Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File:                     rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier:          vVZn4d0lpXQHGAAZMoShoTxB9+cp9ms+FUqKaLObVms=
Subject key identifier:   8C:6A:BD:DF:FB:80:47:19:1A:CC:24:69:D2:31:B5:5C:7E:86:19:66
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer:       /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial:       019D2961689241A58BA1CBA3CD5DA240117C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number:          0C30
Signing time:             Thu 26 Mar 2026 09:02:22 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:22 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:22 +0000
Files and hashes:         1: mfv_sdF7JkrnlQLBP04nKDAckMY.roa (hash: buDLKj8SbGldH/UZVSAAKpuobU5YXqMLtN+FcDKjF3E=)
                          2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: jlJu41mXHBkzQlTv1jT2RzgZKQ352Q40k3uwzBErej8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:68:92:41:a5:8b:a1:cb:a3:cd:5d:a2:40:11:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
        Validity
            Not Before: Mar 26 09:02:22 2026 GMT
            Not After : Mar 27 09:02:22 2026 GMT
        Subject: CN=8c6abddffb8047191acc2469d231b55c7e861966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:59:c9:aa:29:88:65:d0:98:34:9a:84:78:
                    16:fb:4c:1e:9d:7f:53:44:71:34:98:53:2b:fa:39:
                    3e:33:10:88:f5:e6:b8:df:2a:a6:15:18:14:70:fc:
                    74:22:3f:5c:b7:68:1a:e6:97:f8:82:f7:b0:01:71:
                    0c:57:3a:f4:e9:d2:15:f1:db:c7:3a:26:87:30:43:
                    2b:72:a7:bf:3f:93:88:37:fe:1b:0c:21:57:be:c0:
                    7e:88:7b:a3:49:a6:ab:f4:6e:8c:60:c4:1a:62:d1:
                    6f:f7:04:d5:bc:a8:10:60:d4:66:11:48:70:39:fe:
                    6e:c5:29:1d:e4:48:2f:5b:42:ff:b2:e3:18:f9:cb:
                    eb:c1:b2:c7:87:48:dd:c0:ab:75:83:fb:8a:f0:91:
                    56:19:90:bb:3a:00:03:90:e9:28:82:09:dd:4d:81:
                    2a:fc:04:99:c8:95:af:1f:11:82:c9:8a:cd:4d:43:
                    28:c7:8d:19:cb:6a:6c:cd:9a:76:85:3e:60:fa:81:
                    58:40:8b:8e:14:84:3c:5f:c4:c4:ca:13:60:ac:31:
                    3a:ed:98:17:d7:60:56:b9:fb:46:f1:7f:3d:94:bc:
                    bd:79:0c:72:bc:ae:a9:b1:46:4b:00:a6:68:75:ea:
                    17:3f:2e:b3:21:54:92:f7:96:73:49:a7:a3:8f:1b:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:BD:DF:FB:80:47:19:1A:CC:24:69:D2:31:B5:5C:7E:86:19:66
            X509v3 Authority Key Identifier:
                keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:a5:71:89:13:f9:6a:94:e3:31:9e:3f:8f:d3:1c:b0:46:
         2f:17:41:10:93:ad:0b:c4:f5:43:25:e8:c3:9d:e8:30:14:7b:
         e2:f1:ef:ac:d0:4a:a2:bf:85:23:f8:a3:30:03:35:85:f2:83:
         3a:8a:dc:d4:cd:63:61:39:ee:9b:65:cd:06:76:d3:61:a6:41:
         11:d3:9b:8c:ea:cd:cb:58:0d:27:92:ae:5c:31:d1:b6:f5:80:
         95:f9:18:d3:15:f5:fd:b1:dc:0d:54:b9:a0:c5:cb:f7:f7:c2:
         85:fb:20:50:2f:aa:fb:63:90:66:3d:00:46:10:e5:5e:47:80:
         69:22:7b:b3:00:85:88:ea:4d:5f:1d:6e:3e:0d:fb:20:4b:60:
         a0:65:f4:45:da:e9:46:3c:6d:83:3f:d0:23:6f:e4:5d:96:d6:
         a6:39:f9:7a:e1:06:32:2d:d1:20:e2:28:74:c2:a0:f9:14:ea:
         4f:a0:05:7f:62:9c:a7:9a:01:ff:13:8a:7f:24:9b:f6:2f:bf:
         48:29:32:ee:c3:2d:b3:ab:4a:74:35:22:74:91:00:08:14:e2:
         3c:53:87:d5:b3:3c:54:a1:de:fe:0f:2e:12:dc:1a:12:f3:50:
         62:bc:0d:4e:5c:62:a8:e7:3e:bd:45:2d:c9:15:61:9b:f7:97:
         86:7c:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:35 2026 by rpki-client