Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          5dhFmlEmexdlXq5rXHg2EhU8TfZlQYEyBKFxTgeq10Y=
Subject key identifier:   91:59:BA:9F:8C:7B:CB:07:94:AE:39:EC:37:1C:C1:44:C3:23:91:B9
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       019D2772BE646E524A0628278779553F16C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          16A4
Signing time:             Thu 26 Mar 2026 00:02:04 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:04 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:04 +0000
Files and hashes:         1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
                          2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
                          3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
                          4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
                          5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: BXRMlWr5I4WOy7pmfSGUrjX2nwBXtljRn5sF3W/SNiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:be:64:6e:52:4a:06:28:27:87:79:55:3f:16:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Mar 26 00:02:04 2026 GMT
            Not After : Mar 27 00:02:04 2026 GMT
        Subject: CN=9159ba9f8c7bcb0794ae39ec371cc144c32391b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:ad:4d:7a:5f:ac:fb:59:0b:f8:24:60:40:
                    04:c6:ff:dd:1b:56:60:15:1d:95:87:70:ab:2f:33:
                    58:61:a4:d3:c4:0b:c6:78:43:5d:54:a3:4d:77:db:
                    bc:f9:eb:8c:76:2c:9f:21:19:dd:c0:de:78:64:bc:
                    b9:e9:82:d0:f7:c6:70:93:0d:a9:28:2f:2c:5b:be:
                    6a:ee:a2:ae:28:20:bd:55:6b:95:ec:c4:2c:81:cb:
                    ed:41:2d:00:21:2a:bb:82:ee:46:c3:43:60:93:41:
                    06:7c:6a:a2:f5:aa:6a:e0:97:95:b6:ed:30:3a:64:
                    e3:fa:d9:94:b3:7b:df:00:83:f4:02:68:df:1f:f6:
                    08:b0:67:b4:99:35:16:79:87:4b:26:0f:22:a9:9c:
                    fe:14:18:65:8f:2c:15:57:dc:dd:8a:d7:1e:59:5e:
                    ad:85:2e:49:b8:c1:18:81:74:3a:79:98:41:74:66:
                    9d:ca:ef:60:42:92:7f:21:3b:51:79:4a:fc:9f:d8:
                    e3:82:9c:53:fd:a9:72:fb:8c:5a:30:6e:1b:d4:e1:
                    cb:37:e2:0f:67:96:2b:a8:fa:ee:85:4d:d9:54:4c:
                    aa:16:84:9f:99:30:82:bb:85:e6:7c:6d:8d:cc:09:
                    4e:2f:35:be:00:d5:fb:66:9c:ec:03:e0:df:87:0c:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:BA:9F:8C:7B:CB:07:94:AE:39:EC:37:1C:C1:44:C3:23:91:B9
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:fd:4c:db:b0:50:24:58:b1:6f:79:22:79:e0:b8:5b:d3:
         51:f0:4a:87:d8:ad:b4:2e:5a:a5:fe:6e:06:2a:48:08:4d:15:
         75:9b:cb:1d:8c:11:77:d6:ef:1e:04:99:9d:8c:fb:71:10:ba:
         b7:0a:1a:fa:9a:af:d5:e7:98:28:99:18:ad:c4:26:0d:14:9d:
         ba:9c:89:5a:e8:f7:55:61:fa:5b:f2:cc:0d:43:8a:66:21:36:
         cd:4e:a5:b5:b5:2d:05:05:4f:2f:7c:d3:68:8b:b9:f5:27:d4:
         db:44:05:ea:10:3d:e9:0c:02:3b:4b:18:b4:60:73:d7:3b:a4:
         dc:8f:59:97:73:78:a6:a9:9c:22:9c:30:83:f6:d6:bf:95:04:
         c9:a0:bf:eb:9a:13:c8:06:4e:34:22:f7:58:22:28:3d:9e:d9:
         17:5d:a6:33:b7:0c:1f:57:2d:b8:02:48:cf:81:a9:c4:53:ed:
         62:f9:a1:1a:e0:0b:fa:92:cc:24:d2:80:0c:41:5f:dd:37:2a:
         aa:e3:fa:cf:54:db:98:09:53:45:f0:8b:c8:dc:70:9a:b8:c3:
         37:fa:eb:c0:ce:5a:67:a0:db:de:3b:f8:64:26:63:b3:8c:fa:
         9d:40:fd:c5:99:c8:8a:e6:23:eb:27:15:bb:6b:ae:79:0a:ef:
         45:ac:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:48 2026 by rpki-client