Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          r01HfMOPWSb8X82ZoAD2oO6I1m6ziZj96yOk6ijkrNA=
Subject key identifier:   4E:A1:F9:27:1E:57:29:8E:14:02:C9:30:34:ED:F1:04:DE:DE:4C:DC
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       019CAC4681E67C5CB77E31777C78D8D072D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0BEA
Signing time:             Mon 02 Mar 2026 02:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:27 +0000
Files and hashes:         1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
                          2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
                          3: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: IibRNDdXQr4UeNk1Dv0rwZfgQMCZdKM1oiNs7C39jnA=)
                          5: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:81:e6:7c:5c:b7:7e:31:77:7c:78:d8:d0:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Mar  2 02:00:27 2026 GMT
            Not After : Mar  3 02:00:27 2026 GMT
        Subject: CN=4ea1f9271e57298e1402c93034edf104dede4cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:0d:84:47:4e:a7:09:57:f4:23:8b:59:1b:
                    52:62:be:7a:d3:7b:95:e4:d7:82:02:f5:99:f0:86:
                    73:ad:45:2f:49:f3:5c:0b:b0:b6:be:79:44:37:e0:
                    9f:f7:22:47:fa:78:13:52:f1:38:be:24:22:65:f9:
                    98:18:37:40:18:29:d1:72:ff:9c:af:3e:ed:a4:e9:
                    0f:fe:8f:f2:67:95:07:a1:12:82:13:a6:73:58:35:
                    99:e2:6b:90:55:72:26:92:19:db:bd:d5:75:98:90:
                    92:da:73:d3:52:f0:12:34:de:8e:8e:1f:ac:7c:ad:
                    1c:d0:f5:c5:df:65:86:5a:18:dd:55:7e:67:fb:b9:
                    b3:19:5a:f2:7a:ff:e4:35:80:ae:2c:cd:4b:36:58:
                    14:33:cf:50:d5:8f:9e:d0:73:c6:c1:a2:58:f4:f8:
                    94:44:7a:10:a5:b7:d3:2e:87:e7:5c:6a:3d:9b:f4:
                    31:ea:c0:62:c4:ca:d9:af:59:d4:81:a1:ce:26:d4:
                    a8:96:e0:41:a3:a2:64:8e:cf:cb:7a:ca:82:69:dc:
                    9f:19:4e:cf:15:6b:18:ac:d5:dd:d8:ce:93:13:b3:
                    e5:b9:3e:47:9d:76:49:86:c5:5c:ae:5b:f8:dc:9b:
                    e7:a9:a3:81:7d:f3:7e:6d:f0:39:c3:f2:2c:65:11:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:F9:27:1E:57:29:8E:14:02:C9:30:34:ED:F1:04:DE:DE:4C:DC
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:87:72:60:60:c5:26:19:e4:cf:4c:03:6d:6a:4d:df:be:47:
         6a:80:a9:76:82:61:58:12:61:8d:17:96:43:fb:cf:92:70:89:
         fe:3c:32:35:a2:b9:8a:d2:69:1d:5c:26:35:dd:33:7c:6a:1f:
         69:64:0a:3d:f2:f4:18:77:ae:4d:5c:f8:4e:61:7a:00:41:63:
         24:4d:ec:27:f7:a3:57:03:c5:ad:32:fc:3f:a6:87:22:1a:1c:
         19:cf:96:21:ac:53:32:92:9d:5e:15:fa:71:a3:d3:7e:f5:0d:
         93:f1:39:56:dd:e8:2c:89:bd:cd:78:33:d3:61:04:2d:06:4a:
         2f:99:c1:6f:81:ec:ad:d2:48:f4:3a:bb:89:7e:fc:7e:a5:dc:
         42:2d:f2:50:7a:37:71:c0:18:5d:d7:be:64:ce:f8:00:47:7b:
         58:10:9c:e0:0d:5a:fe:7e:a8:81:6b:24:a5:b6:93:6f:71:e6:
         36:50:9d:42:2b:ae:6f:5d:89:cd:4f:4e:ef:a9:d8:da:28:68:
         bc:65:ed:5f:ea:9c:11:8c:0d:54:61:d9:7d:30:c8:70:0a:f3:
         1b:0e:65:a6:4d:c8:7d:6b:86:f0:d8:8e:53:f8:d2:7d:40:d8:
         6b:8f:6b:1f:39:32:de:10:b9:1e:25:19:1e:a8:e2:24:9f:84:
         6b:79:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:07:51 2026 by rpki-client