Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          DhBQhjWZvto6q11lFp4XDMp29l+8TBPnCDp/z4PFrXc=
Subject key identifier:   69:AD:0A:D0:48:6A:4B:D4:20:CA:A9:57:9C:2C:FF:D5:5F:2A:D5:D3
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       019CABD93B80BB119E7E986FC3AAA33D9DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          0461
Signing time:             Mon 02 Mar 2026 00:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:06 +0000
Files and hashes:         1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: qVLWt8TclnZgerjodcSQifnWdzx4WakVjmFiq9d+O+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:3b:80:bb:11:9e:7e:98:6f:c3:aa:a3:3d:9d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Mar  2 00:01:06 2026 GMT
            Not After : Mar  3 00:01:06 2026 GMT
        Subject: CN=69ad0ad0486a4bd420caa9579c2cffd55f2ad5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:4e:5d:26:c8:29:e9:21:7a:85:7a:8a:55:
                    90:f1:f8:4c:68:ea:02:11:05:2f:e0:ab:b6:49:98:
                    44:07:03:b5:fd:bb:c4:f9:86:1e:0f:03:92:c5:ec:
                    de:bd:dc:4d:59:22:a6:e4:cc:52:a9:4c:2b:c5:53:
                    f0:9b:c4:ee:ee:f8:26:af:a7:cc:8b:cf:6c:e9:a9:
                    6d:90:c4:1b:e2:93:1e:8a:28:ac:e8:53:f5:47:2d:
                    55:06:9a:ca:59:30:70:81:9e:d6:77:c0:07:97:a0:
                    f7:01:0c:15:22:f9:68:0b:7b:35:25:01:de:35:45:
                    69:81:2a:f6:11:74:e3:93:0b:b5:a3:b6:16:53:c3:
                    98:cf:51:42:82:9c:3b:d5:3c:09:2f:b4:46:5a:e6:
                    5d:fa:7c:00:13:d4:19:c8:22:f7:4a:16:a4:ec:a3:
                    0e:14:ca:b2:3d:15:86:12:99:a9:58:ef:ca:51:eb:
                    3c:7d:5f:1a:cf:2f:fe:22:ca:e4:36:96:3c:aa:fa:
                    7a:b9:6a:84:8c:8d:5d:cf:bd:e5:d2:bd:61:cb:be:
                    67:74:4a:1b:4d:ff:02:7a:c9:5d:53:9f:9c:d7:9a:
                    58:80:ac:bf:02:0b:48:41:c9:ae:6f:c5:53:11:f0:
                    9a:eb:84:72:00:24:fb:8e:74:23:33:0d:12:e0:c5:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AD:0A:D0:48:6A:4B:D4:20:CA:A9:57:9C:2C:FF:D5:5F:2A:D5:D3
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:17:41:06:ff:84:00:d5:17:ae:7d:8d:91:62:d9:9d:05:
         b1:d3:75:27:73:af:43:79:a3:22:b8:ad:30:62:ab:8a:b2:4d:
         b4:f2:ce:ce:ab:65:58:d2:47:4f:e4:6e:9b:1e:32:09:3b:9f:
         b4:44:4c:0f:f8:8f:63:85:d0:29:5f:a6:12:21:b6:52:70:8c:
         08:b7:4e:10:47:52:0f:2c:a3:de:51:e8:8c:b7:58:a7:0a:a0:
         70:9d:b3:c3:62:cb:c3:60:f8:e2:61:e0:89:67:12:d3:8d:e1:
         08:b9:54:a4:14:54:cc:42:45:fe:0c:d9:6a:de:bb:0d:03:c4:
         28:7e:9f:a5:ea:fb:85:1a:e4:e3:20:be:a7:8b:c0:c4:82:d1:
         33:38:1d:1c:55:0e:01:e5:db:17:9f:78:09:12:2f:85:1b:fe:
         2d:f0:08:af:d6:b2:47:4a:1e:5f:9c:9c:99:e1:7c:3f:98:2f:
         c4:1c:85:66:d0:77:c4:c9:68:30:91:61:b6:66:39:15:f4:f4:
         50:9d:45:c2:90:17:44:84:ea:08:9c:62:b4:54:f2:13:9b:94:
         c3:6e:a6:f5:ff:6a:83:24:fa:50:b9:35:88:f7:46:95:44:b1:
         f8:ea:53:85:73:0a:ee:53:84:b6:f7:4c:4a:f5:22:e4:26:f7:
         02:e6:58:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2TuAuxGefphvw6qjPZ3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1
ZGU5ODUwHhcNMjYwMzAyMDAwMTA2WhcNMjYwMzAzMDAwMTA2WjAzMTEwLwYDVQQD
Eyg2OWFkMGFkMDQ4NmE0YmQ0MjBjYWE5NTc5YzJjZmZkNTVmMmFkNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEROXSbIKekheoV6ilWQ8fhMaOoC
EQUv4Ku2SZhEBwO1/bvE+YYeDwOSxezevdxNWSKm5MxSqUwrxVPwm8Tu7vgmr6fM
i89s6altkMQb4pMeiiis6FP1Ry1VBprKWTBwgZ7Wd8AHl6D3AQwVIvloC3s1JQHe
NUVpgSr2EXTjkwu1o7YWU8OYz1FCgpw71TwJL7RGWuZd+nwAE9QZyCL3Shak7KMO
FMqyPRWGEpmpWO/KUes8fV8azy/+IsrkNpY8qvp6uWqEjI1dz73l0r1hy75ndEob
Tf8CesldU5+c15pYgKy/AgtIQcmub8VTEfCa64RyACT7jnQjMw0S4MWhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmtCtBIakvUIMqpV5ws/9VfKtXTMB8GA1UdIwQY
MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt
NTcyNzAwODJmZTBiLzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi
LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDwXQQb/
hADVF659jZFi2Z0FsdN1J3OvQ3mjIritMGKrirJNtPLOzqtlWNJHT+Rumx4yCTuf
tERMD/iPY4XQKV+mEiG2UnCMCLdOEEdSDyyj3lHojLdYpwqgcJ2zw2LLw2D44mHg
iWcS043hCLlUpBRUzEJF/gzZat67DQPEKH6fper7hRrk4yC+p4vAxILRMzgdHFUO
AeXbF594CRIvhRv+LfAIr9ayR0oeX5ycmeF8P5gvxByFZtB3xMloMJFhtmY5FfT0
UJ1FwpAXRITqCJxitFTyE5uUw26m9f9qgyT6ULk1iPdGlUSx+OpThXMK7lOEtvdM
SvUi5Cb3AuZYAg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:37 2026 by rpki-client