Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File:                     vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier:          PAsEikWzvOFWr9I1kWnHdyCVb1XCOufSzQY0gRomcno=
Subject key identifier:   01:F4:1D:E3:24:CD:D4:41:22:84:26:6C:A7:30:57:C1:54:43:05:43
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer:       /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial:       019D27DF82D02E11D0A6A83500463FF25604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number:          0E4E
Signing time:             Thu 26 Mar 2026 02:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:52 +0000
Files and hashes:         1: 7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (hash: 5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=)
                          2: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: 2ZV4NZ/SPy3G5DiH0Zl8C3UKl/i1XG4NLvkZVR6kNEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:82:d0:2e:11:d0:a6:a8:35:00:46:3f:f2:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
        Validity
            Not Before: Mar 26 02:00:52 2026 GMT
            Not After : Mar 27 02:00:52 2026 GMT
        Subject: CN=01f41de324cdd4412284266ca73057c154430543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:5a:a4:72:ff:c9:f7:f6:42:87:c0:b0:cd:
                    1b:86:87:0e:f3:34:7b:42:da:40:ab:f7:f6:03:55:
                    48:7a:e5:62:70:55:3b:25:5b:7e:c2:3f:bc:86:35:
                    bd:35:c5:de:3a:8d:14:1c:e1:60:59:98:e8:72:a7:
                    4d:1a:0e:92:de:04:4a:50:31:71:2e:d7:b2:ab:bc:
                    1e:c2:66:b5:f0:98:5d:15:7f:fe:6d:a9:ef:b5:86:
                    79:61:95:e2:50:4c:86:92:a0:e5:f5:db:b5:8f:00:
                    be:22:35:14:ee:a9:fa:b2:cd:fc:a1:15:62:c9:5d:
                    19:3f:d7:51:8d:f3:86:fe:b2:a5:f2:04:7d:cf:f2:
                    3c:7d:a6:12:41:0a:83:7f:3d:a7:04:9b:6b:26:1c:
                    15:57:f8:1a:f7:da:5d:77:0f:11:7f:92:76:5e:d2:
                    a4:dc:d4:0e:34:6b:7d:66:84:06:57:4c:46:ba:e2:
                    15:40:bf:76:6c:6f:b9:fa:27:4b:89:2a:6f:9e:aa:
                    6a:38:23:ed:7a:1f:f0:bd:f2:55:97:a2:1d:ab:73:
                    9e:00:a0:a7:17:04:d2:93:5a:49:90:e3:ec:34:81:
                    ff:33:d1:c2:7d:1d:f1:00:da:49:68:e0:7f:64:2a:
                    a7:b8:64:2c:7e:89:08:cc:da:43:e6:dd:b7:50:27:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:1D:E3:24:CD:D4:41:22:84:26:6C:A7:30:57:C1:54:43:05:43
            X509v3 Authority Key Identifier:
                keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:e1:e9:cd:6d:6f:3c:ff:38:e5:2a:5d:52:ac:a9:c2:b5:
         06:bc:78:d4:73:7a:82:13:5f:3c:93:4e:d9:b1:25:26:cd:f8:
         51:8a:08:fe:45:45:20:6c:9a:b9:26:84:c9:35:38:4c:0c:d9:
         f4:b3:94:3d:62:c4:5a:83:dd:b6:b6:e0:3e:af:20:c5:8c:c6:
         0c:88:47:f9:57:7a:99:b3:9d:53:8a:f8:c5:75:73:9e:dc:79:
         93:3f:c3:b5:d5:04:8c:3d:7d:41:d3:47:20:5b:62:8d:2f:76:
         5b:84:d2:6d:0f:fa:3f:2d:48:fb:06:23:a1:55:82:bd:b5:02:
         7f:95:a1:ce:cc:c7:e2:03:f1:2e:19:d6:11:b1:cc:7e:a5:5d:
         c6:ef:35:a9:4f:3d:32:28:5e:8f:c3:5b:6f:92:27:a1:ee:71:
         5f:06:d9:b8:d5:fb:6e:83:30:fb:68:5d:fc:b6:1c:1f:ac:ac:
         f9:62:ad:d0:b5:e8:00:3c:1e:f9:94:af:bd:18:c9:8a:4d:d1:
         e8:82:78:70:fd:6a:58:41:44:14:14:10:fc:ef:67:3b:cd:78:
         28:9b:4e:37:da:b7:76:2c:74:31:d9:ac:d5:1a:dd:a8:1f:42:
         5e:10:20:0c:13:84:79:31:31:53:93:14:87:17:1b:a1:67:8c:
         32:bd:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:00 2026 by rpki-client