Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          amq2Gdd59mSQEJMidBi2pYca6dCZrWg6gXMyx+2ZBn4=
Subject key identifier:   E9:34:2D:92:2C:B8:72:48:CD:BF:7A:4F:31:F2:7B:B7:2D:33:35:D1
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       019D2816C274317E31FC744178BB95BFAF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 03:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:13 +0000
Files and hashes:         1: 473COPKd9olJMqE4kR25XOWDFnY.roa (hash: monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: FHjLChK3JX38NJMr3VhIHwkDz/B0vibxZZKtPV/+szE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:c2:74:31:7e:31:fc:74:41:78:bb:95:bf:af:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Mar 26 03:01:13 2026 GMT
            Not After : Mar 27 03:01:13 2026 GMT
        Subject: CN=e9342d922cb87248cdbf7a4f31f27bb72d3335d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:7e:7a:dc:db:66:04:65:8d:50:b9:49:ad:
                    6a:a3:e3:a2:14:32:5f:cc:30:2f:9e:a2:bf:f0:ee:
                    2e:5f:0e:aa:9f:ac:11:06:0b:f8:c4:72:c7:c4:28:
                    03:58:3e:7f:bc:91:71:9f:c1:d4:5c:f4:60:e5:d3:
                    c0:75:5c:18:3d:cb:4e:5d:d7:83:ac:62:10:cf:6a:
                    8b:f8:62:7b:97:8a:44:4a:3b:85:fd:4b:e0:d2:50:
                    f5:03:28:af:d0:d4:0b:27:00:d6:81:78:60:7b:b2:
                    64:ba:ae:c9:76:dc:02:52:de:c3:b9:10:52:01:cd:
                    98:97:b8:a1:85:f6:83:2a:7c:c6:41:20:fb:4c:c2:
                    de:4b:82:a0:1c:1b:d6:b3:69:fe:34:7c:31:2b:a6:
                    75:e0:59:c9:ff:22:03:e1:fb:a5:06:58:ab:b0:92:
                    26:e4:63:25:04:75:23:bc:e4:61:76:af:4d:09:47:
                    81:22:c8:cd:84:c9:06:5c:f5:24:cd:3c:aa:82:6e:
                    04:f3:70:3d:0f:38:3c:4b:8a:c1:0d:f5:3e:d8:38:
                    31:00:6c:a4:ed:cb:e5:64:da:7a:1e:f8:43:12:3d:
                    48:a1:0d:9b:95:27:19:e8:2f:39:ca:83:0e:0a:b6:
                    aa:84:a8:01:9c:ae:3a:01:4f:f0:09:cb:74:ba:e2:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:2D:92:2C:B8:72:48:CD:BF:7A:4F:31:F2:7B:B7:2D:33:35:D1
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:89:46:c9:a3:ff:48:78:82:7b:c3:e2:e4:b9:a1:21:2b:b4:
         1d:76:ba:46:61:12:e8:e9:8f:81:3e:5b:48:08:b4:1e:2f:22:
         8b:de:92:ff:7a:eb:13:2e:ca:8a:e6:69:46:19:05:7a:7e:14:
         ba:df:0b:db:99:02:fa:16:fa:ba:d6:b1:68:5a:ea:00:1a:27:
         0a:1c:4b:d9:c4:5d:71:d8:1a:0e:f0:f5:c1:23:fe:5d:f5:55:
         f0:b3:1e:49:69:a4:f0:77:7d:06:be:55:db:68:90:43:cb:1f:
         7e:57:8e:09:b5:54:7c:51:5a:cd:a7:21:55:22:42:a9:4b:3b:
         4e:e2:51:e1:e3:5e:48:1d:e4:2d:ec:d7:50:3e:d0:7a:5c:2a:
         dd:f8:39:69:99:9e:95:a8:c0:0c:b9:56:e6:e9:1b:6d:52:4a:
         61:23:73:e6:09:06:f2:db:8c:6b:ff:57:45:17:35:d2:3b:96:
         fc:90:4a:1c:1c:89:da:42:4e:ee:b3:db:9b:47:61:d0:ba:ef:
         a2:6c:91:1e:20:d1:e7:25:56:58:28:83:c9:fc:bf:53:70:7d:
         48:bd:ae:e0:d0:f4:dd:1e:dd:1b:0b:db:9b:b5:0e:58:f2:92:
         72:01:d8:4e:33:0e:df:4e:18:3c:f3:4b:4f:25:22:59:80:f4:
         c5:c9:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:22 2026 by rpki-client