Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          u7s9XUfojsbtRPJmTomK2vWrgbG/Xv7Mof3KorzkOXs=
Subject key identifier:   96:82:51:96:7A:EE:1E:BC:C7:1A:BE:D5:FA:48:54:48:8A:7E:A8:FB
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       019D27E0703245942C592C765B12C0DF9648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          1595
Signing time:             Thu 26 Mar 2026 02:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:53 +0000
Files and hashes:         1: eYgS2cJVh772gy1pgvA3zUVmNp8.roa (hash: 4VAqg2+Asr08BiNWdZozWkmimj3+ybcUk/eeWDDiz3c=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: ggBtxQ7VfwYpRrMLaMxH3e83UfopcUXGiNXFTyYOwgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:70:32:45:94:2c:59:2c:76:5b:12:c0:df:96:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: Mar 26 02:01:53 2026 GMT
            Not After : Mar 27 02:01:53 2026 GMT
        Subject: CN=968251967aee1ebcc71abed5fa4854488a7ea8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:03:b0:29:78:6c:af:42:01:ed:40:c5:83:
                    a8:42:9c:db:b4:be:e4:89:77:98:7d:86:ac:d1:9c:
                    c8:36:2a:e5:57:52:c0:4e:cb:0d:2b:b3:92:31:44:
                    72:0b:c3:db:c6:dd:b9:75:06:3c:2e:74:0f:0e:b8:
                    8e:1a:fd:df:28:fe:d3:ee:c4:9c:e4:49:ed:73:b8:
                    c4:9f:ba:29:eb:f2:97:2e:45:88:24:e5:2f:b6:18:
                    e8:33:85:a9:79:b4:a2:02:9b:b2:34:01:6e:da:e7:
                    12:3f:50:72:1f:3f:85:6d:d4:78:eb:85:15:63:62:
                    5f:d9:56:2d:2b:d7:a5:1a:83:f3:03:c6:72:dd:4f:
                    fd:c0:35:a5:ba:cb:6d:a5:c9:6b:ec:bc:3e:79:64:
                    ee:34:39:90:6b:b3:62:b5:9e:2e:1c:22:20:8c:c5:
                    80:d6:aa:f6:48:c6:3d:f4:32:81:e8:d2:4d:42:88:
                    99:7f:84:cc:f2:63:cd:3a:20:26:d2:11:77:44:d4:
                    7e:f9:91:b5:1e:16:1c:0c:48:8f:ea:c1:db:f0:8a:
                    db:14:22:d5:aa:36:85:07:57:79:ae:7d:66:80:ad:
                    f6:bf:76:d0:a5:0c:fe:db:55:09:73:d9:a1:24:51:
                    32:32:79:72:15:42:14:1b:53:23:c7:fa:51:15:db:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:51:96:7A:EE:1E:BC:C7:1A:BE:D5:FA:48:54:48:8A:7E:A8:FB
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:41:80:8e:13:a0:8f:60:5c:24:d1:30:fa:47:27:5e:a2:6e:
         c5:86:e0:ec:63:ea:c6:df:ab:84:e0:e0:1c:d3:63:55:1b:69:
         1d:50:44:2b:ba:27:e8:f3:06:c2:72:33:39:44:6d:6a:eb:be:
         90:94:6d:f4:5d:28:aa:42:c2:9b:94:28:e4:cf:d9:14:c7:af:
         98:cc:88:6c:46:48:af:ec:4a:0e:99:c1:cb:f1:65:99:81:0b:
         1a:f2:f6:e9:7b:95:de:40:37:45:c6:e7:23:a7:7a:e0:47:27:
         74:d2:71:57:e7:46:08:8c:ce:6c:19:bb:b6:c2:78:ec:69:80:
         f7:48:ad:bf:f5:11:69:aa:17:22:dc:79:17:ea:34:5a:96:1a:
         50:eb:c4:47:a4:af:78:be:5c:6c:a7:1b:a4:2e:56:3a:e6:42:
         31:2b:a6:e3:25:ea:b4:c3:c9:72:28:a8:a7:5b:f0:65:69:90:
         f5:9c:ca:c4:fa:fd:f8:3c:d0:8a:00:52:bb:30:f2:ed:d4:a8:
         49:78:97:16:ae:8f:fd:5c:c0:73:62:1f:22:af:ef:c9:65:83:
         d8:37:c3:66:5e:26:eb:cf:fc:97:23:fb:63:15:26:18:27:a8:
         e8:59:97:aa:2f:42:24:5a:2b:a3:fb:23:cf:11:e5:8f:7c:7c:
         4f:56:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:32 2026 by rpki-client