Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File:                     VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier:          vChD3AsuPUa2iqHEcF2PH8xSsJhNUFuMDt2TfBRWVms=
Subject key identifier:   08:24:DF:BA:05:23:93:A2:D8:76:DD:1E:2F:7A:BA:0A:18:73:EB:18
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer:       /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial:       019D2A3BCFA7BFB94CE3C03161699C24A63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number:          1281
Signing time:             Thu 26 Mar 2026 13:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:55 +0000
Files and hashes:         1: 1-bmufN-XpCnOZovUT1MR41BEvYc.roa (hash: QyP6RbLW1JK4g3OkQkBwocjwcbA0t5gS2AtE58Z646c=)
                          2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: umzegwk8f8SKOgmzVAMS9P9X20+UhPtKq5VjtmLrRQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:cf:a7:bf:b9:4c:e3:c0:31:61:69:9c:24:a6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
        Validity
            Not Before: Mar 26 13:00:55 2026 GMT
            Not After : Mar 27 13:00:55 2026 GMT
        Subject: CN=0824dfba052393a2d876dd1e2f7aba0a1873eb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:bd:17:af:bc:6e:63:78:cd:54:a3:04:1a:
                    20:e6:30:67:24:b7:6f:28:d8:38:b3:29:d3:72:b7:
                    f7:55:b2:b3:1d:7b:2e:cf:a5:7c:53:3b:87:f5:9b:
                    b4:0a:fc:0a:79:ac:85:5f:41:0d:a3:36:4e:7b:3d:
                    41:dd:c4:71:cc:16:14:b7:01:7f:ed:11:52:d1:b8:
                    e4:a0:03:2f:75:6d:8d:d4:16:3b:a8:26:2d:7d:81:
                    76:8d:ea:58:6f:61:10:db:a8:5c:b1:c4:84:99:a7:
                    74:91:3d:2a:82:50:79:6d:9c:d1:44:bc:67:05:46:
                    95:98:a8:da:d1:49:33:55:61:21:b6:ec:3f:ef:ee:
                    9c:3f:8c:f1:72:98:5f:3c:b1:4d:f7:c0:3f:16:d9:
                    71:ad:27:70:e6:70:52:bd:0b:c8:c8:cc:10:a1:f3:
                    9f:d6:ae:2c:8a:35:a3:0f:58:e1:b1:96:66:0f:04:
                    22:aa:4a:d3:af:14:c5:53:78:8b:e0:17:53:f1:c7:
                    23:8c:6e:c5:a0:1f:e3:0f:94:f7:1a:02:25:76:88:
                    10:70:31:ce:42:2d:65:5d:5e:c1:77:9d:be:c8:19:
                    a2:a9:ab:22:65:88:5d:ff:1e:7b:0b:0c:dc:ba:94:
                    91:9f:b0:11:a6:02:26:a2:bd:bf:09:29:69:62:a7:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:DF:BA:05:23:93:A2:D8:76:DD:1E:2F:7A:BA:0A:18:73:EB:18
            X509v3 Authority Key Identifier:
                keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:bd:21:88:0d:9c:4d:80:42:81:d4:8d:57:e0:01:f9:5d:
         74:f4:33:52:76:61:b9:6a:df:20:0d:80:dc:e7:fd:20:53:df:
         95:8f:d9:5e:bb:39:93:53:d1:87:0a:48:61:33:0c:8c:f6:cb:
         8e:d2:fe:6e:d4:8a:bd:7c:67:5e:97:d9:2e:bf:42:5f:6e:53:
         6b:8c:a6:14:8f:f6:d4:70:19:6d:a5:96:21:4f:98:0a:93:61:
         e0:1e:0b:d9:06:4e:2c:1a:ff:9a:92:b9:a5:d1:09:b2:08:15:
         7a:39:2f:6a:b4:67:79:47:47:ab:32:e9:76:31:44:7f:9b:89:
         bb:3f:1b:64:20:9c:bd:39:e4:53:3e:81:df:5c:6e:81:4b:c8:
         28:a1:92:53:13:7f:68:0e:b5:7a:8a:7b:59:d2:dc:c4:b5:16:
         94:5b:04:02:0e:2c:9f:8f:82:15:ed:93:9b:f9:43:a9:f9:44:
         6d:6a:14:da:cf:2a:19:d6:84:72:fc:f2:7d:5b:f4:09:2c:66:
         46:27:3a:34:dd:63:01:5a:81:e1:8d:0c:a9:e8:7d:29:bb:05:
         86:47:17:52:35:dc:ca:49:8e:4e:c9:6d:bd:6a:ce:f9:5c:6f:
         f4:46:85:64:49:6f:a4:4a:19:5d:dc:c6:b3:75:60:fd:b2:8d:
         86:bc:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:41 2026 by rpki-client