Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File:                     vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier:          WtKnAfdw0C88pUXy62SGV+m54AVFGJESanRGNpDX6Y0=
Subject key identifier:   AB:79:14:A6:2A:E8:6D:81:70:BC:C6:F8:E8:FC:92:9A:D5:E8:65:4B
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer:       /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial:       019D9A06ED23F235E196694303AC767EDD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number:          078F
Signing time:             Fri 17 Apr 2026 06:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:38 +0000
Files and hashes:         1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
                          2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
                          3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: Bgx73IGXcXKLWCmYsGpRytPxQxiN85PJQAsD+RlmTr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:ed:23:f2:35:e1:96:69:43:03:ac:76:7e:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
        Validity
            Not Before: Apr 17 06:00:38 2026 GMT
            Not After : Apr 18 06:00:38 2026 GMT
        Subject: CN=ab7914a62ae86d8170bcc6f8e8fc929ad5e8654b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:a1:1d:2f:05:73:24:2f:79:33:0b:9b:37:
                    48:c8:f4:f9:94:e5:71:08:7e:17:b5:c7:ea:be:fb:
                    00:ee:5f:1e:10:2c:e3:71:73:27:99:4b:76:18:7c:
                    0f:40:75:b9:73:c7:f9:73:a7:22:86:ef:ff:1f:62:
                    7c:60:f8:b9:36:3f:2c:49:7f:88:a2:30:84:32:0b:
                    4b:20:dc:f5:75:b2:07:91:88:48:bf:ac:85:e2:b1:
                    25:8c:28:6a:45:0d:a9:39:5b:8a:97:71:74:56:36:
                    03:24:a7:55:e4:f5:25:4f:3f:b2:b3:31:c2:ce:7e:
                    91:5c:59:30:ad:4c:8f:c7:36:13:01:52:5d:9b:37:
                    f8:bc:cb:d3:1b:84:38:9c:ad:b9:3c:f4:ce:08:e1:
                    ba:b1:3f:8f:1a:3f:0c:58:84:88:d9:1c:57:70:ae:
                    b5:30:1f:2d:52:40:a8:9a:8d:56:49:65:a6:a3:1c:
                    c7:6a:77:7b:3d:93:ef:f5:91:bc:76:fd:f5:86:08:
                    b6:7c:97:68:45:66:8f:29:29:59:63:ab:7d:57:4f:
                    49:98:92:fe:7e:e7:d6:86:ce:2a:f4:a8:39:b3:85:
                    5f:28:d6:67:fa:89:79:d0:f7:db:17:25:6e:4d:59:
                    8f:96:3d:9e:8d:1b:9d:6e:c9:c1:c7:ae:29:62:da:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:14:A6:2A:E8:6D:81:70:BC:C6:F8:E8:FC:92:9A:D5:E8:65:4B
            X509v3 Authority Key Identifier:
                keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:92:a1:69:93:78:4d:53:6b:19:ca:1c:ce:c4:b3:dd:08:
         86:85:1f:5a:3a:c9:df:72:8e:ed:1f:50:f3:2d:e9:8d:aa:d4:
         02:aa:d6:81:1f:93:4e:61:e2:bf:5e:15:a4:10:27:16:d5:c4:
         44:e9:ab:2d:63:fa:1f:8f:72:fb:e3:42:2d:ac:77:f2:25:77:
         b4:66:55:17:e9:a5:52:65:be:65:ea:51:17:a2:22:84:32:bf:
         d2:40:cc:e8:36:b8:74:6e:d6:73:34:00:65:42:a4:ad:3c:df:
         e5:8f:10:03:f1:0d:8f:6f:21:b3:3d:80:a3:39:a1:e8:8b:65:
         d9:51:26:b2:e5:db:81:02:1d:2e:4d:01:8c:a1:c6:1f:35:08:
         e6:f7:d1:a8:5e:6a:b2:90:d3:2d:2e:a2:45:42:c9:8c:93:fc:
         8a:ae:7d:6e:9e:a3:c5:a0:f6:7d:34:f0:6c:24:8f:13:63:6b:
         d5:fc:00:10:33:cf:92:0c:8c:a5:4a:b8:3a:36:d9:4e:ac:0f:
         fc:99:a2:d2:49:9a:ac:f5:83:2d:cb:b1:31:ec:0d:8e:73:0b:
         8f:7c:41:51:5d:28:fb:cc:1b:1c:64:1f:63:71:b8:56:66:d6:
         5a:3a:e3:07:d0:ab:64:8b:51:cc:56:3d:8f:f2:c2:a2:87:69:
         e7:5c:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:27 2026 by rpki-client