Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          WG99FYPH8At/P1Mr8YP/6GccOBqERcRP4VnYnbojocY=
Subject key identifier:   F8:4B:AD:65:AB:0A:30:91:0A:F3:FA:22:76:A9:BD:A9:9C:B1:21:21
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019CAAFD0FB508CE73BDCC9181740B7B59E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          13BC
Signing time:             Sun 01 Mar 2026 20:00:37 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:37 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:37 +0000
Files and hashes:         1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
                          2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
                          4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
                          6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
                          7: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          8: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          9: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          11: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          12: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          13: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
                          14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          16: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          17: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: 9GXIS+rnKp0bhQfHq/kRr8HMR/oKoUMB92SWmYW2GPA=)
                          19: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:0f:b5:08:ce:73:bd:cc:91:81:74:0b:7b:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Mar  1 20:00:37 2026 GMT
            Not After : Mar  2 20:00:37 2026 GMT
        Subject: CN=f84bad65ab0a30910af3fa2276a9bda99cb12121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:e3:69:24:86:f7:4c:10:d5:71:7b:76:0d:
                    81:c4:15:bc:aa:6e:48:16:b2:29:95:44:83:23:dc:
                    be:38:38:c2:fc:b2:7c:78:87:16:cb:78:05:59:f6:
                    ec:b3:71:ce:0a:5a:21:0a:e2:32:b6:29:14:6f:35:
                    4b:99:7c:35:61:da:31:1e:f9:b1:ab:d7:cc:39:b8:
                    e0:25:e2:3a:96:41:f8:a1:ab:73:ef:5e:23:5c:20:
                    49:96:0c:1d:b7:88:bd:de:5e:5c:84:65:44:25:9f:
                    f6:39:20:ea:df:3e:10:87:72:f5:83:b1:12:36:d5:
                    ec:f7:eb:14:cd:0b:6c:fb:dd:b8:54:da:b8:f0:f0:
                    37:7b:a9:e8:26:cd:36:a9:73:4f:6e:a4:4b:eb:d2:
                    ef:29:80:68:85:c2:30:d4:0d:94:18:11:72:b2:4a:
                    c3:af:69:7c:f9:43:d9:97:b4:22:34:1a:d3:f5:0d:
                    71:58:b9:a9:06:69:2f:db:7c:5c:a9:d2:96:ba:e5:
                    3b:03:9d:7d:7f:47:46:8e:06:61:c6:e3:33:f7:9d:
                    75:57:f2:06:8f:74:eb:9a:56:d0:db:5e:01:8e:f5:
                    31:17:03:0e:1a:26:09:51:9e:ab:39:19:33:e5:b1:
                    aa:c0:cb:79:f3:19:24:04:54:ed:ba:7d:76:71:d6:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4B:AD:65:AB:0A:30:91:0A:F3:FA:22:76:A9:BD:A9:9C:B1:21:21
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:e1:6b:57:81:d8:e0:54:12:32:3b:1f:c0:37:5a:47:ed:
         0f:3b:c0:a6:64:62:dd:34:a4:85:ea:f5:e8:57:78:13:66:dd:
         41:bd:d3:e9:e1:66:f1:df:8e:0a:7d:5b:c7:ca:99:9a:26:6a:
         d5:e8:ac:86:05:f9:cc:4d:fe:23:52:a6:2e:7e:17:68:4b:79:
         8d:7d:5f:76:df:c4:3a:ba:c9:ee:36:0d:8d:0e:fa:1a:ee:ce:
         83:87:e6:4e:03:36:10:c4:58:ea:0f:f3:79:af:bd:0f:5a:ad:
         7f:bb:13:bf:70:02:d8:16:af:5b:02:09:63:a6:37:f5:2b:b3:
         a2:3e:ef:d6:5f:ef:98:b5:75:f7:59:f9:c8:64:b9:df:7a:37:
         2d:23:d8:8e:bd:fa:35:2f:9d:16:2f:b3:97:ec:72:3f:fc:2c:
         35:05:f2:ed:19:a9:ee:14:a0:df:d1:1e:07:31:b6:53:5b:71:
         82:6a:f2:37:32:51:11:84:d0:c5:ab:5f:81:12:66:c2:a9:ff:
         79:74:95:f8:83:bb:bf:43:89:cc:15:d2:e0:bb:06:1b:96:69:
         2d:b3:7e:1f:95:07:d6:56:26:7c:3d:21:1c:ef:4e:4b:7c:3c:
         a1:7e:ea:20:b1:3d:55:45:c3:2c:a8:b3:23:f8:11:f7:f7:e1:
         77:18:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:14 2026 by rpki-client