Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          QKUfUp+zPcYCTLZSJihPnCeCPNGqLot+REquE+effjU=
Subject key identifier:   88:3A:05:43:0C:52:50:2D:E3:09:E0:92:AA:B6:AD:D5:BD:B8:01:AE
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019D25F207FBC2F411DE81670451052D2758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          160A
Signing time:             Wed 25 Mar 2026 17:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:51 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:51 +0000
Files and hashes:         1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
                          2: 10rcPrImsu8PZEdla8aGpqVO6qU.roa (hash: L3JiXE1iCTndxNrL5q/bo9206BV+caOYpXrLh1CtuNU=)
                          3: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
                          4: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
                          5: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
                          6: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
                          7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
                          8: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
                          9: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
                          10: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
                          11: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
                          12: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=)
                          13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
                          14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
                          15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
                          16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
                          17: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=)
                          18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=)
                          19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
                          20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
                          21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: fvUGT9iwEOS4DEXzxS0qUGfAOt8wQFzfoYg39qCbmnI=)
                          22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f2:07:fb:c2:f4:11:de:81:67:04:51:05:2d:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Mar 25 17:01:51 2026 GMT
            Not After : Mar 26 17:01:51 2026 GMT
        Subject: CN=883a05430c52502de309e092aab6add5bdb801ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:3c:f7:42:e3:14:f4:c5:d4:73:50:7e:94:
                    87:d1:0f:11:5d:89:5e:4b:09:04:33:25:27:07:e6:
                    3c:33:3f:bd:f1:95:fa:ab:02:5c:0f:68:32:eb:52:
                    77:f6:b7:cf:24:76:f2:1f:29:8e:13:ef:92:d2:fa:
                    84:33:d0:18:ac:92:d8:f1:82:eb:3e:aa:48:fe:9b:
                    85:76:53:8a:1a:11:99:f9:99:43:f9:a0:be:4e:f5:
                    dd:d7:08:df:d3:a3:9a:77:0f:5a:96:5f:1f:e1:7d:
                    49:ed:db:4a:6f:5d:c8:5a:c0:e6:33:cc:9c:30:ab:
                    73:11:9b:7b:bf:a6:4d:cd:6d:00:9e:29:0c:e1:c2:
                    3f:23:db:7e:7c:e6:5b:47:49:c0:b5:79:d0:c0:80:
                    56:40:45:99:cf:9a:12:fd:e6:83:47:18:2c:45:e7:
                    7c:46:a3:47:da:85:dd:0b:16:1b:c3:18:1e:f3:b4:
                    47:45:dc:05:4a:b4:7c:a2:86:84:1c:3d:01:78:31:
                    35:c7:ad:b2:f7:45:1e:87:f4:6c:6a:91:70:4f:68:
                    0d:3b:0a:8e:01:87:d0:f2:2f:8f:36:6b:6d:e6:27:
                    a7:6e:64:d8:07:c6:a0:4a:4d:30:9e:e1:ec:4a:ff:
                    38:bc:19:af:9a:96:83:31:4b:44:57:e6:e1:b7:cf:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:05:43:0C:52:50:2D:E3:09:E0:92:AA:B6:AD:D5:BD:B8:01:AE
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:44:c0:2b:54:58:98:0e:d1:0c:2e:12:5e:69:66:2e:cd:83:
         ba:f5:c6:5f:e5:b4:7f:fc:5b:18:da:51:2b:ce:ee:54:af:bb:
         07:15:76:80:65:5b:34:9c:b9:34:ad:b1:f3:88:df:41:2b:36:
         e9:87:d4:be:a5:8b:f4:04:15:61:d6:44:84:84:12:47:7e:85:
         90:c3:03:24:ec:b6:1e:10:31:ac:c6:cf:54:86:44:d8:7d:c1:
         b0:8d:5a:87:f6:f5:ff:df:9d:59:62:c6:18:b8:38:61:cc:da:
         d9:52:54:d8:b2:d8:b5:6b:8b:5b:0d:d1:60:99:71:87:72:dc:
         6b:0c:16:a6:09:5f:5d:01:95:f0:88:10:f6:bf:5b:e8:c1:4b:
         b8:de:70:78:d7:2c:8e:18:ca:d8:9a:4d:7d:33:06:40:5d:49:
         fe:e5:81:45:d0:eb:19:14:a9:f0:8d:ed:00:3a:66:79:7d:fb:
         70:81:ce:90:6c:e9:36:04:70:36:97:e8:99:09:3e:4d:bf:c0:
         11:3d:3f:22:1a:9a:4f:42:4a:c8:b6:0e:b7:29:d9:05:00:38:
         17:90:d2:75:a3:be:f1:5a:ab:98:2b:51:ee:d9:36:76:68:1d:
         05:56:2a:17:2d:81:21:fd:4b:54:26:46:9e:8c:99:d5:e5:e8:
         34:97:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:34 2026 by rpki-client