Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          iH9jQ63GfHnUm8u8WoiJSB+9S7V6e+rfigZW6ftUh0Q=
Subject key identifier:   91:66:54:1A:28:71:77:29:EB:12:18:00:6A:6B:FE:A1:8A:B5:69:14
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019D27E01C9B0DE201551F4E5563F8217E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          09A4
Signing time:             Thu 26 Mar 2026 02:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:31 +0000
Files and hashes:         1: 1doWHsCdpiLZbH1TyuGCz4_uPuE.roa (hash: 6hnbKIrxKZ8l259jd9ZN+QofadcjXx8mCyWOsRzZwg0=)
                          2: 2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa (hash: Dwa67ru8l8X28sKKtvbdAV+bA3pDTfopqKgDja+YPG8=)
                          3: 90dV2SA1CbJk3NCS-t3KmkFgPQY.roa (hash: 3dV5dNZ+RLCQDMwYVAfz7la9Wy91RPFU6fngCvhobIs=)
                          4: B0VtulEaKPa_tAeb3cyKEpLJwqQ.roa (hash: DfXe9EjBy55A0mCRcLwF+DOn3wKxCrGVMcxxJZO9DaA=)
                          5: FH0_TzoEk5nS3S1J3a0ZmGSxjwM.roa (hash: 5/T/8UbsNGAmRjKQBlCTQrMUbwBJkauL8/xu9407QxU=)
                          6: HN2641Ic23i5F5WkdAwLmaLycbk.roa (hash: c0xHeIFJfyd97mqYM31NBuwI/+6cje+OH3RH2lHXEnM=)
                          7: N6GA_twxHmjdwFT89D6kPmB6M84.roa (hash: HpTEXbQEP7qsUUI+IlQF0S5sDdY41Y3dm7Oo/z0Q0Jo=)
                          8: OK50xjYplC0sZ4FsA2daQm877Ks.roa (hash: itiCnPD3IgWBnGUw5q3uw6ezaO3kZHhxkY8+wMlMC10=)
                          9: SDFl-dcGqJ4rviFvDKNjX5FqVRQ.roa (hash: D7VcT2WmquQVyow8pUPB/uhRTsYZ9Gv0ho2KzxuRPWg=)
                          10: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: nQ6bvsQQS0ENEUhTi21DxhN0tBZljr76bQSN9MQjF/w=)
                          11: YPZWcAq3hKD_OGWN_6VEUrxB6aw.roa (hash: iE4Fbg7p91f/ooVnXCF/WBwjpqnpexFi2sUHuiRma/0=)
                          12: _jbpHfwoWkRMmXtZ9SppwqNyEbQ.roa (hash: EXSdaWL7khfXCghHzFIqHNR3/DkalLdkgYs2d4m5uQU=)
                          13: _uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa (hash: yW2eAbC65z+mIRn5yCj4vtbXusOyzMkXOf4o7Pox6bc=)
                          14: aWcPUj1DCDuQO6qmjauPK8xInfo.roa (hash: k8tfsJzdjTq2aomYV3WxH/lnSIh4yY+NAufWvoQ6Pds=)
                          15: bRMOUlNOCfzR4ErU0rYz0V_P-ek.roa (hash: BQ0CfpSYs9L+JYIJuNZHmCZyYfkjnyafafs9iDbVjxM=)
                          16: hmyypgZeZjs1rI8ypzPihdUNMjE.roa (hash: qWNykdL6epLd/pHRnj2yljaFdAOhHq0rhbaXB9zAVI8=)
                          17: hzKtJYmQx2VKDR4are4X8Q6MlNE.roa (hash: Juf71zJJbJe4QMMrbX8fLK426s9dmhQKiIlkp/1nubQ=)
                          18: jQbews-PB3moyhJrqDiH9CkH6Ko.roa (hash: pgs7MGu7rOMWQQ3bkH9IRfbeLQBYLbhv0iGyBcHqZis=)
                          19: oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa (hash: eksGpiRZY4AMJcm0oeZ2OjL6HKGtTKXD/3FT0xK8N48=)
                          20: s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa (hash: c/c+gPrnfsRNn18SCCqI0mKo4h5PNPD7zev+q5M20v4=)
                          21: t2IncT8p9yQUR4SL1uNsmwPPetE.roa (hash: ZP/OUJwMP9dHqJ1MkNi2Ggj6UljCdvd+NUUL4zRyeWA=)
                          22: tETOyxkLoMNu42R_r2YtHtjW5R4.roa (hash: cHO6EZe5v4WJrUZm/pjUSj2daC/uz6A1814sqH7j/cU=)
                          23: vKeoQ1iSuXePoZLvkE7AO0YUwb4.roa (hash: +UV/RCa3VfuPMva0Fiqn4x9Dq3Bl70GQwq8hyRrXy7E=)
                          24: y5VwaVDlBBFkXgIF2NDdVaIpxak.roa (hash: vQzRSCQFt06fAcE7vNSTiIrc+XOhCpHknMyn4OqX5Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:1c:9b:0d:e2:01:55:1f:4e:55:63:f8:21:7e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Mar 26 02:01:31 2026 GMT
            Not After : Mar 27 02:01:31 2026 GMT
        Subject: CN=9166541a28717729eb1218006a6bfea18ab56914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:62:9b:75:d8:18:85:df:4d:0f:1a:5f:13:
                    c6:0c:65:e7:d9:2b:e0:cb:91:79:77:ab:e1:f1:aa:
                    6e:23:a6:f8:35:82:42:71:13:aa:86:fa:52:f0:df:
                    f9:92:d9:2a:36:c0:3c:a9:58:b1:82:ad:92:6f:f9:
                    0f:a7:59:b8:87:08:c1:67:20:0f:9d:49:ff:f6:5f:
                    19:43:c1:b7:26:0d:55:4c:86:48:98:03:15:2d:b9:
                    b9:5c:06:ec:1f:9d:a3:f6:76:f4:a6:71:55:8f:57:
                    a1:ca:cd:13:0f:16:4a:8e:90:92:8e:1a:42:8b:02:
                    ec:55:8b:cb:20:b9:b7:71:81:78:68:ee:ec:36:96:
                    0a:e6:61:87:87:3d:fd:9c:a1:50:58:3d:16:55:3d:
                    ff:36:e2:69:11:a9:e8:de:43:bc:58:f3:5f:42:cf:
                    db:88:7d:77:90:4a:c0:7a:05:76:07:cc:d4:62:42:
                    8f:d4:3e:2e:a4:16:92:40:53:8c:ae:96:90:68:15:
                    9c:b6:02:f6:cc:ca:55:8c:ad:9c:00:83:84:4b:52:
                    5f:5c:5c:ee:6f:c7:3e:4d:22:14:44:03:5f:06:1e:
                    b8:30:76:65:95:92:ac:8c:88:3b:88:01:fd:a6:69:
                    4a:c7:bf:ce:a9:a7:e3:b6:ed:47:df:2d:3c:f6:81:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:54:1A:28:71:77:29:EB:12:18:00:6A:6B:FE:A1:8A:B5:69:14
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:2f:7e:08:19:4e:87:2b:2a:9e:8f:db:70:b0:32:38:6e:
         ad:48:d0:82:9c:b8:8d:a1:8b:cf:11:54:3f:11:3d:55:bc:67:
         f6:7d:4f:8f:c8:85:78:78:39:8d:2e:97:43:5e:22:4a:92:38:
         4f:cc:c5:9c:9d:c0:cc:e0:36:4c:f1:4e:27:18:89:9b:4a:6a:
         75:93:b9:de:af:e8:0e:90:6c:d3:78:ea:7a:7d:f3:83:c5:58:
         27:04:ab:7e:c3:6a:91:ab:8b:b0:8b:c9:09:b8:24:06:e3:22:
         64:64:f9:44:79:88:36:09:a9:74:e8:3f:f6:34:4b:5e:5b:c5:
         c5:c9:70:c9:a9:32:0d:3a:54:ac:7c:f4:4c:40:9f:ee:c1:e6:
         08:b0:cf:26:79:3f:e3:6d:67:68:9d:b1:d1:a9:64:45:53:96:
         d5:7d:4a:7c:bc:bb:e3:29:91:8a:03:cb:d8:80:96:ae:66:f3:
         31:ed:c5:9f:bf:b1:55:d5:16:37:5b:ef:53:a7:52:cc:56:eb:
         c7:5c:aa:06:ed:fc:ee:e2:48:66:a8:e8:cc:49:ba:cc:67:a7:
         8f:69:9d:66:05:d2:aa:5a:cd:73:22:37:77:bd:ed:cc:92:6d:
         63:fa:96:f9:e1:2a:09:39:92:99:26:18:62:a5:77:1e:2b:2d:
         61:46:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:36 2026 by rpki-client