Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          eNOccG6NE1d+lTZhmLMgyomWUgug4MM9uNg3wdYpXRc=
Subject key identifier:   AD:FD:B2:85:FB:BD:2E:04:76:A8:45:D3:BB:A8:01:21:0F:E9:E9:A1
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       019D3A1C8BF5E46BB392A7C9334DFACBC31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          1896
Signing time:             Sun 29 Mar 2026 15:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:42 +0000
Files and hashes:         1: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: RedVpw7+QyBhwSPP6tVLntEnb/UtQbtDWlQjd6SHf3E=)
                          2: XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa (hash: T2mIb6X0eqEPDAVOO/ebU2ewF480tOCHv4ChfQbc97I=)
                          3: Z76i2wTRDAmOepRmzRS1ev_NT4o.roa (hash: Llp9bl6+NKH3CHzPYaV6ygi3Grq/2zEaKAN/Vm9U4m8=)
                          4: nTZXu0mW7EUaqutcmXoltJnKDug.roa (hash: nd1ICL4de7eMzQxRdduWRZ7KUAUPy/KehZsx9ppZFRw=)
                          5: qg89v1sf7foDT9XyuTN1l9h6oXk.roa (hash: RdOZrc2OczEQ2vYU/ofPrq6CdWSswAH8iko/GZ11EFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:8b:f5:e4:6b:b3:92:a7:c9:33:4d:fa:cb:c3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Mar 29 15:00:42 2026 GMT
            Not After : Mar 30 15:00:42 2026 GMT
        Subject: CN=adfdb285fbbd2e0476a845d3bba801210fe9e9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:0f:be:5d:f7:19:1a:d6:49:5f:29:ad:76:
                    dd:9d:43:6a:1a:55:28:e5:a1:70:e3:77:5b:4b:f6:
                    ef:f1:16:f3:e9:4e:58:4a:9f:99:2c:e6:69:e4:cf:
                    23:c8:00:17:04:64:de:69:91:67:a7:cd:21:22:12:
                    4f:4c:b8:ad:26:5d:f2:d2:5e:cc:13:5c:b9:d5:a8:
                    1c:d7:61:95:f0:a2:24:1f:98:6d:c3:49:15:e9:62:
                    51:3b:46:4a:7c:a6:b9:63:01:09:62:71:08:89:e3:
                    73:ee:ac:09:9f:69:99:bd:a0:37:8a:49:9f:f6:6c:
                    52:56:23:b2:3a:57:e7:c6:a7:35:52:00:64:db:02:
                    34:48:e8:60:31:fc:57:f5:c0:b5:af:d8:f6:56:3a:
                    d8:e0:e3:4c:4b:8a:6c:b6:f0:a7:a8:b0:08:bd:9f:
                    7d:c5:13:85:19:95:cf:11:39:4d:13:87:a7:e1:51:
                    34:c1:96:b1:1c:c4:2d:1d:fe:1c:14:9d:d3:0d:23:
                    d6:3e:3d:19:18:8f:72:2f:5b:fa:32:61:d9:50:2a:
                    a4:14:00:d8:ec:63:42:b6:ad:f1:86:0b:73:0c:ae:
                    b9:50:30:73:ef:bf:84:77:38:70:6f:bf:b7:04:80:
                    88:a3:5a:fa:d2:aa:fa:fc:e5:cb:a8:80:1f:48:16:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:B2:85:FB:BD:2E:04:76:A8:45:D3:BB:A8:01:21:0F:E9:E9:A1
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:98:e8:c6:74:26:2f:ff:e5:18:14:5f:0d:69:f0:56:db:09:
         58:77:33:3c:3e:e9:ed:e7:6f:35:a3:f8:df:9c:94:15:94:6a:
         8f:31:c9:ec:b5:a9:3b:5f:d9:71:a8:5f:b4:73:4b:0f:e2:0f:
         17:c1:21:d9:98:fa:bf:24:15:85:f3:89:ee:14:7b:48:c1:6b:
         81:e4:7b:36:e4:fd:14:38:c2:b8:e3:2b:4f:c0:c6:33:5d:f2:
         33:74:50:f7:3d:1d:e9:c5:13:05:e8:5b:ab:84:1f:62:09:05:
         b5:35:bf:23:11:9e:2d:78:d5:2c:ae:57:ac:d8:7d:88:7b:c3:
         61:9b:d7:f1:09:3e:94:aa:2d:49:e7:55:17:06:e0:35:53:df:
         76:2d:b2:bb:a5:d7:95:41:b3:03:44:ce:99:ed:0c:19:02:e8:
         f2:de:af:27:29:ea:77:fb:8a:80:63:a3:d1:a0:5d:e3:5b:1e:
         e9:07:4e:e7:39:0b:ac:99:55:f3:2e:ca:ec:6b:61:f3:11:7b:
         1c:95:a1:51:38:11:9b:cd:4d:55:e5:cd:9e:d5:c1:f1:60:e8:
         d0:63:38:ae:9c:2f:32:9c:16:bf:19:64:37:69:0a:f4:47:92:
         aa:cb:3d:98:65:75:9d:a7:be:e4:39:af:50:63:05:d0:16:7e:
         82:6b:08:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HIv15GuzkqfJM036y8MbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz
MGJkZGIwHhcNMjYwMzI5MTUwMDQyWhcNMjYwMzMwMTUwMDQyWjAzMTEwLwYDVQQD
EyhhZGZkYjI4NWZiYmQyZTA0NzZhODQ1ZDNiYmE4MDEyMTBmZTllOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nMPvl33GRrWSV8prXbdnUNqGlUo
5aFw43dbS/bv8Rbz6U5YSp+ZLOZp5M8jyAAXBGTeaZFnp80hIhJPTLitJl3y0l7M
E1y51agc12GV8KIkH5htw0kV6WJRO0ZKfKa5YwEJYnEIieNz7qwJn2mZvaA3ikmf
9mxSViOyOlfnxqc1UgBk2wI0SOhgMfxX9cC1r9j2VjrY4ONMS4pstvCnqLAIvZ99
xROFGZXPETlNE4en4VE0wZaxHMQtHf4cFJ3TDSPWPj0ZGI9yL1v6MmHZUCqkFADY
7GNCtq3xhgtzDK65UDBz77+Edzhwb7+3BICIo1r60qr6/OXLqIAfSBaP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK39soX7vS4EdqhF07uoASEP6emhMB8GA1UdIwQY
MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt
ZTUyZGEzYjg2NzU0LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0
LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZjoxnQm
L//lGBRfDWnwVtsJWHczPD7p7edvNaP435yUFZRqjzHJ7LWpO1/ZcahftHNLD+IP
F8Eh2Zj6vyQVhfOJ7hR7SMFrgeR7NuT9FDjCuOMrT8DGM13yM3RQ9z0d6cUTBehb
q4QfYgkFtTW/IxGeLXjVLK5XrNh9iHvDYZvX8Qk+lKotSedVFwbgNVPfdi2yu6XX
lUGzA0TOme0MGQLo8t6vJynqd/uKgGOj0aBd41se6QdO5zkLrJlV8y7K7Gth8xF7
HJWhUTgRm81NVeXNntXB8WDo0GM4rpwvMpwWvxlkN2kK9EeSqss9mGV1nae+5Dmv
UGMF0BZ+gmsIjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:08 2026 by rpki-client