Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          c4lMBP6f4CyGuCz/B/T4r2K24XeyZO6RWQKbctp6n4s=
Subject key identifier:   21:DA:35:24:BF:6B:57:C4:6D:31:DD:5E:47:8E:56:F9:51:33:10:F5
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019D2B85AA1C2BD34EB0EFB7BF409FFCF4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 19:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:13 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: b4ekmgG2KKPf3JNe4bOVxwtjFi2Lox4rOhoEpLKyRMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:aa:1c:2b:d3:4e:b0:ef:b7:bf:40:9f:fc:f4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Mar 26 19:01:13 2026 GMT
            Not After : Mar 27 19:01:13 2026 GMT
        Subject: CN=21da3524bf6b57c46d31dd5e478e56f9513310f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:e4:02:40:b0:f3:88:d7:7e:83:4c:a1:79:
                    3e:40:22:11:37:93:21:46:6b:57:7e:b2:7c:38:29:
                    2b:53:d9:77:5c:b1:a6:82:20:3c:12:79:bc:11:0d:
                    5a:84:02:10:9b:25:a4:96:81:0e:44:d7:a2:13:f0:
                    15:0b:94:34:51:dc:76:0c:4e:5b:35:49:55:db:0d:
                    84:1b:c4:33:79:b6:32:ab:04:a3:fd:76:b5:98:2c:
                    5c:1c:41:9c:2d:7b:ac:9b:93:5d:dd:0b:e8:d9:3d:
                    cf:0b:f6:6a:5f:c9:ab:b6:46:74:fd:72:3a:52:0f:
                    4c:a5:b9:98:9f:d7:db:19:ca:e3:f4:66:b1:5d:2b:
                    02:05:82:3b:52:4f:4e:0d:9c:bc:03:9b:7e:19:4b:
                    87:1e:6d:9f:f0:3f:c9:dd:65:55:6f:ee:fc:fe:b0:
                    ab:03:96:be:80:cb:07:38:63:29:46:77:06:96:f0:
                    18:d3:07:b4:aa:e1:26:1b:34:36:52:dc:b1:6f:bb:
                    ac:c3:ff:4e:be:07:9f:c3:99:26:c4:22:91:e8:ec:
                    c9:23:db:86:d0:94:cf:50:50:df:d5:68:80:0e:cb:
                    f2:6e:f8:ba:ba:75:c1:28:3d:c9:ce:a6:b1:0d:fe:
                    1d:2d:cc:05:60:dc:5b:a8:f0:8f:d6:14:2e:24:ae:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DA:35:24:BF:6B:57:C4:6D:31:DD:5E:47:8E:56:F9:51:33:10:F5
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:ec:45:3f:d0:92:dc:20:df:8d:68:9d:20:5b:55:9f:23:
         1b:ab:45:6f:92:b6:f4:03:07:3d:e5:6a:15:b4:75:f7:64:22:
         0e:d2:5e:a7:44:7a:16:d6:4e:45:a0:ce:41:d1:c3:7c:8a:01:
         b1:b8:1c:cd:66:b2:24:eb:c6:e7:e3:0e:c6:81:88:e2:8d:3d:
         06:7b:3e:8d:de:bd:c7:3e:ce:4a:c7:c0:9c:76:a7:af:6e:f7:
         a1:89:ad:d9:dd:b9:74:fa:da:54:a2:bb:a5:8b:de:40:a7:2b:
         aa:0d:06:fa:5c:79:1e:8e:fd:42:a4:66:cf:51:71:df:5d:f3:
         ff:e6:9f:24:c5:c2:8c:ff:8a:26:56:50:88:10:07:3a:90:80:
         fd:71:e7:9d:cb:db:d6:8f:4b:32:3a:59:3b:86:1c:7d:f4:97:
         1c:6e:b7:10:fe:3f:d0:e5:24:84:f6:32:ec:49:cf:0f:cb:23:
         77:4e:58:13:57:f1:25:f2:e7:38:42:08:c8:3c:e5:89:b3:a1:
         77:69:ba:2c:10:dc:5a:22:1b:26:83:dc:eb:6f:45:aa:27:20:
         92:38:5f:2e:fd:64:b0:46:85:3e:24:24:ed:50:39:19:29:3c:
         fd:b3:cd:fd:1d:f5:cb:d4:3b:ab:c8:fe:38:cf:dd:7e:ed:9d:
         a6:c1:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:23 2026 by rpki-client