Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
File:                     VdODtoo-r7MMJ7oMTGnworlQ3MU.mft (raw, json)
Hash identifier:          A3TBY1M5euvB4qkVBgC/4ozUaQPJOxm1jQK7Wr1RujU=
Subject key identifier:   6F:0A:6F:AF:16:EE:9E:46:F8:18:BD:78:86:4D:88:76:05:E6:E8:05
Authority key identifier: 55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5
Certificate issuer:       /CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
Certificate serial:       019D265F135A69C3B0FDD3E546EAD91399B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
Manifest number:          0208
Signing time:             Wed 25 Mar 2026 19:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:58 +0000
Files and hashes:         1: IAxvCVI3UPW5Zbx0MrtTutGSG6g.roa (hash: R+3F/4+eKMn101ut2yIlvIZIHHLS0pZUHBZ5ScNEy3g=)
                          2: VdODtoo-r7MMJ7oMTGnworlQ3MU.crl (hash: Eipw4cLB6JKKUZtXoCUT4PVfGjfCXfh2wWAIsgzOOqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:13:5a:69:c3:b0:fd:d3:e5:46:ea:d9:13:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
        Validity
            Not Before: Mar 25 19:00:58 2026 GMT
            Not After : Mar 26 19:00:58 2026 GMT
        Subject: CN=6f0a6faf16ee9e46f818bd78864d887605e6e805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:33:82:7e:f1:75:df:fc:39:7a:ca:01:2b:
                    41:e3:a5:ca:58:ee:89:d5:16:04:aa:93:7c:fd:d7:
                    3f:f2:a0:4a:d9:7d:0e:ce:93:c5:f2:75:f6:fa:a3:
                    64:c1:25:da:e7:74:45:d5:09:36:ca:40:4a:dd:19:
                    98:e3:af:96:9f:02:9a:98:a3:13:de:b5:9d:56:9b:
                    ea:fd:da:cb:ea:cd:2b:10:ea:74:1f:58:8b:27:a6:
                    56:62:de:39:c5:b9:b3:58:fa:7a:36:73:d4:53:1d:
                    be:3b:5d:ce:08:e0:82:5a:08:05:f2:c9:cb:20:66:
                    dd:3b:0c:4e:11:8d:be:19:3f:59:a4:bb:18:39:fb:
                    e7:ae:85:54:74:6e:ed:bc:d8:47:d3:8a:57:f7:5e:
                    88:66:37:e0:bd:9a:01:4c:c5:45:32:a8:f4:d4:47:
                    8e:49:5b:60:6a:c5:17:53:55:16:96:cc:f1:eb:25:
                    f6:f4:3f:67:78:f3:e0:f4:42:26:87:1e:7c:33:71:
                    cb:61:d1:e3:a2:67:17:2b:d6:4b:73:a1:63:40:68:
                    0f:8d:4a:d6:d9:cd:86:1e:84:05:88:5f:8d:93:28:
                    ff:37:80:da:78:e6:50:2c:1c:5b:01:1b:2e:a4:6a:
                    85:47:7c:b0:2d:2a:25:ec:9b:36:3c:5f:c5:19:30:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:6F:AF:16:EE:9E:46:F8:18:BD:78:86:4D:88:76:05:E6:E8:05
            X509v3 Authority Key Identifier:
                keyid:55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:8b:4b:be:3c:58:cf:88:bf:46:f9:66:79:b4:71:d5:99:
         b0:88:9d:ff:34:46:bd:2a:0c:52:ea:ed:71:bf:6f:d5:18:0e:
         ce:4c:de:b5:11:20:ad:dd:1c:c0:b7:4c:ce:8a:8e:97:48:30:
         ce:6c:70:a5:8e:09:4c:fc:dd:60:6a:f6:74:07:50:d9:3a:97:
         e2:d1:80:ef:af:a7:00:2b:40:d2:3d:29:5a:2d:ce:a9:00:4f:
         6d:df:9d:df:0a:ce:a4:36:8b:ad:f0:0e:6a:27:42:01:28:61:
         6d:24:75:81:bf:45:d1:04:05:91:b6:cc:41:e2:56:b5:6d:d9:
         72:86:31:52:ea:f5:cf:75:dc:d0:5e:5e:ab:7b:40:f5:84:4c:
         60:78:1c:ef:31:6c:a5:32:b0:76:53:1e:fb:9d:0c:79:79:3f:
         6e:e5:d5:28:25:ea:15:ee:ab:30:6f:6c:a2:e2:83:8f:34:d4:
         59:f6:ec:d9:e5:d2:2d:73:c2:57:fa:b4:eb:50:16:f8:5c:f7:
         66:04:98:2f:f5:0d:a8:ba:91:9a:dc:d2:e0:91:4e:5d:38:7a:
         76:51:12:80:29:79:54:91:e3:d4:94:b6:dc:80:77:ed:a2:a4:
         81:ee:e9:28:8e:96:49:63:12:ef:65:d6:fd:f6:8f:a3:d9:63:
         1b:ca:42:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxNaacOw/dPlRurZE5m4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDM4M2I2OGEzZWFmYjMwYzI3YmEwYzRjNjlmMGEyYjk1
MGRjYzUwHhcNMjYwMzI1MTkwMDU4WhcNMjYwMzI2MTkwMDU4WjAzMTEwLwYDVQQD
Eyg2ZjBhNmZhZjE2ZWU5ZTQ2ZjgxOGJkNzg4NjRkODg3NjA1ZTZlODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjIzgn7xdd/8OXrKAStB46XKWO6J
1RYEqpN8/dc/8qBK2X0OzpPF8nX2+qNkwSXa53RF1Qk2ykBK3RmY46+WnwKamKMT
3rWdVpvq/drL6s0rEOp0H1iLJ6ZWYt45xbmzWPp6NnPUUx2+O13OCOCCWggF8snL
IGbdOwxOEY2+GT9ZpLsYOfvnroVUdG7tvNhH04pX916IZjfgvZoBTMVFMqj01EeO
SVtgasUXU1UWlszx6yX29D9nePPg9EImhx58M3HLYdHjomcXK9ZLc6FjQGgPjUrW
2c2GHoQFiF+Nkyj/N4DaeOZQLBxbARsupGqFR3ywLSol7Js2PF/FGTB3+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8Kb68W7p5G+Bi9eIZNiHYF5ugFMB8GA1UdIwQY
MBaAFFXTg7aKPq+zDCe6DExp8KK5UNzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAt
MGYwZmMzNTM0N2ZmLzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAtMGYwZmMzNTM0N2Zm
LzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtCLS748
WM+Iv0b5Znm0cdWZsIid/zRGvSoMUurtcb9v1RgOzkzetREgrd0cwLdMzoqOl0gw
zmxwpY4JTPzdYGr2dAdQ2TqX4tGA76+nACtA0j0pWi3OqQBPbd+d3wrOpDaLrfAO
aidCAShhbSR1gb9F0QQFkbbMQeJWtW3ZcoYxUur1z3Xc0F5eq3tA9YRMYHgc7zFs
pTKwdlMe+50MeXk/buXVKCXqFe6rMG9souKDjzTUWfbs2eXSLXPCV/q061AW+Fz3
ZgSYL/UNqLqRmtzS4JFOXTh6dlESgCl5VJHj1JS23IB37aKkge7pKI6WSWMS72XW
/faPo9ljG8pCgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:22 2026 by rpki-client