Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          I/Vk7Y9186zOuv5RhBrUNXd0zbtGentRH3i7/n5iehQ=
Subject key identifier:   72:E5:C9:A3:C0:0E:71:46:29:BA:00:5D:C4:D2:D6:C5:86:89:3E:3C
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       019CAE35BEF848BF7F60A8B2632264C281CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 11:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:23 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: 9SoLmvxjb4iNnzYjeEisJicGMoekuSdMQDZkwU9CK2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:be:f8:48:bf:7f:60:a8:b2:63:22:64:c2:81:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Mar  2 11:01:23 2026 GMT
            Not After : Mar  3 11:01:23 2026 GMT
        Subject: CN=72e5c9a3c00e714629ba005dc4d2d6c586893e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:78:9a:50:38:d3:0d:72:5d:b5:f0:93:1f:
                    da:a0:81:6a:29:bd:61:04:1f:c5:d8:d0:10:18:ad:
                    ee:47:1d:d4:6d:33:dc:07:72:b3:35:81:f7:94:7a:
                    f9:df:76:8a:58:69:0d:4d:ff:13:5a:28:e8:8b:80:
                    44:59:3d:37:48:42:b3:5d:96:18:61:5b:95:b0:cc:
                    ac:08:04:21:f8:81:b2:e0:1f:ad:4f:35:16:4f:c2:
                    f8:02:78:a4:a6:e9:4a:e2:e0:30:dd:31:20:97:35:
                    af:06:ba:32:59:b7:02:71:ec:a4:72:12:47:ec:ad:
                    6c:bd:8e:9e:d0:ff:2f:be:6c:95:8a:b7:21:bb:46:
                    11:ea:b8:ad:16:4d:ad:4a:c2:4e:13:dc:03:6b:67:
                    e4:ce:7b:f4:0b:cb:7d:d0:10:ae:f4:07:00:2b:d1:
                    57:7e:e5:9e:14:db:5e:08:9e:00:12:c5:20:35:74:
                    eb:58:17:9f:57:96:45:08:af:d5:22:e3:de:c8:d7:
                    0a:95:fd:25:7e:dc:8e:49:5c:03:bd:82:95:b1:87:
                    3c:4e:14:df:3c:67:8c:af:e7:ad:ee:59:20:2e:68:
                    1c:25:a6:e9:0d:12:e0:4e:54:b6:f5:51:41:da:3a:
                    c5:2a:1c:fc:02:ab:18:1d:a6:e6:9b:3d:90:d2:22:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:C9:A3:C0:0E:71:46:29:BA:00:5D:C4:D2:D6:C5:86:89:3E:3C
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:d9:ff:19:81:f8:48:57:3f:fc:73:fd:16:84:9e:ff:c4:
         d2:df:ab:0c:28:b5:b9:1e:21:b2:08:6b:7b:2c:b6:66:6d:f8:
         79:95:dd:36:11:d9:f5:73:a9:50:1e:67:63:c0:8b:de:a5:74:
         2f:87:e4:73:7c:ba:80:d5:f2:53:ff:e6:66:7a:b6:73:92:e2:
         ca:5e:43:82:ce:5f:57:17:66:e3:0a:a6:e8:ef:8b:a9:76:cc:
         2c:34:b0:65:be:c0:0e:1c:65:19:7d:7f:26:64:ad:29:a5:06:
         78:ff:bc:3c:e7:d4:27:2e:35:8e:e1:1e:77:7b:66:ed:f5:cd:
         0f:88:01:91:07:38:fc:be:1c:8f:e7:9e:99:7a:46:ae:e1:10:
         8f:a6:9b:ea:5b:91:4a:95:57:5a:bc:f5:a8:9e:7b:80:a9:3b:
         f4:f0:24:b4:5e:fb:02:3d:41:bd:4b:c5:58:86:56:0e:6d:db:
         bf:e9:8a:79:1d:6e:be:35:67:3d:3f:92:a8:d6:f3:dc:9d:89:
         81:f8:a7:d3:2e:09:87:ff:5c:f1:0f:ba:54:e0:04:82:63:1d:
         fd:e0:b2:88:ba:97:dd:51:27:fc:1d:02:e1:40:df:30:b5:78:
         3e:04:9e:27:05:31:2f:ce:34:dd:f5:f2:fe:78:6e:78:99:d9:
         aa:8e:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:16 2026 by rpki-client