dc:2b:aa:96:e3:
         4c:2b:2b:c1:0c:f9:59:8d:b6:43:55:32:d4:f7:ad:90:84:df:
         56:cd:40:c7:15:d7:9b:23:29:a6:dd:d8:58:80:19:07:d4:f9:
         a8:c5:02:1a:c0:76:f6:20:41:01:3f:80:18:dc:36:d3:c9:3e:
         9b:fe:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:10 2026 by rpki-client