Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          cznhtTBsPmvSCXfieVHuVROBYJljw0trjG/mrFkijfI=
Subject key identifier:   57:43:79:83:91:98:39:11:77:07:E3:50:2D:23:EF:FA:3A:5B:E2:C1
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019CA945ACC051990FA30452FAEF77CFAED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 12:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:41 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: 4ne8iFY2tuW3t2SfpGp551q7HgJC7w7prGLQL2AgTuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:ac:c0:51:99:0f:a3:04:52:fa:ef:77:cf:ae:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Mar  1 12:00:41 2026 GMT
            Not After : Mar  2 12:00:41 2026 GMT
        Subject: CN=57437983919839117707e3502d23effa3a5be2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:07:c1:ce:d0:ef:3f:b4:f4:db:b0:d0:86:
                    94:83:7f:4f:1d:1e:5f:da:5c:0b:22:42:f5:2a:f1:
                    ab:3b:b5:a1:c3:eb:20:e4:b2:f7:4d:3e:f6:14:8e:
                    01:da:f6:82:ed:59:d6:02:c5:85:88:88:bc:8c:7c:
                    c3:a0:90:78:03:65:c9:56:db:68:c0:81:cf:76:6e:
                    56:b3:9e:59:b5:8e:d5:be:c1:35:ff:53:74:15:bd:
                    6b:57:03:65:77:74:2a:63:12:79:4c:54:4a:f8:83:
                    ff:bd:31:96:b5:e2:01:c4:74:4b:25:7a:42:bf:b1:
                    c2:cc:99:28:08:25:c7:87:4e:64:b1:4d:30:c8:23:
                    7e:24:65:6d:3c:83:52:f6:96:a6:1e:71:8e:d6:bb:
                    fa:be:85:64:86:14:09:0d:23:d4:54:d1:a6:e2:f0:
                    b3:8f:5f:21:02:c8:cc:4b:f8:85:75:56:04:a1:ad:
                    3d:fc:d1:88:f9:d9:61:ef:e7:5c:c4:be:c8:67:c4:
                    66:b1:5a:40:75:c4:fe:fc:19:dd:e4:7e:f2:85:11:
                    6a:fd:b3:19:74:be:19:4a:1d:fa:a2:fc:4d:61:fd:
                    1e:27:cd:7e:a5:96:9a:08:3b:39:dd:d4:81:37:76:
                    82:dc:31:27:f8:dc:f7:75:d0:ef:16:51:6a:ae:0e:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:79:83:91:98:39:11:77:07:E3:50:2D:23:EF:FA:3A:5B:E2:C1
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:50:4d:11:a3:cc:86:22:92:17:02:53:5b:ad:ea:2b:0b:
         d6:f4:32:1f:61:75:22:b4:ff:28:2b:b9:52:e2:c9:f1:c6:f7:
         78:f4:24:d3:1e:44:d0:7b:e5:1e:d6:92:b3:67:f4:be:38:ac:
         25:7c:8c:ee:12:93:ab:f1:19:58:25:5e:a5:53:a9:11:e2:56:
         be:6b:52:f5:07:4b:ed:e4:af:26:3f:46:93:3c:40:3b:21:ea:
         6c:0f:a0:60:95:78:81:6d:2f:54:86:70:d2:ae:a6:d9:ff:0c:
         d5:76:db:7d:65:ff:00:84:ee:6b:f0:6c:d5:8b:17:70:85:f9:
         43:61:d3:7c:4c:f8:a4:a5:d8:75:76:93:6a:b6:82:f0:38:36:
         5a:a7:30:36:df:f2:10:0c:33:fb:76:8f:71:3c:c0:e7:85:c0:
         f9:40:a3:3e:9d:9f:db:6c:1d:22:2d:01:af:51:02:0c:22:63:
         03:a3:33:64:ee:57:13:7d:be:9c:cd:c8:d1:8b:a2:58:69:bf:
         91:89:31:89:f8:33:07:66:23:a2:2a:43:c8:e3:a0:a5:86:5e:
         cc:c7:6b:0a:2a:07:30:00:a9:51:67:e9:5a:d4:17:9f:9e:38:
         ce:70:7e:b1:f1:79:30:5d:86:2d:be:f8:6d:aa:3b:c0:60:19:
         6b:bf:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:30 2026 by rpki-client