Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          WtkodTF8txK6D9ICBGADxtAVXJ5auUN4869UZCclXcc=
Subject key identifier:   45:54:FA:A7:A6:50:2A:64:B4:A2:FE:4C:FC:0B:34:0A:16:5E:0F:0C
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       019CACB51CA68C1C8AD53C5414F174131C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          184B
Signing time:             Mon 02 Mar 2026 04:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:16 +0000
Files and hashes:         1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
                          2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: kFAYr7nO4W4OdQEFdBGFNkPEHmzhOjAEHQ8fvKZMpio=)
                          3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
                          4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:1c:a6:8c:1c:8a:d5:3c:54:14:f1:74:13:1c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Mar  2 04:01:16 2026 GMT
            Not After : Mar  3 04:01:16 2026 GMT
        Subject: CN=4554faa7a6502a64b4a2fe4cfc0b340a165e0f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:2a:9f:65:ae:72:69:87:2d:16:1c:c9:f3:
                    26:94:27:58:e6:d7:05:70:d6:72:57:20:79:34:ed:
                    d6:17:bd:90:19:d8:54:f3:36:53:90:ef:cd:01:0c:
                    32:a4:49:9b:47:d3:07:2e:17:20:4a:46:41:66:25:
                    18:c0:29:cf:2e:44:7d:08:67:c4:f1:76:97:74:f5:
                    bc:6c:df:34:b9:85:4d:3d:9d:65:1d:a4:5b:9e:b6:
                    d2:2e:4c:0a:e8:95:c3:c7:01:35:d4:cc:ac:73:95:
                    de:27:13:a6:b4:fd:0d:af:25:e7:06:41:94:12:72:
                    c6:07:fa:e3:b1:27:12:43:0a:44:16:11:66:12:4e:
                    9b:d5:81:f1:20:81:91:b6:fb:33:73:aa:2f:2f:eb:
                    db:80:90:15:31:67:c1:1b:cc:3a:e5:69:1a:c3:ee:
                    a6:da:6a:c7:6a:82:0c:8a:1c:6f:1b:65:d2:a3:1c:
                    de:9b:de:e2:3c:f0:7a:70:0a:e2:38:ee:1b:21:20:
                    ef:f7:e7:05:20:3a:83:4f:fc:44:93:d5:09:8a:1f:
                    12:41:81:49:df:95:9c:f7:47:bb:20:23:69:e6:80:
                    ae:5c:a8:63:17:f5:97:10:e5:29:d3:5d:4c:38:c3:
                    61:27:68:12:36:3e:d2:48:4e:a3:1b:52:71:2f:15:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:FA:A7:A6:50:2A:64:B4:A2:FE:4C:FC:0B:34:0A:16:5E:0F:0C
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:b0:b3:50:3d:bf:26:22:28:98:76:90:f0:af:7a:bc:5e:
         26:fb:7c:d5:74:d8:f0:50:ab:ae:93:15:07:4c:a5:f3:f5:85:
         c4:26:8e:e0:16:2e:2e:13:fc:fe:74:b2:8a:a4:e1:a7:5f:9d:
         d6:af:44:a2:67:d9:59:68:52:ee:86:09:b8:a4:83:06:b3:49:
         b4:9a:be:b4:1f:22:43:5d:b2:2c:d2:2a:35:fd:ab:ba:cf:29:
         2e:b8:2e:ce:12:92:9e:5d:c5:b7:d6:bb:bc:61:4c:8f:18:2d:
         2c:ed:2b:31:3a:fa:8b:58:ce:4f:e3:01:a5:d6:8c:b5:a4:3e:
         b9:8f:23:fb:5f:69:a5:97:a4:51:04:34:0d:f4:51:14:ce:70:
         95:04:2c:54:a0:83:69:ad:56:ba:a4:de:34:6c:24:14:94:4e:
         7d:56:c9:63:95:bc:c1:4b:13:63:50:51:b9:10:78:c6:c1:9c:
         5f:ae:d2:11:ca:12:9a:51:71:6a:fc:9e:36:94:bb:59:29:63:
         20:4b:75:77:f8:55:99:40:96:6d:53:ed:fd:e0:e8:b2:79:ec:
         06:98:88:ba:76:a2:1f:d6:e9:24:ce:8a:bc:24:f9:e3:13:05:
         cc:b8:b8:d3:17:3a:dd:fb:c6:c3:e4:3e:ae:2c:61:e3:a9:7a:
         a6:03:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:44 2026 by rpki-client