Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
File:                     vlSo6uJa4PaLNFLEaF2UOefRxf0.mft (raw, json)
Hash identifier:          ZnzRTl4bju/R1eWWb/s7G8gQbYVF6qjH2LbKaQQz/xU=
Subject key identifier:   E1:AC:C2:81:B5:4C:CE:61:5E:2B:5F:9B:D3:13:14:B5:FD:8D:49:AF
Authority key identifier: BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD
Certificate issuer:       /CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
Certificate serial:       019D29294F6632C8B2B23D54DAD0B5562783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
Manifest number:          016E
Signing time:             Thu 26 Mar 2026 08:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:06 +0000
Files and hashes:         1: _PItdQNrcNm4PTVCBKFfHD-HVBk.roa (hash: 00+ux3tcX9ZjPok2cc22xATkEP1ejAcZkRKoEuUA304=)
                          2: vlSo6uJa4PaLNFLEaF2UOefRxf0.crl (hash: 3zqWaOR/6YWGq5tgzHpEQJQ5Y76hM8NI/nzP4VNd6nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:4f:66:32:c8:b2:b2:3d:54:da:d0:b5:56:27:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
        Validity
            Not Before: Mar 26 08:01:06 2026 GMT
            Not After : Mar 27 08:01:06 2026 GMT
        Subject: CN=e1acc281b54cce615e2b5f9bd31314b5fd8d49af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f4:32:ba:2c:c3:6a:14:6d:f8:7d:40:c6:45:
                    f5:f5:77:5a:0a:ba:15:dd:95:b0:b0:e9:93:2f:19:
                    f1:81:5f:17:8a:1a:2b:9b:7d:a0:ee:da:cc:7e:fd:
                    fe:33:91:b4:c4:69:8d:94:fa:7b:53:0f:77:f4:30:
                    ae:d2:e2:81:fe:bb:a4:22:7f:5c:31:7e:98:0d:af:
                    2c:a5:06:6c:29:a4:94:80:74:78:d3:36:b9:fd:5b:
                    4b:f0:5c:52:bd:72:a5:6a:b2:29:a3:ab:93:5d:8b:
                    ab:e4:2b:4d:ed:56:39:18:69:be:dd:83:1c:34:90:
                    76:9d:f9:95:2c:89:00:79:0c:6e:80:0e:67:68:4e:
                    bb:b4:d8:b2:e8:18:dc:e7:8f:b8:c2:a3:d6:8f:14:
                    ee:10:e3:b9:b0:22:f4:2d:01:bc:fa:90:36:7a:81:
                    86:bd:f4:6d:2f:8c:c3:a5:a9:c6:e7:ab:37:ed:3e:
                    8f:b3:3e:e3:a5:ad:ec:41:50:1f:bb:bd:d3:ff:a6:
                    af:f2:bf:17:da:83:c4:57:cc:1c:95:b2:98:b0:c8:
                    78:d2:bb:c2:3e:ee:91:f5:e3:83:95:9d:d6:8b:cd:
                    87:1e:42:83:ea:b4:a8:05:6b:9c:70:33:09:9b:ec:
                    a9:50:e3:80:c7:24:c6:1e:94:ea:bf:1f:d2:ee:92:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AC:C2:81:B5:4C:CE:61:5E:2B:5F:9B:D3:13:14:B5:FD:8D:49:AF
            X509v3 Authority Key Identifier:
                keyid:BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:5d:6c:8a:c4:9f:46:41:68:fb:c5:b7:be:93:23:a1:09:
         4f:b6:96:b3:c6:13:9c:c3:86:2f:b3:86:ea:68:a5:48:3d:40:
         f2:c3:89:89:62:04:9a:8e:2c:bb:23:a3:ac:ef:d2:d1:55:92:
         92:e0:55:c8:c7:7a:ad:40:40:d7:33:65:b3:72:1c:47:8e:30:
         bf:da:bb:f6:2f:f8:23:e2:57:09:5f:9f:54:c9:c5:77:bc:8e:
         e0:ae:7d:a9:66:e8:cb:0a:4f:63:b6:27:67:16:cd:c3:2e:37:
         e3:2a:06:e4:76:0b:2e:27:18:ef:88:81:7c:b6:d8:ae:83:fc:
         95:3e:7d:2a:79:aa:9a:09:a8:e7:92:bc:d0:14:bc:fe:ec:03:
         12:f4:ab:f1:08:a2:13:70:f3:d5:79:b6:8d:06:00:1f:9a:ef:
         bd:84:b5:be:8e:78:34:9e:20:36:57:70:c2:b3:3f:75:da:bf:
         4d:9f:84:1f:4b:d0:74:0e:8e:05:29:53:a4:58:72:b2:da:4d:
         73:64:74:2b:b3:ed:5c:21:05:78:66:11:2f:a8:be:24:d5:af:
         91:27:d2:23:2e:a5:ff:4d:af:38:2e:2f:6c:8e:35:42:37:d4:
         69:f8:b8:39:82:dc:ca:95:f6:b3:f6:32:93:c0:0e:1f:c0:a9:
         26:65:92:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKU9mMsiysj1U2tC1VieDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTRhOGVhZTI1YWUwZjY4YjM0NTJjNDY4NWQ5NDM5ZTdk
MWM1ZmQwHhcNMjYwMzI2MDgwMTA2WhcNMjYwMzI3MDgwMTA2WjAzMTEwLwYDVQQD
EyhlMWFjYzI4MWI1NGNjZTYxNWUyYjVmOWJkMzEzMTRiNWZkOGQ0OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fQyuizDahRt+H1AxkX19XdaCroV
3ZWwsOmTLxnxgV8Xihorm32g7trMfv3+M5G0xGmNlPp7Uw939DCu0uKB/rukIn9c
MX6YDa8spQZsKaSUgHR40za5/VtL8FxSvXKlarIpo6uTXYur5CtN7VY5GGm+3YMc
NJB2nfmVLIkAeQxugA5naE67tNiy6Bjc54+4wqPWjxTuEOO5sCL0LQG8+pA2eoGG
vfRtL4zDpanG56s37T6Psz7jpa3sQVAfu73T/6av8r8X2oPEV8wclbKYsMh40rvC
Pu6R9eODlZ3Wi82HHkKD6rSoBWuccDMJm+ypUOOAxyTGHpTqvx/S7pKgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGswoG1TM5hXitfm9MTFLX9jUmvMB8GA1UdIwQY
MBaAFL5UqOriWuD2izRSxGhdlDnn0cX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYt
MTJiZjkwZTNkZTQ3LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYtMTJiZjkwZTNkZTQ3
LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7pdbIrE
n0ZBaPvFt76TI6EJT7aWs8YTnMOGL7OG6milSD1A8sOJiWIEmo4suyOjrO/S0VWS
kuBVyMd6rUBA1zNls3IcR44wv9q79i/4I+JXCV+fVMnFd7yO4K59qWboywpPY7Yn
ZxbNwy434yoG5HYLLicY74iBfLbYroP8lT59Knmqmgmo55K80BS8/uwDEvSr8Qii
E3Dz1Xm2jQYAH5rvvYS1vo54NJ4gNldwwrM/ddq/TZ+EH0vQdA6OBSlTpFhystpN
c2R0K7PtXCEFeGYRL6i+JNWvkSfSIy6l/02vOC4vbI41QjfUafi4OYLcypX2s/Yy
k8AOH8CpJmWSYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:50 2026 by rpki-client