Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          wFNHyhHCwAJDsdZOleSYaTG26iu6LrdRFXfToVw5aZU=
Subject key identifier:   74:A3:F7:3F:3C:E2:50:7B:8F:30:B9:55:D3:E3:3C:5B:48:7A:BB:1A
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       019CC9ACE9544F3EFA0F20AD1FD4636381C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          8E
Signing time:             Sat 07 Mar 2026 19:01:18 +0000
Manifest this update:     Sat 07 Mar 2026 19:01:18 +0000
Manifest next update:     Sun 08 Mar 2026 19:01:18 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: 8M4d0TVwl5VegfxstbT97/Dg6W1VnNj7/BRGOpMHMEY=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:ac:e9:54:4f:3e:fa:0f:20:ad:1f:d4:63:63:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Mar  7 19:01:18 2026 GMT
            Not After : Mar  8 19:01:18 2026 GMT
        Subject: CN=74a3f73f3ce2507b8f30b955d3e33c5b487abb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:e0:de:0f:98:b7:0d:4b:38:b9:6b:c5:16:
                    c3:01:e4:85:33:df:0d:cf:18:b6:9d:c9:9c:aa:94:
                    76:dd:17:4c:a4:ff:95:8b:b8:06:b3:dc:c0:18:6c:
                    c9:01:46:49:99:9f:d0:e3:87:d4:bf:45:7c:b7:05:
                    67:ab:4c:c0:21:86:2e:6f:32:e8:cf:b3:3f:9c:f0:
                    4c:f3:68:28:8c:d3:a7:0a:49:79:24:cd:c7:0a:8d:
                    97:1c:25:6b:30:b6:b2:28:fd:a5:9a:e7:6e:45:6e:
                    80:69:2d:b1:60:44:df:8f:fe:e8:da:b4:a3:41:dc:
                    e0:a6:53:53:63:3a:24:91:2c:bb:12:72:d8:0f:06:
                    ff:7c:f3:ad:0f:4f:6a:99:b8:0c:d1:d6:b3:b1:3b:
                    46:20:10:61:e1:eb:7c:17:2e:68:d9:8a:28:da:ea:
                    ed:88:74:f7:bb:94:cc:59:58:95:4f:54:a8:a1:7d:
                    81:3c:03:9b:16:05:67:54:58:5e:56:04:69:5d:f4:
                    e3:18:99:46:f4:d0:05:cf:b1:74:82:88:d5:f6:3b:
                    d9:07:9e:47:42:76:7c:e2:3f:d6:36:d2:3f:41:f2:
                    90:a3:c2:98:14:ea:89:3f:23:46:fa:ee:f6:4e:86:
                    a1:3b:56:7b:e2:da:f4:18:af:87:4e:3f:d9:a3:b6:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:F7:3F:3C:E2:50:7B:8F:30:B9:55:D3:E3:3C:5B:48:7A:BB:1A
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:33:f4:2f:62:48:60:80:6f:89:19:33:01:81:ea:9e:be:ca:
         68:bb:26:c5:a6:91:cb:2f:40:9b:64:04:37:1e:dc:1b:34:a1:
         40:0a:1d:6c:60:0f:bf:ad:21:f6:3b:19:ba:3f:92:c6:10:4c:
         47:17:de:4f:7b:8e:17:3b:60:bd:50:fb:56:31:49:d8:69:4b:
         72:75:9d:f1:1c:fe:42:d8:88:39:ef:96:18:8a:20:d9:c8:f1:
         24:57:10:42:25:42:d1:9c:e5:1b:15:7c:67:da:a1:2f:63:66:
         1a:17:39:d0:cd:8d:49:ce:fe:fe:3c:fc:b5:c3:e0:e3:54:40:
         f9:93:5b:77:b5:2b:81:ff:02:04:00:c0:72:de:cb:39:a4:fe:
         00:03:66:1a:ba:4a:bb:0e:d3:49:05:dd:6c:5b:e6:c4:38:73:
         3a:c8:2d:a2:72:f2:f7:e1:23:ad:95:39:b6:c1:b1:13:df:92:
         f9:59:b3:96:30:aa:bf:88:79:e5:8b:0f:a5:c4:2e:26:6f:b4:
         da:e8:d4:06:8b:1a:94:ec:b3:a0:a7:3a:a4:60:1c:1a:ea:e3:
         8f:6f:93:28:07:d6:58:ba:4f:a6:9f:3d:bb:c7:52:bd:b1:8a:
         6e:96:d4:4d:1b:66:87:f9:e5:6b:41:3f:7f:b7:5b:8c:6f:cb:
         db:3b:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:32:39 2026 by rpki-client