Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File:                     vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier:          efQXjMGukL6paFJH+Z0fjYQkRY0wZxvOHKB5dv25lQI=
Subject key identifier:   78:F4:70:0D:98:BD:2F:5C:72:22:93:FA:5A:A5:68:12:5F:06:8B:76
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer:       /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial:       019CAAC725A5FE3747F2D2650AB3DDC500DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number:          98
Signing time:             Sun 01 Mar 2026 19:01:43 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:43 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:43 +0000
Files and hashes:         1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
                          2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
                          3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: a8SS+Y30bOQksIecpKG2UcM1jYDB7tGE0nO+Lz+I39M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:25:a5:fe:37:47:f2:d2:65:0a:b3:dd:c5:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
        Validity
            Not Before: Mar  1 19:01:43 2026 GMT
            Not After : Mar  2 19:01:43 2026 GMT
        Subject: CN=78f4700d98bd2f5c722293fa5aa568125f068b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:c8:57:6c:a9:ba:8a:c1:d4:f2:db:c5:10:
                    0d:1e:c0:23:89:98:d7:f3:a7:df:2a:33:dc:f6:3b:
                    47:e0:fb:d4:f7:44:c0:2b:f0:31:84:84:e3:5b:11:
                    e2:8c:6d:5a:e3:78:aa:b3:4d:d4:97:47:91:83:4f:
                    50:39:2d:38:e8:b1:56:33:29:a4:88:0e:75:84:84:
                    5e:0f:e7:e4:9c:d1:08:2c:69:98:1c:75:b2:c6:fd:
                    c1:8e:9c:3e:10:c5:10:d4:2c:11:fa:74:6e:f8:cd:
                    b6:1a:2b:c4:0a:d9:97:b1:e0:b8:a8:5f:26:91:74:
                    eb:5e:7b:da:a5:9a:f8:f3:5d:a5:d4:d7:48:e9:a7:
                    51:3e:56:75:f6:22:21:8a:ec:5b:64:3b:0d:e2:32:
                    c1:21:3e:32:11:70:e3:e5:0c:60:9f:b2:b4:0e:73:
                    87:b6:cf:12:d8:75:b6:25:21:bc:1b:bc:70:90:55:
                    fa:73:bc:16:3c:94:f5:d4:84:3c:b0:78:15:47:f6:
                    3a:9a:7d:de:eb:3c:7a:4a:f8:cc:63:8d:de:05:ce:
                    f5:44:e1:19:89:ce:98:cd:6e:e8:5c:c4:ff:58:66:
                    95:ad:03:da:25:be:aa:ca:6a:be:fe:b7:bd:9c:a1:
                    2e:24:2a:40:fa:7d:25:03:57:aa:86:3a:2e:21:01:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F4:70:0D:98:BD:2F:5C:72:22:93:FA:5A:A5:68:12:5F:06:8B:76
            X509v3 Authority Key Identifier:
                keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:60:1b:0e:d9:5e:84:3e:a6:64:cf:76:27:fa:4d:ca:e7:b4:
         79:f0:9a:be:a3:95:f2:24:43:e1:be:71:9d:43:6e:0c:74:ae:
         19:d0:bb:a2:74:5e:71:45:e7:ef:a1:5d:60:79:53:2d:6d:b3:
         d1:4b:8f:22:14:0d:9e:85:82:ae:75:a2:bd:33:e1:d3:04:76:
         80:24:8a:81:53:b8:fa:af:67:94:e7:dc:32:29:78:34:cc:cc:
         34:7c:b6:e1:fb:c7:9c:8f:f2:09:db:3c:2c:93:04:69:9d:fc:
         a9:ed:16:16:5e:d4:76:a4:1a:2a:2a:db:50:8d:f2:09:5c:51:
         c2:27:f1:83:a3:71:3a:28:fa:33:02:81:7e:b9:e5:f5:2e:91:
         39:20:57:9b:c7:3b:64:38:53:6a:23:39:e2:fe:a8:a1:11:ee:
         3f:19:53:9f:73:c1:79:54:3c:3c:26:d1:30:5e:73:b9:f0:62:
         5b:71:7b:98:8e:86:c5:a3:97:cc:a7:a8:be:31:0d:ca:da:fd:
         1b:77:b4:1f:27:5b:f6:4e:35:8e:03:8f:33:8e:31:8e:8f:4e:
         9a:2b:c9:a4:9e:9e:9d:f0:3e:fe:2a:f8:8b:f3:c9:3a:17:34:
         57:38:bc:90:51:86:d6:2b:cc:36:33:d7:e5:b0:21:88:d5:5e:
         ac:0e:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:17 2026 by rpki-client