Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          ozBHSLZZGbB/B+R9OdVmvcndFXmdFxnXZ64ewyhQyvo=
Subject key identifier:   C3:16:AF:62:44:84:45:0A:09:F6:55:7F:A4:40:11:99:5B:C1:D8:6C
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       019D26CCFBFA0BBC7092B718223D80A9A084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          10AF
Signing time:             Wed 25 Mar 2026 21:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:01 +0000
Files and hashes:         1: 75GtR8MU0hokzNxKXIWlMPnolv0.roa (hash: Fey2h9ggN57tWJ2x6VzuQ69CSI5bRiEMaqNk0Q05Fuk=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: lJJQBFQwMJTtjQ5iDdtXr9VUR6y518bPSNavwPcVbH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:fb:fa:0b:bc:70:92:b7:18:22:3d:80:a9:a0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: Mar 25 21:01:01 2026 GMT
            Not After : Mar 26 21:01:01 2026 GMT
        Subject: CN=c316af624484450a09f6557fa44011995bc1d86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:69:a0:47:e9:ef:33:df:21:a1:6c:d7:27:
                    67:89:1b:ed:23:57:c3:67:51:e8:9d:f4:68:1c:bb:
                    a4:af:18:e6:cd:bb:52:58:05:89:d7:82:a0:e1:bb:
                    b4:37:8a:e9:4a:c6:73:81:4d:c3:c9:aa:f0:b4:f1:
                    13:83:91:ff:55:4d:04:16:9a:0e:db:56:de:c1:56:
                    c2:f7:bc:ea:35:93:60:a8:ba:18:ab:80:99:06:b5:
                    28:cc:16:17:e5:b2:f8:3f:bc:0a:8d:a3:f0:7a:6b:
                    95:42:dd:43:92:63:bf:c3:91:44:91:fa:96:7f:3f:
                    e4:b1:af:18:dd:a6:be:2f:d5:cc:81:01:7c:a6:97:
                    9f:6b:5a:5e:09:8d:23:f2:13:97:8f:bd:d7:e4:9d:
                    86:ae:df:0b:b7:a3:0d:76:15:73:2d:d4:d9:13:c5:
                    55:df:cc:69:be:3a:07:76:55:05:98:08:5c:01:5e:
                    9f:0c:57:e2:d0:f7:aa:f8:77:e1:76:4d:84:4c:a1:
                    12:d3:65:50:6e:11:2c:df:d9:67:16:69:5a:33:c4:
                    9f:4f:5c:5a:5e:5a:7e:f9:88:a1:00:8a:e2:65:5c:
                    65:a1:92:aa:2e:15:71:0e:8c:6d:0d:93:fe:fc:05:
                    91:81:26:f6:32:dc:b7:37:67:64:8d:d3:28:2d:13:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:AF:62:44:84:45:0A:09:F6:55:7F:A4:40:11:99:5B:C1:D8:6C
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:44:db:aa:0d:54:35:9c:66:ea:12:c6:ed:cc:bf:d0:dd:
         ad:e0:94:0b:61:c8:44:de:fa:cf:c8:12:06:29:16:d4:06:8b:
         f3:b8:8a:79:f5:cd:aa:00:2b:ae:19:1a:41:ad:e1:58:c8:e7:
         bd:8c:31:7a:d1:b4:77:1d:95:90:ea:26:48:79:03:9f:99:f4:
         d3:7d:6c:e2:06:fd:ee:ee:af:0d:28:10:c2:f8:e7:08:73:28:
         c2:9b:78:92:17:e0:17:47:21:ad:bf:b9:db:69:e2:53:d5:ca:
         f8:fb:b0:2f:b4:18:bd:2d:94:e1:66:0d:46:00:38:91:ba:0b:
         5f:bb:65:38:d1:f7:ab:37:cd:0c:91:a1:b3:2f:37:90:41:ba:
         5b:0c:19:40:ca:09:81:80:e2:e7:e1:a6:25:f5:0b:6c:f9:ad:
         74:4e:c3:58:a8:3e:07:51:7a:01:98:49:09:30:43:d8:aa:8c:
         6c:4f:33:68:17:33:1d:a2:67:70:f3:77:fe:e5:2d:63:a8:d5:
         10:ed:f2:62:84:e3:4e:9d:fb:8a:b0:a7:4b:1d:88:22:e1:d3:
         42:c2:61:ef:84:5e:7e:14:7d:ed:07:75:e1:58:22:ed:54:b6:
         53:a7:a8:0b:a2:09:00:ac:34:48:0e:b8:d8:84:05:f6:56:44:
         c8:a7:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:26 2026 by rpki-client