Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          PNtyM/TfelCaxOMZvKK7v/vJ6mEwzm4ZXaxL0yKTFVE=
Subject key identifier:   88:2A:DF:C0:B7:54:D0:9B:EE:A2:45:35:F9:59:38:A3:4A:F3:4F:E2
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019D28849A9C1F98D202B93A0DE43C9D3B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: ut7sXSXzAgfIRTDd954mvKuuDDV/Rit6nUXAtgd2i7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:9a:9c:1f:98:d2:02:b9:3a:0d:e4:3c:9d:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=882adfc0b754d09beea24535f95938a34af34fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:16:cb:eb:89:29:f9:b2:0f:84:4f:dc:13:
                    fa:06:22:54:db:c5:e0:06:17:3f:19:2e:f7:6a:61:
                    e0:e1:20:42:b9:9e:bd:ba:95:30:84:1e:90:6f:d3:
                    e1:74:ae:65:af:a9:72:a4:17:ea:5d:63:1c:fc:15:
                    b4:ba:3d:4a:be:1a:47:cd:46:67:e6:da:74:f0:35:
                    41:5d:a1:67:4a:a6:6d:ac:e9:aa:48:ac:92:56:94:
                    c4:79:9f:34:22:22:f2:d3:b5:c9:d8:7a:87:11:82:
                    4e:9f:95:2c:ca:d8:66:60:08:6d:50:2b:6a:bc:6a:
                    76:ca:04:b5:39:b0:fc:ff:dc:dc:69:3a:27:4b:65:
                    f2:e0:db:f1:e5:bf:99:9d:bf:aa:b7:62:31:28:53:
                    04:ee:a8:fd:e9:6b:71:39:55:28:d8:9e:d3:29:c5:
                    f0:1c:84:39:78:63:52:45:5a:ac:65:72:0a:aa:ec:
                    6d:b0:6c:b7:cd:1c:31:f5:4f:40:41:99:2e:2a:91:
                    27:e3:0a:1c:2c:07:6e:cc:48:a8:3d:db:40:c3:dd:
                    ce:57:22:7c:7c:0e:bc:b9:82:98:30:30:b8:cd:db:
                    80:ef:70:aa:e9:8f:6f:a0:19:ee:be:06:41:75:9f:
                    31:c7:03:05:36:28:ce:5b:1a:94:3a:55:cf:1e:7f:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2A:DF:C0:B7:54:D0:9B:EE:A2:45:35:F9:59:38:A3:4A:F3:4F:E2
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:7c:77:00:63:08:5e:1d:e3:4d:f7:ac:e9:04:4b:3d:49:
         bc:52:13:85:63:ca:5a:84:fd:ec:ec:28:df:fc:b2:46:03:a6:
         64:e4:e0:77:8b:0e:52:74:92:ad:f8:c8:46:ac:9b:2a:a0:e2:
         d9:c3:20:8c:31:73:25:15:e3:68:22:10:92:7a:27:d4:85:3c:
         c1:5f:27:ef:81:ed:69:17:3a:26:9c:79:07:2b:36:c2:1f:da:
         59:b7:e0:35:87:59:02:0e:58:f5:c5:12:b9:aa:f2:f6:f5:c6:
         01:13:0c:0e:80:2c:f5:86:e2:60:69:b0:12:8d:09:3f:61:17:
         45:7e:21:de:02:0f:e0:98:fa:12:93:f4:4a:cf:84:83:9e:b9:
         62:0e:2d:c3:5b:9f:e7:ab:db:02:19:df:fc:80:6c:67:78:e6:
         be:eb:a1:63:5d:e2:aa:c1:3f:2d:f5:9b:a0:e6:06:9f:2f:b4:
         2d:f1:7c:4f:ff:54:5c:d8:e9:d6:71:ef:a8:d7:72:a2:16:f4:
         a9:6a:08:23:32:a9:a9:68:b6:d2:63:ad:fe:8c:10:6f:fa:11:
         81:c8:a4:5a:0e:eb:95:e8:8c:75:f9:15:c3:89:e4:0d:ff:af:
         c8:cb:20:d2:fa:ac:14:ae:76:18:f3:b0:27:57:fb:48:10:61:
         21:e5:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:03 2026 by rpki-client