Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          7lA8nDmD91yBWtJ3kuJcQXCE0zMHx+PXcCkAb1ujucw=
Subject key identifier:   4D:9D:07:57:BB:B4:46:88:09:BB:D3:AE:2C:9B:56:C7:C9:12:9B:65
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019D2960D338FAB7F4B3BA5F5896184148D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1420
Signing time:             Thu 26 Mar 2026 09:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:44 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: s4FogFkw4kKvHbIXNAlRJMIiu8bvYPTbG2N6wmuRyyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:d3:38:fa:b7:f4:b3:ba:5f:58:96:18:41:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Mar 26 09:01:44 2026 GMT
            Not After : Mar 27 09:01:44 2026 GMT
        Subject: CN=4d9d0757bbb4468809bbd3ae2c9b56c7c9129b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:36:b7:44:98:8a:aa:40:6e:b0:fd:03:32:
                    45:aa:7c:57:1b:fa:38:f2:2d:e1:f3:6b:d1:9c:c3:
                    29:65:32:24:b2:f6:91:1e:6d:96:39:7e:a0:13:10:
                    17:32:13:cb:1b:38:2f:af:87:8f:fc:b6:13:f8:60:
                    a1:a1:77:0b:c8:b4:a1:27:67:79:ea:fb:b7:23:ad:
                    85:06:f6:bb:a0:84:ef:46:cb:0d:81:3d:19:6a:71:
                    bf:81:3f:80:6a:74:6c:8e:0c:3a:f7:44:59:01:e4:
                    f2:31:7e:3f:6f:28:5a:99:bb:df:55:24:43:0b:26:
                    8f:16:c5:92:5a:57:fa:df:a1:89:5a:26:58:91:87:
                    36:18:e9:ac:4b:b7:37:3c:29:af:71:7b:d7:4a:f6:
                    79:bd:f8:db:3c:47:c6:4c:1a:23:26:0c:d1:94:d8:
                    46:61:86:9e:69:9c:8e:52:a5:a5:f7:ed:c1:0a:ca:
                    36:e7:80:28:2e:8b:53:47:41:d2:bb:9d:aa:e8:88:
                    a0:91:b9:61:78:dc:4e:3d:17:75:a8:95:8f:1b:31:
                    21:5b:f2:bb:eb:f1:cc:3e:6e:6b:51:a4:16:10:82:
                    2c:e7:8d:27:f9:08:a1:76:f5:fd:04:b4:04:57:de:
                    f9:c8:83:a0:8c:d3:02:85:8b:c2:8e:3c:d2:dc:44:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:07:57:BB:B4:46:88:09:BB:D3:AE:2C:9B:56:C7:C9:12:9B:65
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:f2:28:11:e7:a7:11:d7:1c:59:72:23:7d:b2:c6:12:2b:
         8e:fe:1d:19:92:75:d3:e5:91:a3:36:72:a3:f9:aa:35:40:87:
         5d:d3:1d:8b:8d:6d:02:e7:33:2f:cc:7f:43:20:11:a7:da:29:
         54:fb:e4:89:91:68:d3:9f:8e:5a:fc:29:92:89:cd:13:66:7d:
         58:c0:c6:37:66:b5:fb:8a:1e:09:72:19:f0:0d:36:54:fb:40:
         0b:6a:03:d0:f5:9d:e5:33:c4:8e:da:41:bf:de:4c:55:0d:d7:
         c6:c9:a1:84:d8:76:b1:17:6f:ec:67:1d:98:eb:66:4c:bf:8e:
         80:d9:14:12:12:1d:31:05:bc:5b:ff:7e:98:44:cc:d0:e5:67:
         f2:db:42:b4:46:c0:b9:fe:a3:2f:d6:ca:5f:b8:18:fe:8d:7f:
         3a:a7:e6:ce:a2:56:26:ed:0b:7c:a1:30:c1:95:10:89:3b:e1:
         0c:6a:0d:fe:ce:77:ac:2f:2a:3a:c6:91:e4:cb:e4:f1:5d:bb:
         3d:a5:c2:2e:25:2d:08:bb:3e:89:bc:8b:d4:9f:79:43:c5:59:
         0d:bc:53:7e:28:84:f3:23:ed:6c:46:c1:c1:fa:15:e5:06:e4:
         de:1c:38:cc:94:31:f1:16:59:bf:96:f4:63:d6:8a:a3:13:82:
         22:ca:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:00 2026 by rpki-client