Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File:                     vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier:          Ouo6RdXraWgwNYB3vZxLQH8sFS0TPSrjhUqSU5HCJmE=
Subject key identifier:   85:F2:F7:46:CB:64:70:40:5F:32:3E:A6:1C:1D:B0:7E:B9:F8:F0:60
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer:       /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial:       019CAC4773BA8F848856246FE78490EAB475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number:          0BB4
Signing time:             Mon 02 Mar 2026 02:01:29 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:29 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:29 +0000
Files and hashes:         1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
                          2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
                          3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: 1eVbBJV+UccW+2B7SKofmW2uxK3l+n9xMgFjYvSKTIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:73:ba:8f:84:88:56:24:6f:e7:84:90:ea:b4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
        Validity
            Not Before: Mar  2 02:01:29 2026 GMT
            Not After : Mar  3 02:01:29 2026 GMT
        Subject: CN=85f2f746cb6470405f323ea61c1db07eb9f8f060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:01:6f:90:1e:39:ae:b8:0a:29:9d:0b:fd:
                    98:61:96:f3:cf:3d:6d:00:62:c2:b7:51:70:d6:5b:
                    e6:17:19:57:85:ba:37:9b:a6:16:21:b3:73:68:61:
                    0c:c1:b1:59:36:ca:19:49:8a:f9:35:f9:42:ed:50:
                    16:b0:e7:f8:9c:7a:45:be:5a:74:0b:ea:14:f2:e4:
                    88:3f:f0:8d:ee:e0:2a:52:56:30:67:ac:a4:67:4b:
                    72:28:e3:10:49:0f:5a:22:ad:0a:d1:64:23:60:b3:
                    89:93:48:98:95:95:87:91:a4:de:86:90:79:83:d9:
                    2f:ad:96:56:de:4b:d8:3a:b6:d8:b8:0a:c3:97:69:
                    d3:c5:fc:0b:eb:35:6e:e5:ba:a1:d2:89:fe:46:c1:
                    e5:5d:a5:1e:29:13:ac:d2:ee:a2:99:66:3c:8e:14:
                    45:fb:68:e6:08:c6:3e:62:40:1d:a3:72:16:a9:12:
                    40:39:39:40:01:3b:d6:d5:8e:35:c6:6c:57:7c:91:
                    01:fb:37:21:96:d4:cd:ec:fd:2d:c1:0e:3d:77:98:
                    ab:20:85:1b:57:3c:20:25:41:a7:93:eb:4e:7a:88:
                    1b:43:c1:2c:29:f0:50:5b:4d:2d:76:89:e4:d7:8a:
                    61:e9:ed:03:e1:a1:ba:13:b2:92:06:ca:36:7a:d9:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:F7:46:CB:64:70:40:5F:32:3E:A6:1C:1D:B0:7E:B9:F8:F0:60
            X509v3 Authority Key Identifier:
                keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:5d:55:af:f7:be:fd:9c:fb:35:e2:2f:d9:df:3f:bb:bb:
         f7:f8:dc:6d:d8:f8:8a:e8:21:68:07:cd:df:0a:8c:da:ec:e4:
         fd:d9:1d:e3:1d:e6:2c:e6:06:0d:85:e0:e8:76:1b:2b:7a:45:
         ff:8a:93:66:7a:e1:23:be:fe:55:d4:75:b7:db:96:5e:6c:0d:
         14:c6:56:69:a3:44:ba:62:47:e2:65:14:2d:42:9a:5b:52:68:
         19:3e:03:a5:bc:a2:0b:fd:7a:30:98:eb:45:e6:c8:a2:68:e9:
         4a:6d:e3:31:e3:43:86:43:4f:43:7b:87:6d:05:62:a5:2d:74:
         79:c1:2b:60:2e:ec:42:86:50:b8:3c:f2:e3:28:0f:c0:41:68:
         8d:2b:2b:3c:c1:30:59:ca:6e:39:8a:a6:b6:11:10:0a:fc:f8:
         90:40:93:e5:b6:52:67:aa:05:6e:99:ab:84:fa:61:be:40:15:
         98:b7:8b:58:49:cb:ad:71:8f:8e:fe:53:6b:2e:ae:c8:0c:18:
         89:8b:8e:82:de:1e:a6:f2:86:b4:e7:34:a7:34:22:e5:fa:b5:
         e9:b6:e8:da:47:4f:5c:a4:c7:72:61:e3:75:cb:a0:23:2a:a6:
         b5:37:02:3c:9f:70:14:38:5e:df:1e:f9:bd:02:20:6e:1b:c6:
         5d:1d:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:47 2026 by rpki-client