Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File:                     vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier:          JLANEYFkw9Xf92qWyecC0Vjc1mDdRHESf0ZE7bK++dM=
Subject key identifier:   BA:85:55:AC:8A:37:44:77:C1:9B:B3:18:D3:E4:F1:D6:FA:D5:39:10
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer:       /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial:       019CAAC68DF2DFA234FB43041D117A83A7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number:          0B11
Signing time:             Sun 01 Mar 2026 19:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:04 +0000
Files and hashes:         1: 0LM2VTkMAj4vZU1AVSZWwf7QoUg.roa (hash: OeE58CarJmrARbT9+AtVI8a/6DD0VM2J/zL6Ietj1so=)
                          2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: Kh0H2D7JL1j0WJxT8Mkg2WuTrvgjaokHvZkS9mWHVws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:8d:f2:df:a2:34:fb:43:04:1d:11:7a:83:a7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
        Validity
            Not Before: Mar  1 19:01:04 2026 GMT
            Not After : Mar  2 19:01:04 2026 GMT
        Subject: CN=ba8555ac8a374477c19bb318d3e4f1d6fad53910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:14:cb:79:b5:85:33:ca:24:4e:b9:df:ff:
                    d8:28:55:fd:96:f7:04:4d:ac:dc:92:be:03:db:98:
                    33:15:4d:57:18:72:8a:80:ba:21:71:8b:6c:10:c0:
                    64:19:10:44:ae:3a:26:c1:1c:0a:7a:ea:31:d7:88:
                    d2:26:b7:dd:e8:0d:f5:38:23:5e:c6:2f:5c:77:9b:
                    ad:20:73:cd:a5:d2:4f:0e:68:c8:58:08:03:4b:1e:
                    a3:f1:e7:5b:62:c1:df:ec:86:b2:2c:7f:d4:33:0f:
                    13:41:8f:53:26:36:47:5b:8d:f9:41:2a:1f:76:dd:
                    b1:00:b4:21:fb:2b:29:fc:8f:7d:ff:64:7c:1b:b8:
                    40:bb:8b:a5:b9:36:16:fa:fc:b7:a9:43:90:86:18:
                    37:ea:62:db:53:ed:10:a5:68:45:e2:e1:86:3b:e6:
                    c0:b2:33:79:c5:b8:a1:1c:98:b3:77:d6:68:06:7b:
                    36:3f:8c:cf:ff:5f:d1:dd:fe:a6:a8:16:49:0b:60:
                    34:b1:80:b5:fd:31:09:2f:bb:bf:c8:29:f0:1a:fa:
                    c1:36:0e:a9:0b:ce:f6:34:f5:61:82:1c:c6:ce:ec:
                    37:51:cc:a9:9a:15:5b:1d:69:f1:f3:10:ad:80:6e:
                    37:c4:7c:bf:e4:34:da:b2:36:c1:72:9c:37:94:36:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:85:55:AC:8A:37:44:77:C1:9B:B3:18:D3:E4:F1:D6:FA:D5:39:10
            X509v3 Authority Key Identifier:
                keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:c2:34:2a:3f:49:96:3a:f2:06:87:ba:c7:be:5f:e9:87:
         54:13:69:7f:00:be:62:f4:f6:39:7b:1a:e2:be:85:5b:db:6b:
         1f:20:6d:e9:79:63:12:ca:40:13:04:7e:8b:85:f2:c2:48:98:
         8a:49:6d:3e:4c:9f:bf:ea:8b:33:36:f0:66:4e:0d:4b:ac:50:
         77:92:bc:06:71:2b:01:3f:ba:56:3a:cd:d0:9e:ec:af:03:58:
         b4:a0:43:ad:0a:df:03:ae:11:a9:27:36:c0:7f:30:0b:65:7e:
         fc:9e:73:f7:0f:72:9e:69:e7:c2:8e:c0:5b:cc:57:0f:b8:a8:
         72:f8:8f:99:66:9b:72:58:08:ea:a6:44:e0:39:18:6b:f5:0c:
         a7:6f:de:66:7b:53:f5:d2:a8:fe:9f:ea:83:58:13:f0:80:39:
         6a:06:4b:b9:df:b4:e6:c1:c5:a3:04:e8:79:1a:a6:43:3b:71:
         02:01:5f:39:34:b4:7e:d4:e2:3e:60:0b:5d:f4:2b:57:ec:8f:
         20:ae:89:f5:1a:dc:85:6c:4a:3f:73:bf:62:dd:07:01:b9:e1:
         40:bd:02:63:a4:07:68:84:1f:a2:f0:61:8f:eb:b3:09:84:a9:
         f9:3a:2f:dd:12:d2:b6:33:aa:cb:71:04:cf:ca:d0:7b:5a:aa:
         24:d9:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:39 2026 by rpki-client