Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File:                     vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier:          ZbNxixnHlaXVCyi0aK5uAPUo3s9dxLX1pssBpF7L0Hc=
Subject key identifier:   B9:8B:0D:C8:D5:29:66:37:6D:61:84:6D:75:1A:87:DE:99:CF:80:2A
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer:       /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial:       019D999992E0FB8434E69B79B33A6C95BEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number:          141F
Signing time:             Fri 17 Apr 2026 04:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:11 +0000
Files and hashes:         1: AuEY_lhsQ1reVE3aekx3vo2MXuw.roa (hash: 8nzWp+KuBZnVHqZNnr3zfpd8+GWRxSiubDowltaN1ZQ=)
                          2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: LqluW9kQ9NCoI6ohvQKw2JId7dWtw+rnt3uvVJULJlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:92:e0:fb:84:34:e6:9b:79:b3:3a:6c:95:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
        Validity
            Not Before: Apr 17 04:01:11 2026 GMT
            Not After : Apr 18 04:01:11 2026 GMT
        Subject: CN=b98b0dc8d52966376d61846d751a87de99cf802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:75:fc:75:6b:28:ff:81:8d:e8:0e:1e:a5:
                    dc:0a:e4:1a:b6:d8:fb:6d:84:05:90:d1:73:c6:5c:
                    e2:1f:78:cd:94:9b:82:3c:10:c6:e4:3f:7f:09:82:
                    91:7e:de:65:e3:b1:e7:6a:81:37:f4:1a:57:93:6f:
                    4a:0e:be:69:a8:70:cd:d5:ea:c1:81:b8:d6:63:c4:
                    f5:ac:16:13:77:9d:72:07:bd:b9:90:c5:fa:9f:21:
                    7c:f1:35:f6:67:1b:d1:db:54:d6:39:e0:08:fc:8e:
                    9c:65:60:32:27:e6:a1:35:f6:e5:53:be:09:eb:e5:
                    ab:ec:47:55:fa:f9:d0:58:fb:3c:1b:c4:70:b6:71:
                    45:30:57:96:36:c0:d4:72:1d:ff:57:f5:ad:0f:0a:
                    80:00:e1:d6:02:4d:b0:f4:6b:0e:18:e0:88:4e:93:
                    96:98:9d:1d:78:64:74:21:a1:2b:85:90:b7:3f:74:
                    aa:2f:6a:3f:c5:2e:14:ef:57:c2:96:9e:60:c0:15:
                    c9:a1:9d:e2:18:0b:70:cf:35:79:0b:bd:18:a0:b0:
                    3e:28:13:f8:6e:71:ec:7b:a1:ad:df:47:c0:73:ad:
                    26:a9:bf:df:f5:26:40:78:7c:53:93:bd:7b:99:45:
                    3f:b2:c4:1d:56:6d:c9:83:9a:83:b3:74:c9:ff:5d:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:0D:C8:D5:29:66:37:6D:61:84:6D:75:1A:87:DE:99:CF:80:2A
            X509v3 Authority Key Identifier:
                keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:ee:2f:d8:ff:6f:ae:dd:a2:cf:da:4c:22:9b:46:58:f9:
         c7:76:f8:7e:44:fb:14:80:cd:94:28:e8:ff:96:27:87:0e:fb:
         fc:8a:b0:c7:fc:8d:6e:1b:d6:86:9c:30:54:b7:d7:42:4e:ee:
         1d:22:9c:13:85:cb:16:73:f9:0d:fa:38:13:1a:fa:cf:1e:2d:
         9d:18:fb:db:56:c4:91:6e:62:fe:e8:ac:b7:cf:ed:0c:c2:a9:
         c9:2d:a7:44:ea:cd:c3:db:a3:f4:c5:f4:1d:54:ad:29:8e:e3:
         4b:ca:61:dc:cf:c4:58:d1:e6:15:3b:a6:97:03:e9:de:aa:b4:
         14:e4:bc:61:0b:30:4c:c3:7c:f2:f9:3c:1c:9f:32:97:8e:48:
         5b:2c:f1:71:c9:77:e9:b0:20:27:c4:10:58:07:34:84:27:28:
         fb:4b:54:d0:5d:0b:dd:07:b5:84:24:9e:38:73:d1:51:73:c6:
         3c:6f:f2:8b:66:e8:40:2a:7d:e2:e7:1c:8f:8a:c1:c2:65:01:
         a4:ed:b2:1e:5c:ff:4a:20:69:39:10:e1:c6:da:8b:1b:0a:65:
         a6:ad:06:55:51:ad:12:4a:c3:57:c1:24:00:1b:2b:ef:e3:e6:
         ff:6a:ad:ef:ea:ab:66:37:48:5b:87:1a:3c:c7:b9:49:6e:5e:
         1f:e3:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:56 2026 by rpki-client