Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File:                     _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier:          Jli+amFVAad0yEVmRCaIvxb0kdHJp2p+gHKpjJ2PEBY=
Subject key identifier:   13:C0:85:F4:4B:54:2E:6D:0A:D2:47:D1:CC:2B:75:EF:3A:52:93:6C
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer:       /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial:       019D27DF723778FCD61243FA77A39B15913D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number:          0B85
Signing time:             Thu 26 Mar 2026 02:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:48 +0000
Files and hashes:         1: FjNtau_2C7-IteTYIoQTiESBcVg.roa (hash: SON6ioGxRvj1OfUX9ytmsl2A9Mp6k9lzhCA/d2PBUSY=)
                          2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: 5VDTTjk2EUivJMJQpC9GtNUJymNrhSYUbOb2+tKU1VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:72:37:78:fc:d6:12:43:fa:77:a3:9b:15:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
        Validity
            Not Before: Mar 26 02:00:48 2026 GMT
            Not After : Mar 27 02:00:48 2026 GMT
        Subject: CN=13c085f44b542e6d0ad247d1cc2b75ef3a52936c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:0e:bc:0d:6c:b6:40:d6:16:11:2f:f5:a1:
                    be:e4:d8:61:b5:1c:39:d5:42:dc:eb:fc:c2:92:98:
                    66:dd:0f:6a:46:c0:0c:40:34:b5:24:69:4e:2f:fd:
                    fa:f6:36:cc:14:5d:53:07:31:44:e3:e5:e5:83:82:
                    ba:a1:d0:9c:4a:6d:5f:2a:e9:0c:75:d2:4e:91:4d:
                    ec:79:38:55:86:a2:d4:5b:79:45:52:b5:85:d5:73:
                    d2:a3:2a:3c:a6:0a:41:72:3f:31:28:28:98:5a:ce:
                    54:66:55:f6:42:2a:54:1a:90:c2:ab:25:39:48:9f:
                    4c:ca:2a:63:b3:9e:98:c6:9b:04:92:46:43:d6:6c:
                    38:28:4e:8f:d9:21:af:7e:3a:3b:f5:fd:96:43:0b:
                    d0:c9:15:bb:a8:0e:2f:58:ae:64:5d:35:6c:6b:c3:
                    56:c1:83:e9:f8:a5:fd:3b:01:fa:45:bc:e9:78:45:
                    d8:2f:92:dd:9d:8e:69:9d:4b:4a:6c:70:70:62:2d:
                    a1:a9:1b:38:28:47:ba:83:a9:f2:c1:2a:d5:fc:af:
                    64:2a:5f:15:af:6b:42:ca:2f:cc:14:ab:c9:1a:6b:
                    94:29:60:66:98:e7:cd:f0:ea:fb:ac:70:17:ef:c0:
                    bb:95:0c:9e:94:9a:62:24:4a:e3:6c:93:61:5f:fd:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:85:F4:4B:54:2E:6D:0A:D2:47:D1:CC:2B:75:EF:3A:52:93:6C
            X509v3 Authority Key Identifier:
                keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:08:29:4d:4f:60:a3:59:f2:c5:7b:fc:28:d2:e7:7a:0b:24:
         0a:98:07:8c:2b:a9:35:a5:a7:ac:75:27:ac:5f:cb:30:f2:d1:
         3d:04:9e:d9:ab:89:87:40:6b:a3:2c:a8:bc:16:38:05:fc:37:
         41:f9:df:5f:e6:09:22:6d:a7:2c:aa:bc:8a:93:8e:57:27:0c:
         1c:8f:d6:eb:0f:98:ae:43:6a:0e:2c:3a:a1:f2:8f:bf:fd:10:
         8b:a7:74:90:bd:b0:6d:19:35:38:0f:66:1d:7c:b3:91:32:50:
         23:38:26:bc:77:93:f9:ad:f1:9c:16:78:f3:0e:cb:ac:ae:11:
         47:9c:5a:98:15:bb:bb:aa:62:81:03:3e:e4:32:4b:ac:1e:02:
         13:9f:0b:10:d0:3f:ee:db:f6:5d:97:e9:d6:96:b2:f8:d7:e4:
         47:3b:18:9d:32:b2:25:35:86:90:e3:4f:5d:65:ab:e6:95:54:
         a2:97:04:87:50:8f:c0:45:42:a5:f1:8e:cf:15:00:79:32:5c:
         f9:5e:54:06:c9:ba:bf:53:27:6f:21:8a:71:15:98:cd:f3:48:
         75:38:48:f8:01:b5:63:9f:66:c4:08:7f:9e:67:1b:89:1f:44:
         99:a4:07:65:8d:e5:52:f8:b9:76:e3:03:d7:3a:fe:c1:12:d6:
         7d:1a:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:41 2026 by rpki-client