Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          B4gigCpeu45YV1rTtugJI3lPYgpbztxXeK+KjRNTuso=
Subject key identifier:   D6:3D:0D:7E:4A:4C:BD:ED:4B:DE:E9:AE:FE:25:E0:FD:E9:AC:27:90
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       019CA9EAE5951B7F22CF38C330F50044C087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          0976
Signing time:             Sun 01 Mar 2026 15:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:09 +0000
Files and hashes:         1: MaDS8-joEcAo6zZrve4qyKt9_MA.roa (hash: xT1YeTMUMUPt/jRAlRUdl6PIm7aXY3jJu/RwbOafDEw=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: WZewEvTboT3XC9AlUvWUflbg6mIAAZOOelXQZmUxTy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:e5:95:1b:7f:22:cf:38:c3:30:f5:00:44:c0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Mar  1 15:01:09 2026 GMT
            Not After : Mar  2 15:01:09 2026 GMT
        Subject: CN=d63d0d7e4a4cbded4bdee9aefe25e0fde9ac2790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:a2:2b:b3:72:d5:ff:c1:f7:69:56:c7:44:
                    12:de:46:3f:ef:fc:39:a1:61:36:52:41:c0:70:e4:
                    cf:88:67:26:87:9d:ce:57:29:c8:eb:c9:e3:79:cd:
                    83:2e:7d:e6:74:59:bb:51:e4:91:82:1d:34:cb:5b:
                    34:a4:39:77:e8:0d:fb:dd:04:66:a1:b9:49:bb:cc:
                    5e:48:32:a6:b4:ee:3e:3c:50:34:5f:d6:38:4f:13:
                    b2:a5:17:40:de:f9:8b:2b:2b:9e:80:96:6c:21:02:
                    fe:9f:cd:26:dc:bb:16:33:84:b5:b5:d3:bd:f7:4c:
                    ed:d0:c3:82:2d:73:72:41:76:d1:da:ff:70:d1:92:
                    81:88:92:0f:9a:db:67:bf:39:11:24:53:e8:07:f1:
                    e6:a7:ea:4b:dc:46:a1:a2:87:79:0f:7c:79:64:59:
                    83:4c:21:90:03:0f:3e:ca:32:e8:b1:9e:dd:f7:48:
                    ef:70:70:7e:77:ef:27:5b:a9:3a:26:d6:29:f6:a4:
                    64:ec:aa:d8:ae:ff:99:fa:5c:a0:d1:66:0c:4e:c0:
                    c6:3c:02:6d:f2:f1:4b:0b:59:ca:97:01:99:ab:5a:
                    5c:2f:2c:76:1c:e1:b5:56:77:42:38:b4:f8:d7:6b:
                    7f:63:d3:80:ee:ab:fa:c9:2b:32:62:7c:56:f8:4b:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3D:0D:7E:4A:4C:BD:ED:4B:DE:E9:AE:FE:25:E0:FD:E9:AC:27:90
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:71:89:de:7f:6d:87:5a:51:0b:7b:15:63:6c:3f:89:f6:
         c9:1d:a4:1c:20:36:62:ad:29:99:42:23:7c:4a:77:65:33:dc:
         28:ab:76:c8:b3:c5:07:3b:88:a0:56:68:f7:ed:28:d4:cc:19:
         ac:c4:03:7d:3c:fe:c5:3e:c4:31:52:9c:76:8d:3b:53:6a:72:
         40:d1:25:b6:10:4e:67:db:3b:bd:42:b2:16:c3:ec:17:6e:12:
         fd:43:0c:dc:2d:f8:73:d8:e7:ed:ec:76:18:32:96:28:a9:03:
         35:f7:d5:e0:1a:38:7b:24:89:11:d3:f8:da:2f:20:55:7e:d7:
         54:9e:a1:f9:91:72:cb:91:d0:dd:f4:c6:bf:bd:75:41:3b:c7:
         6d:9c:30:d5:a8:5d:26:f0:d4:41:9a:1a:e1:89:ea:76:2f:4d:
         5d:63:cd:f6:72:f8:f6:cd:54:f5:11:eb:d0:24:bb:ee:07:0c:
         ad:49:bb:92:32:bb:83:6c:d7:9c:bb:8d:b3:1e:54:59:f1:d7:
         9f:5e:cf:36:41:e1:c6:fd:1e:47:e0:10:46:10:ed:0d:cd:5c:
         b6:13:62:9f:90:3d:cf:e3:66:ea:a8:9d:b5:5d:32:99:18:e4:
         3d:90:cf:7d:07:20:8a:f5:2b:10:48:18:c3:67:b4:bd:14:ac:
         6c:24:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:31 2026 by rpki-client