Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          CnheTscomnP8h/WF8UkfcsvXpHFKLlVNbCQ0LQ3tA0Q=
Subject key identifier:   06:93:B8:24:DC:68:DC:EC:7A:43:CA:8B:E4:42:94:40:97:F9:DC:B9
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019D25F0F62EC015BC992471386A37428D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1113
Signing time:             Wed 25 Mar 2026 17:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:41 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: pz7YL75ySRIFHW+AZscjoLBMzM+CrPNkOthg3rva8hM=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f0:f6:2e:c0:15:bc:99:24:71:38:6a:37:42:8d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Mar 25 17:00:41 2026 GMT
            Not After : Mar 26 17:00:41 2026 GMT
        Subject: CN=0693b824dc68dcec7a43ca8be442944097f9dcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:22:bb:a9:34:c9:70:a7:12:63:2e:92:bf:
                    16:c2:e4:a5:f5:27:db:77:0a:63:4f:21:39:85:1e:
                    cb:03:ed:a2:68:71:b8:56:00:32:83:be:c0:55:69:
                    59:66:af:04:87:2c:43:00:78:ee:dd:a1:4f:97:d9:
                    fa:6c:a4:fc:b1:0b:80:e7:f7:51:86:22:f0:b7:71:
                    f7:12:96:62:1e:34:e8:03:78:5c:a1:3c:ac:4e:ca:
                    94:d6:c3:b1:22:5b:8b:01:b0:d8:5f:c1:da:91:5f:
                    76:d1:dd:0d:8d:fe:a6:55:95:29:08:c6:02:20:7f:
                    0a:03:b6:1a:0b:7f:ce:09:58:c5:57:99:04:f3:80:
                    c0:89:94:60:da:6b:7a:7a:c1:ea:7c:06:54:18:55:
                    f0:8f:01:a5:1c:42:eb:ff:7f:4d:6f:a0:e5:74:70:
                    69:5d:8f:54:a5:d2:73:5b:13:fc:40:9c:df:6a:9d:
                    9d:c5:8e:a0:ed:5c:ab:da:76:e4:d8:6c:6f:a9:76:
                    68:ad:2f:03:5b:38:2f:76:34:4d:97:10:02:59:b2:
                    7a:31:fc:af:33:26:f9:0a:80:51:88:f4:36:9c:d0:
                    9c:cb:be:16:d3:33:e3:52:eb:71:40:fe:c5:3c:89:
                    1a:b5:03:76:83:00:b6:66:0e:51:1b:83:3b:8b:3c:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:B8:24:DC:68:DC:EC:7A:43:CA:8B:E4:42:94:40:97:F9:DC:B9
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:80:12:55:2b:1d:9c:fd:ed:ce:7c:b9:47:15:59:71:61:8a:
         c7:aa:c5:12:f3:97:0e:d7:2e:2e:38:fb:c9:06:05:e4:43:94:
         ec:2a:e4:86:a4:b3:19:5b:ed:6b:05:ed:a0:08:0b:f6:09:b9:
         86:ea:e7:65:66:a1:db:f2:13:65:f8:38:da:67:6f:76:57:e4:
         99:2d:6f:51:a7:c0:28:b0:ab:b6:20:fa:4c:eb:20:24:38:b0:
         4f:80:50:a7:47:6b:28:8e:21:05:bb:33:13:70:c4:da:05:10:
         ff:a2:fe:f6:c6:24:d9:e2:01:5b:4f:e1:fb:f4:27:43:76:8c:
         0f:b2:b0:31:75:2c:46:4a:d4:f5:20:c3:c8:01:2e:8d:4e:2b:
         00:53:0f:96:4e:6f:9e:9c:ed:13:f9:a7:72:3c:51:a9:84:c8:
         26:9b:e6:45:7b:5b:b6:76:f1:37:81:43:70:93:a3:0d:1d:9b:
         8d:37:53:b1:02:cb:72:7a:85:c4:70:1d:b4:76:34:f0:b6:19:
         e0:3c:62:2d:3a:e6:18:88:33:2c:b5:f8:a9:0c:fc:b2:29:58:
         5f:c8:43:57:c2:5e:38:d7:35:4d:4f:ad:d8:ea:8a:50:33:b2:
         7c:b2:b9:f6:62:91:55:81:9f:09:b1:d9:9e:c5:f1:15:fa:c0:
         69:0a:f9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PYuwBW8mSRxOGo3Qo0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmQyZGE1NDQ3ZDAwNzYxNmViZGRjMmE3MGZlYWM1ZTc3
YzRhOGIwHhcNMjYwMzI1MTcwMDQxWhcNMjYwMzI2MTcwMDQxWjAzMTEwLwYDVQQD
EygwNjkzYjgyNGRjNjhkY2VjN2E0M2NhOGJlNDQyOTQ0MDk3ZjlkY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24iu6k0yXCnEmMukr8WwuSl9Sfb
dwpjTyE5hR7LA+2iaHG4VgAyg77AVWlZZq8EhyxDAHju3aFPl9n6bKT8sQuA5/dR
hiLwt3H3EpZiHjToA3hcoTysTsqU1sOxIluLAbDYX8HakV920d0Njf6mVZUpCMYC
IH8KA7YaC3/OCVjFV5kE84DAiZRg2mt6esHqfAZUGFXwjwGlHELr/39Nb6DldHBp
XY9UpdJzWxP8QJzfap2dxY6g7Vyr2nbk2GxvqXZorS8DWzgvdjRNlxACWbJ6Mfyv
Myb5CoBRiPQ2nNCcy74W0zPjUutxQP7FPIkatQN2gwC2Zg5RG4M7izziBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaTuCTcaNzsekPKi+RClECX+dy5MB8GA1UdIwQY
MBaAFLz9LaVEfQB2FuvdwqcP6sXnfEqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQt
YmJmZTIxOTZjNmFmLzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQtYmJmZTIxOTZjNmFm
LzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIASVSsd
nP3tzny5RxVZcWGKx6rFEvOXDtcuLjj7yQYF5EOU7CrkhqSzGVvtawXtoAgL9gm5
hurnZWah2/ITZfg42mdvdlfkmS1vUafAKLCrtiD6TOsgJDiwT4BQp0drKI4hBbsz
E3DE2gUQ/6L+9sYk2eIBW0/h+/QnQ3aMD7KwMXUsRkrU9SDDyAEujU4rAFMPlk5v
npztE/mncjxRqYTIJpvmRXtbtnbxN4FDcJOjDR2bjTdTsQLLcnqFxHAdtHY08LYZ
4DxiLTrmGIgzLLX4qQz8silYX8hDV8JeONc1TU+t2OqKUDOyfLK59mKRVYGfCbHZ
nsXxFfrAaQr5qA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:37 2026 by rpki-client