Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File:                     vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier:          YY8aqiMgT1epCf52N7gf7SnoyRu0puZqgmsPSJuyjwo=
Subject key identifier:   53:0F:27:35:09:A3:8E:02:2F:52:F3:92:28:21:AB:82:1F:2C:64:94
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer:       /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial:       019D27DFB64FF81E954ADB2770B3A34B3BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number:          031D
Signing time:             Thu 26 Mar 2026 02:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:05 +0000
Files and hashes:         1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
                          2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
                          3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
                          4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: ryorDHCpCg2KQybiQwexB81mtecu/xK5Lr/CBVTcz1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:b6:4f:f8:1e:95:4a:db:27:70:b3:a3:4b:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
        Validity
            Not Before: Mar 26 02:01:05 2026 GMT
            Not After : Mar 27 02:01:05 2026 GMT
        Subject: CN=530f273509a38e022f52f3922821ab821f2c6494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:d9:be:1f:8f:27:3b:4a:d3:60:79:55:e8:
                    c6:4a:a8:b5:21:68:f3:33:73:c0:01:74:80:de:6a:
                    18:37:75:83:1a:ea:06:41:c8:29:a2:f5:e7:a6:e2:
                    65:f6:e0:8d:2d:b5:4e:c0:d9:ac:cd:99:f1:db:56:
                    dd:78:64:28:01:54:9e:48:b5:6f:ad:86:84:77:55:
                    d1:db:07:22:4f:21:ad:9d:4c:27:78:ac:3c:6d:a9:
                    6a:cc:f9:d8:f2:e5:6e:47:25:a4:a5:f6:d7:54:1a:
                    1a:6d:9f:80:72:e9:9b:c5:41:31:b0:a3:51:e7:b3:
                    e1:8c:e4:f2:9b:3e:da:df:ff:cd:3e:d5:1a:b3:2f:
                    25:d5:ee:22:42:25:02:eb:c0:34:c9:fa:4c:ea:d6:
                    15:1f:72:fa:81:2f:23:27:12:8e:4a:45:60:f2:43:
                    35:22:e7:57:f3:69:cd:61:69:6d:08:a7:2d:91:9a:
                    73:51:f1:54:94:ce:53:7b:07:34:4a:18:47:3f:df:
                    58:1b:b1:13:b1:21:67:64:91:07:a0:99:e7:2b:0b:
                    89:40:31:71:d3:d9:97:26:78:91:cc:a1:f3:49:00:
                    f1:69:a5:36:8a:b1:7a:05:b1:af:6b:5b:df:fb:b6:
                    72:b1:fa:59:19:58:5e:4e:02:04:4b:4b:14:4c:98:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:27:35:09:A3:8E:02:2F:52:F3:92:28:21:AB:82:1F:2C:64:94
            X509v3 Authority Key Identifier:
                keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:99:37:13:b5:19:05:46:dc:08:bc:2d:f1:d0:ae:62:32:f6:
         ef:e6:1c:e3:b4:89:8e:d2:fd:18:fa:d6:e6:44:3a:56:d8:68:
         42:e6:2d:86:ba:cc:59:6d:51:ee:52:b1:02:be:e6:c0:f7:33:
         c3:5b:80:82:2f:77:ee:6a:39:01:cd:84:31:b8:16:d5:51:0c:
         3c:57:b9:f7:e7:7e:9b:c9:4b:96:d5:ca:8e:80:39:3e:9b:99:
         5b:57:86:d3:65:7b:91:3b:5d:69:52:97:8f:f3:56:4d:c9:50:
         25:f0:e2:30:db:13:fa:85:14:74:3f:d2:35:3b:f4:46:b8:a4:
         fc:40:93:f8:45:42:59:22:f8:06:63:2d:03:a1:6f:2a:82:50:
         6c:25:ba:99:b0:ee:25:ff:80:0a:91:4b:02:c5:7b:78:74:1f:
         1b:86:b7:c5:00:51:74:57:bb:c3:54:98:a7:de:2f:64:c5:41:
         3a:9d:8d:8f:11:b8:c8:cd:b0:0f:17:76:6b:ed:9e:f3:a5:8d:
         16:80:d0:25:62:1c:f4:80:79:c2:fa:a2:43:54:28:a9:2c:a7:
         f5:3d:61:1c:67:15:7c:eb:fb:9c:66:de:25:de:a9:ab:1d:6e:
         9a:ad:34:f5:af:87:d8:f2:52:6b:f5:3a:e5:50:9f:7f:e6:0a:
         84:9a:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:02 2026 by rpki-client