Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          kSzw5XO5zg1cEBJjFPMHuj4kTcdzSPOmsenJXIWXHwI=
Subject key identifier:   C8:7D:EE:85:E1:B7:B0:CA:C1:92:BB:16:4D:15:1C:B2:9B:52:D1:36
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019CABD988EE6E41A3126E6A9802642797A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          13DF
Signing time:             Mon 02 Mar 2026 00:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:26 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: 3WuDXcpVafPql2duJhbasJGcRoNFbgUY8EvlRFdLAoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:88:ee:6e:41:a3:12:6e:6a:98:02:64:27:97:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Mar  2 00:01:26 2026 GMT
            Not After : Mar  3 00:01:26 2026 GMT
        Subject: CN=c87dee85e1b7b0cac192bb164d151cb29b52d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:44:45:ea:22:c8:b4:8b:de:1c:86:12:0e:
                    95:37:af:19:28:5f:36:37:1f:58:a6:8f:02:cc:4e:
                    97:24:e3:a3:94:4d:e1:d6:0c:11:40:86:f8:a7:96:
                    62:73:2d:af:4f:16:6f:bf:e6:a8:35:2f:20:f2:d4:
                    b0:cb:f3:49:50:f9:90:2f:82:3e:06:8f:b2:8d:8b:
                    87:bb:bb:73:09:52:f3:04:e3:44:60:91:fa:47:35:
                    4f:aa:8f:35:91:56:16:3b:e7:4d:29:7b:aa:70:a3:
                    3d:7c:22:00:f1:91:99:ef:65:a8:6e:dd:fd:a1:ad:
                    15:3a:c1:ee:e5:e6:cb:d4:ba:4c:3b:46:1d:06:b8:
                    db:fd:a0:04:5d:cb:48:37:16:68:e2:89:e3:2c:bd:
                    94:14:21:94:a2:e8:82:20:8a:d0:a9:13:99:7c:ab:
                    ed:de:05:d3:75:c7:d9:1f:e2:35:26:ce:c7:fb:72:
                    41:c9:6f:26:bf:04:04:8d:24:7a:45:7c:54:03:f9:
                    f8:6e:28:e6:e8:4c:bb:21:3d:fc:60:f2:f0:27:4a:
                    77:45:83:04:be:d2:2c:2e:8e:d0:a2:06:ce:48:e7:
                    ef:a6:bb:a1:29:bb:ca:8e:fd:20:a4:93:5c:a9:7a:
                    d9:6b:1f:40:f3:0d:f3:36:03:a3:c0:ca:7e:b3:b6:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:EE:85:E1:B7:B0:CA:C1:92:BB:16:4D:15:1C:B2:9B:52:D1:36
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:33:52:9c:27:bf:50:76:99:f1:76:12:76:ad:9d:a0:9d:
         df:4c:11:92:cb:6a:7a:9d:58:34:c0:c4:d3:0e:98:d7:b8:da:
         be:67:9b:26:46:65:f4:02:1a:98:3c:74:98:31:91:98:6d:aa:
         89:a1:f6:3d:3b:3b:39:70:6c:de:38:d1:a4:b3:49:f7:64:b8:
         3a:b2:bf:b5:ef:69:40:d1:7f:db:42:1c:ae:e1:69:24:a4:72:
         85:c3:93:59:d6:cf:d0:d9:b1:6c:8d:e6:4e:30:ec:59:40:33:
         38:76:13:44:3d:b6:34:85:71:96:8b:67:98:5f:ea:37:53:9e:
         3c:bd:f6:09:14:17:3c:eb:0a:2f:b8:39:c7:4a:4a:de:40:93:
         ab:96:37:eb:27:4d:f2:32:38:0d:d9:3c:53:45:66:de:26:df:
         40:4b:d6:e6:13:d7:ad:e0:7a:ed:b5:82:9e:a6:c5:aa:32:91:
         cb:b9:73:5a:4f:91:ea:1e:15:fa:0a:4a:ac:cb:22:46:5e:1f:
         f8:19:bd:f9:b1:7b:41:ab:e7:af:f2:45:5c:bf:e3:97:3c:e0:
         22:07:f0:f8:f9:f1:fa:43:40:bc:ea:a8:6c:33:1a:31:32:c9:
         d3:8a:a8:d8:c3:b1:e7:88:e0:07:84:60:4d:8b:2b:d7:88:20:
         a7:94:3f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2YjubkGjEm5qmAJkJ5eiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0
ODNjYTkwHhcNMjYwMzAyMDAwMTI2WhcNMjYwMzAzMDAwMTI2WjAzMTEwLwYDVQQD
EyhjODdkZWU4NWUxYjdiMGNhYzE5MmJiMTY0ZDE1MWNiMjliNTJkMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFEReoiyLSL3hyGEg6VN68ZKF82
Nx9Ypo8CzE6XJOOjlE3h1gwRQIb4p5Zicy2vTxZvv+aoNS8g8tSwy/NJUPmQL4I+
Bo+yjYuHu7tzCVLzBONEYJH6RzVPqo81kVYWO+dNKXuqcKM9fCIA8ZGZ72Wobt39
oa0VOsHu5ebL1LpMO0YdBrjb/aAEXctINxZo4onjLL2UFCGUouiCIIrQqROZfKvt
3gXTdcfZH+I1Js7H+3JByW8mvwQEjSR6RXxUA/n4bijm6Ey7IT38YPLwJ0p3RYME
vtIsLo7QogbOSOfvpruhKbvKjv0gpJNcqXrZax9A8w3zNgOjwMp+s7ZScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh97oXht7DKwZK7Fk0VHLKbUtE2MB8GA1UdIwQY
MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It
NDg2MzNkNzE4NTkwLzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw
LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNAzUpwn
v1B2mfF2EnatnaCd30wRkstqep1YNMDE0w6Y17javmebJkZl9AIamDx0mDGRmG2q
iaH2PTs7OXBs3jjRpLNJ92S4OrK/te9pQNF/20IcruFpJKRyhcOTWdbP0NmxbI3m
TjDsWUAzOHYTRD22NIVxlotnmF/qN1OePL32CRQXPOsKL7g5x0pK3kCTq5Y36ydN
8jI4Ddk8U0Vm3ibfQEvW5hPXreB67bWCnqbFqjKRy7lzWk+R6h4V+gpKrMsiRl4f
+Bm9+bF7Qavnr/JFXL/jlzzgIgfw+Pnx+kNAvOqobDMaMTLJ04qo2MOx54jgB4Rg
TYsr14ggp5Q/lg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:04 2026 by rpki-client