Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          oyVoNcmTSf8SYArSfHTh2GE/t+DrEyEV+oCbcRBiIRA=
Subject key identifier:   B8:3F:B7:07:24:1E:D8:ED:22:75:FF:7A:D0:41:64:B1:48:B2:E8:D4
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019CAD90A5E72EADE113C6B7944671D8DBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 08:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:03 +0000
Files and hashes:         1: Ib0Ol3nFOYIDYH3957HPZoQwY64.roa (hash: NuhOlS+BLbt/74LFrOD5mSh8QUGvts9CSbc+WHsVsPE=)
                          2: J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa (hash: Bfl8ObvmfqtyBp5KbMoNS07tnVUojBcqdmR2bkync4I=)
                          3: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: r7QiIxhQvgFEFlEBFak9bpNBC+VtzEHxU0KBVFriAHE=)
                          4: jdfEMIWdXLEc60fasjfwFaquiJk.roa (hash: QpCSJQiJ63Lq7WSfKmPM9jrDX3jYq+/Wor8hrHw1FiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:a5:e7:2e:ad:e1:13:c6:b7:94:46:71:d8:db:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Mar  2 08:01:03 2026 GMT
            Not After : Mar  3 08:01:03 2026 GMT
        Subject: CN=b83fb707241ed8ed2275ff7ad04164b148b2e8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:51:1d:02:ea:a3:1c:92:ee:c9:4b:d8:b6:
                    1a:ed:b9:94:e3:4c:d0:e4:fa:4a:82:2a:0f:66:d2:
                    bc:75:64:2b:09:c7:07:53:01:cc:74:2e:17:55:c0:
                    dc:e9:f2:39:1a:65:f3:0e:2c:35:cf:6b:c0:bd:4d:
                    fe:40:f6:ce:4c:a0:4e:bd:e3:7a:7f:f7:9d:9f:32:
                    17:b6:af:0e:e9:b2:e0:1c:fb:64:f3:54:35:c3:ba:
                    5b:b8:9a:0b:5f:95:4a:2a:eb:f8:ba:eb:8d:04:28:
                    16:cf:b3:99:7d:b9:b4:93:f4:4b:ea:6e:8c:00:ae:
                    f8:b9:9f:18:30:74:aa:ca:64:c1:19:67:60:0e:eb:
                    a2:8e:70:03:0f:20:c7:a6:4c:f1:29:51:72:e7:43:
                    16:e5:e6:16:9f:28:16:0c:8d:19:89:54:6d:9d:3d:
                    40:be:e2:1e:4c:50:76:96:4f:6b:6d:60:c1:46:e1:
                    36:ff:86:92:3e:73:76:30:61:6d:a9:f5:d0:fd:9a:
                    4d:03:b0:07:f0:0d:ed:69:e4:1d:e4:33:99:e5:87:
                    45:ec:5d:83:71:b7:02:bb:cd:20:d8:e7:b5:af:55:
                    41:86:32:71:57:b3:d5:5c:d9:29:e3:aa:1d:a1:a4:
                    81:f2:30:a2:7e:5b:f0:97:5c:71:50:db:23:4f:fb:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:B7:07:24:1E:D8:ED:22:75:FF:7A:D0:41:64:B1:48:B2:E8:D4
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:ab:f5:d5:69:45:87:49:93:71:16:21:c1:b8:8a:27:99:
         a2:6a:fa:d2:8f:b1:43:fc:9b:2c:a8:07:dd:fe:f1:b8:2b:bb:
         cf:80:2a:06:1f:2d:a9:57:f8:9c:39:25:f9:cf:c5:87:02:93:
         89:b6:d4:a9:98:47:ff:14:b2:00:48:31:58:62:db:bf:88:c9:
         b1:d4:ae:8a:f4:f4:0c:3c:02:82:51:57:d4:99:be:c6:c2:0a:
         48:9c:5b:2b:91:a1:b7:cc:36:1f:74:de:91:c9:87:8b:58:5d:
         77:0e:43:06:ba:14:53:be:f0:a1:d9:8c:89:7c:81:85:e2:58:
         54:a6:c7:52:9a:be:52:43:32:b3:dd:90:db:5e:2b:58:29:36:
         bd:82:bb:ac:38:29:a6:cc:ff:58:74:c0:7f:44:dd:c5:de:48:
         a7:e6:17:78:c4:ea:d6:7e:01:27:28:61:c4:9a:cb:49:f9:86:
         0c:e9:45:59:f7:e1:70:96:e1:b6:7f:d1:6e:34:b3:43:3b:f5:
         76:6d:1a:02:c4:4b:b5:e5:35:59:4b:ff:c5:bd:ae:33:74:87:
         58:7d:88:8d:9d:55:7d:6b:5c:3c:2a:e5:90:56:8b:22:32:9c:
         fa:a3:80:8c:5f:41:64:01:ae:40:a8:ad:19:03:2f:45:d0:53:
         5b:62:29:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKXnLq3hE8a3lEZx2Nv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjI0ZDg5NWJmOWMwYTVmZDAwMGE0NWEzNDc1MTBiMmEw
ODdmYjgwHhcNMjYwMzAyMDgwMTAzWhcNMjYwMzAzMDgwMTAzWjAzMTEwLwYDVQQD
EyhiODNmYjcwNzI0MWVkOGVkMjI3NWZmN2FkMDQxNjRiMTQ4YjJlOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE1RHQLqoxyS7slL2LYa7bmU40zQ
5PpKgioPZtK8dWQrCccHUwHMdC4XVcDc6fI5GmXzDiw1z2vAvU3+QPbOTKBOveN6
f/ednzIXtq8O6bLgHPtk81Q1w7pbuJoLX5VKKuv4uuuNBCgWz7OZfbm0k/RL6m6M
AK74uZ8YMHSqymTBGWdgDuuijnADDyDHpkzxKVFy50MW5eYWnygWDI0ZiVRtnT1A
vuIeTFB2lk9rbWDBRuE2/4aSPnN2MGFtqfXQ/ZpNA7AH8A3taeQd5DOZ5YdF7F2D
cbcCu80g2Oe1r1VBhjJxV7PVXNkp46odoaSB8jCiflvwl1xxUNsjT/tmOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg/twckHtjtInX/etBBZLFIsujUMB8GA1UdIwQY
MBaAFFSyTYlb+cCl/QAKRaNHUQsqCH+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAt
ZmNiOWJkMDViMWFiLzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAtZmNiOWJkMDViMWFi
LzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO06r9dVp
RYdJk3EWIcG4iieZomr60o+xQ/ybLKgH3f7xuCu7z4AqBh8tqVf4nDkl+c/FhwKT
ibbUqZhH/xSyAEgxWGLbv4jJsdSuivT0DDwCglFX1Jm+xsIKSJxbK5Ght8w2H3Te
kcmHi1hddw5DBroUU77wodmMiXyBheJYVKbHUpq+UkMys92Q214rWCk2vYK7rDgp
psz/WHTAf0Tdxd5Ip+YXeMTq1n4BJyhhxJrLSfmGDOlFWffhcJbhtn/RbjSzQzv1
dm0aAsRLteU1WUv/xb2uM3SHWH2IjZ1VfWtcPCrlkFaLIjKc+qOAjF9BZAGuQKit
GQMvRdBTW2IpKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:37 2026 by rpki-client