Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File:                     vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier:          KZ51FVX+Vw76QyinNbGWdSFtm/e1xE+B9hQzQzx26as=
Subject key identifier:   25:D8:00:10:C1:69:AC:7C:D8:76:E7:33:61:D3:8E:05:8B:4A:71:CC
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer:       /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial:       019CAE3571B3AD1D0230F8A3950279B8A1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 11:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:03 +0000
Files and hashes:         1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: ErOlHFaQ3ii8FA5eegmFElk5o2QWmxyrDH+BpDU16CM=)
                          2: z0QAGClogihB3W-zAzL6xgls6ko.roa (hash: fuMklyfUot+dHjODiv8mp7OwICNiKJEa1iwTJOTMA8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:71:b3:ad:1d:02:30:f8:a3:95:02:79:b8:a1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
        Validity
            Not Before: Mar  2 11:01:03 2026 GMT
            Not After : Mar  3 11:01:03 2026 GMT
        Subject: CN=25d80010c169ac7cd876e73361d38e058b4a71cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:0e:b2:25:a3:03:e9:bd:18:4f:c7:04:2a:
                    de:8b:2e:40:e8:97:53:26:e9:76:81:c8:35:e0:59:
                    44:01:3e:be:a2:2a:c7:db:16:97:26:bc:f7:fc:15:
                    36:d9:a0:bb:48:df:f9:67:5b:36:47:f0:da:68:6e:
                    75:ba:94:40:20:a0:6e:73:1d:31:eb:18:f9:30:36:
                    53:d0:ff:b4:c3:b4:31:3e:34:98:ac:89:84:d2:2d:
                    ce:71:1c:a5:e8:a3:bb:a8:d0:96:72:bb:3b:30:b6:
                    e8:0d:b6:71:9c:d0:88:ee:ef:10:17:b7:37:55:f6:
                    c6:94:8c:61:ee:4e:2a:1a:51:bf:1d:f1:74:06:9d:
                    db:03:1a:fa:bc:96:ce:9e:67:31:bb:ad:40:c5:30:
                    56:70:72:c6:86:d4:2e:90:5b:de:db:87:a4:78:39:
                    ab:a4:c3:b2:04:a5:59:64:11:12:a3:5a:bd:34:68:
                    54:6d:52:9e:63:b4:6f:5a:14:bb:7d:60:2e:30:2b:
                    48:73:0c:26:88:e3:f8:ed:7a:4c:8d:21:11:06:6a:
                    26:29:c0:f1:88:0e:e0:45:f9:0e:47:21:4c:1a:9d:
                    89:68:58:52:5c:c8:bc:ef:6a:a7:6b:72:69:89:ed:
                    6e:17:3e:39:bc:3c:7e:fb:ed:59:b0:47:c2:5a:73:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:00:10:C1:69:AC:7C:D8:76:E7:33:61:D3:8E:05:8B:4A:71:CC
            X509v3 Authority Key Identifier:
                keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:7d:39:0d:41:a5:4d:fa:86:9c:ac:a0:01:f9:5e:82:31:
         96:c0:92:bf:fe:84:b8:96:c5:2e:f7:0f:d3:31:ae:df:9e:db:
         b5:31:76:8b:3c:f4:48:ff:cc:d3:c2:07:d2:02:ba:c3:ed:61:
         36:23:c0:f0:18:87:32:11:87:ef:88:75:cd:0a:78:e4:5e:05:
         bb:a8:ae:90:e0:a7:fd:ac:cc:a4:2e:af:09:7f:81:84:e8:8f:
         87:f9:2d:67:b6:da:47:84:31:cd:79:9d:48:4c:9c:83:24:0a:
         cb:e5:b9:ab:72:5d:6c:5e:08:45:78:da:6c:34:59:6f:b4:a5:
         b6:2a:68:e8:5b:9d:1d:04:29:77:b6:9b:8f:49:3d:f4:bb:fd:
         57:9d:96:9b:c6:39:53:fa:89:aa:6e:a3:40:b5:c4:f8:ac:c9:
         33:0a:1f:9a:12:5b:a1:2e:07:6e:b0:f9:88:13:52:fc:c5:0f:
         dc:5e:cc:ee:1c:4b:55:5a:5a:10:ac:51:97:29:dc:06:0a:04:
         49:77:d4:2e:ef:5e:4b:c6:9d:68:4b:1a:3a:6a:9a:3d:ae:93:
         a0:b6:39:45:46:5f:19:15:ed:f7:d8:55:32:ae:10:d0:a6:75:
         61:da:87:6d:9c:ad:11:dc:90:43:f3:1f:25:b4:42:0d:85:59:
         c0:5a:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:20 2026 by rpki-client