Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          UUJWzJl/wHFpXdnmVipq7JJBEmFmEGAdXW82ApaKr/w=
Subject key identifier:   EB:9A:C6:32:39:97:0C:64:81:88:01:10:2F:AB:1A:CB:83:2C:BC:2C
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       019CAB6B58A2DF97DE95A4E71DEFE858EC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          0A2E
Signing time:             Sun 01 Mar 2026 22:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:04 +0000
Files and hashes:         1: diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa (hash: xBkybsQcEpoTXkJLBjkUd7QB1bLl7/Ehg38seV+oQ+w=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: NZoyMEJ+BSsXZfMzgcNbBtcb+m55ZVFwAY0/FGz7UIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:58:a2:df:97:de:95:a4:e7:1d:ef:e8:58:ec:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Mar  1 22:01:04 2026 GMT
            Not After : Mar  2 22:01:04 2026 GMT
        Subject: CN=eb9ac63239970c64818801102fab1acb832cbc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:be:c6:22:46:31:fa:1a:ea:97:a1:6b:ba:
                    d0:ca:37:59:4c:40:c3:6b:8c:46:23:78:23:97:14:
                    9a:42:aa:c2:85:ec:d1:34:ef:17:68:ff:60:01:d3:
                    a1:85:1f:7d:06:e2:18:30:cd:24:0b:15:8c:e7:9c:
                    d1:02:08:ee:ae:d8:fc:1f:ff:0a:04:41:95:20:3e:
                    e9:2f:c5:d6:45:c8:15:74:ff:53:3b:44:3f:37:60:
                    db:aa:ab:5c:c3:1a:22:68:ab:b1:70:43:e1:14:54:
                    99:12:86:30:cb:ca:f7:3e:6d:78:f9:c0:e9:f5:6a:
                    89:98:36:17:20:a9:0d:ef:63:b8:c8:a3:fa:c4:56:
                    ac:09:1d:8e:62:25:73:69:28:c1:4f:e6:45:95:a1:
                    e1:2c:18:4e:f1:13:3e:d6:bb:9e:60:56:6d:f9:96:
                    89:04:70:59:87:8b:bb:f7:ca:6f:e1:9d:0e:cc:94:
                    81:8f:d3:d9:cd:51:16:44:51:83:af:5e:f0:f3:23:
                    84:10:0f:89:eb:04:26:ec:ef:e0:bf:3b:5d:0d:7a:
                    fc:29:cc:44:10:d9:a1:04:7a:bc:a5:2e:bb:e0:18:
                    1b:86:c4:13:16:fa:6c:33:7a:f4:b0:4c:8e:cf:db:
                    8b:49:f3:30:a8:36:f2:53:f3:36:a1:27:a0:79:d6:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9A:C6:32:39:97:0C:64:81:88:01:10:2F:AB:1A:CB:83:2C:BC:2C
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:67:f3:6c:fe:08:4d:19:c6:8a:e3:63:31:db:4d:75:b0:
         f6:49:54:54:19:4f:6d:19:15:ab:5c:60:d7:2e:da:23:96:17:
         8a:77:f3:9f:b6:b3:24:f5:61:13:51:aa:a1:9d:82:a2:0d:25:
         5e:69:0f:fd:62:c7:9e:0c:fc:b4:07:75:85:7c:dd:fe:e3:d4:
         0d:70:32:8f:31:6a:fd:c5:3b:ef:4f:20:cd:f0:f6:b5:7c:ea:
         a6:17:8d:bf:fb:60:fa:a2:a8:60:ec:f8:e5:c4:b2:8d:db:c0:
         e7:26:de:52:2e:4f:88:17:bb:83:10:9f:d3:8e:4c:2c:63:87:
         54:bf:ed:20:bf:a0:14:e2:21:f3:49:34:01:ac:a6:97:80:c1:
         16:b8:0b:b4:a5:cf:8f:0d:1d:07:09:c2:9f:8e:84:80:8c:13:
         b8:f9:40:9a:79:b5:db:ef:62:f2:b2:4c:07:f5:1c:75:b6:8a:
         ab:47:60:c5:7b:9d:9b:2a:b4:9e:3e:42:66:d4:2d:94:40:e6:
         6f:be:63:07:52:d0:2f:d0:a1:60:1e:cc:26:32:64:05:19:80:
         4b:06:bb:bb:d4:d9:da:8d:d1:bc:f8:c6:62:99:53:a8:94:c6:
         70:d0:a0:7d:ce:cc:d1:86:50:09:4f:fe:6a:77:c6:7b:80:74:
         31:27:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:45 2026 by rpki-client