Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          xvkRunC4hIJlLRxHysXkvI5G/57XJ+Sw9SfG/RlfDas=
Subject key identifier:   E5:8A:4A:3E:83:CC:3C:97:E8:96:9D:20:22:3D:C4:5B:4A:C7:D5:2A
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019D24DE7C705DCD1A835CF312A606EADC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          76
Signing time:             Wed 25 Mar 2026 12:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 12:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 12:00:53 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: gArdAQmzV6LJ0pdHhWRXFeJrDnQ6tBnzOt7QXs+02ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:de:7c:70:5d:cd:1a:83:5c:f3:12:a6:06:ea:dc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Mar 25 12:00:53 2026 GMT
            Not After : Mar 26 12:00:53 2026 GMT
        Subject: CN=e58a4a3e83cc3c97e8969d20223dc45b4ac7d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:de:1d:fe:94:a4:71:de:4a:f3:a2:9f:cf:
                    10:c3:39:27:37:11:b3:c3:91:1e:38:07:aa:a6:11:
                    b0:08:be:9e:f9:d8:1e:95:31:c2:28:4c:ab:d2:1f:
                    80:40:0f:d1:73:09:91:b4:96:8e:cd:3b:34:d2:69:
                    1d:77:29:75:53:2c:cc:f4:fd:8a:55:82:56:bf:bc:
                    a9:ee:95:92:bf:e8:00:c0:be:ba:e1:d5:36:c2:2d:
                    b4:f8:ba:19:1c:cb:75:23:3c:85:30:09:16:7b:fe:
                    25:aa:67:d6:0e:f9:7e:c6:d0:ff:f8:0e:21:08:f0:
                    df:68:a9:43:6d:7f:d1:30:e0:29:bf:8a:10:a0:9e:
                    8a:44:15:dc:8a:a9:d0:9c:0b:db:c8:33:c1:cd:ed:
                    8e:68:c1:0b:49:f5:2c:62:38:64:22:87:6f:50:e9:
                    34:64:21:ed:af:ea:f6:bf:92:8d:c0:f6:08:53:f4:
                    f5:47:c6:f3:c5:cd:7b:04:e0:cc:80:60:ea:be:3f:
                    27:a2:6b:a9:e5:e5:9a:26:6d:37:46:c2:a5:dc:bb:
                    9e:04:98:d3:b1:a6:13:6f:9e:96:b0:a0:f9:d4:ae:
                    da:75:2a:72:a5:71:40:e5:53:f4:14:cc:1c:c9:cd:
                    32:64:09:49:25:fc:76:ad:e0:b9:cf:6e:ef:56:fa:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:4A:3E:83:CC:3C:97:E8:96:9D:20:22:3D:C4:5B:4A:C7:D5:2A
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ac:a0:40:5d:34:d1:f6:6c:e1:8d:5a:d7:35:81:2a:6e:04:
         8d:94:02:6d:70:a9:05:dc:87:ed:46:15:dd:76:16:1d:c6:fc:
         d5:9f:f4:82:04:7b:c8:44:1a:02:76:d6:a2:8c:31:2a:2c:5a:
         5a:18:95:ed:52:c7:3c:88:dd:3a:a9:8a:cd:cd:78:6e:32:20:
         68:5f:9a:3e:39:c2:c8:65:39:c0:f9:b9:36:84:5d:e9:4d:50:
         cd:4e:4a:97:ee:aa:0c:f0:8b:32:e3:9c:58:6b:84:1d:2e:5c:
         e8:5e:b2:32:8f:e1:1f:54:43:c9:28:3e:af:38:61:df:bb:d0:
         f2:b5:9f:1e:25:91:6d:e3:84:bc:fb:41:a7:61:ea:27:37:52:
         54:73:be:ca:58:55:e4:a7:e5:8b:c2:70:3a:1a:f1:30:8f:e3:
         cc:16:2a:36:36:e0:45:ad:93:a0:e4:b0:a9:f0:2a:70:0f:fc:
         39:0c:5f:ad:94:b5:97:13:cc:ad:53:80:a2:ea:53:74:69:19:
         29:4c:8d:ed:bf:15:a9:38:35:41:54:ad:0d:23:a3:82:ae:5f:
         7e:84:05:bf:2c:74:ea:1f:b8:0b:06:57:a0:d1:0a:9d:47:46:
         73:d9:5c:7a:4a:ed:21:c1:2c:a5:b7:60:8b:fc:be:d2:f6:d7:
         f3:6f:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:34 2026 by rpki-client