Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          KAPCe9XLo1E06/oDsq2PNZquqSVjU1JGAGmXSSFtIdI=
Subject key identifier:   44:F5:73:1F:E2:C0:79:50:48:99:B9:62:2E:D5:BA:3A:2D:30:0B:EE
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       019D37C040D5570F232BE03EB70604D8476D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          10F9
Signing time:             Sun 29 Mar 2026 04:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:39 +0000
Files and hashes:         1: V2cjOhTQXe6Evf6XRnc71HEafpI.roa (hash: kxeF/2UnyuUG3dI7TNbvTa7lcDx1pSDsD3opjO0zHiI=)
                          2: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: 7VVPW+bEGcgFegAUONjhR8maHu42rxHIaCWsrQL39gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:40:d5:57:0f:23:2b:e0:3e:b7:06:04:d8:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Mar 29 04:00:39 2026 GMT
            Not After : Mar 30 04:00:39 2026 GMT
        Subject: CN=44f5731fe2c079504899b9622ed5ba3a2d300bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:34:9a:9e:05:b8:02:90:d1:fa:db:62:ee:
                    f6:02:ba:93:1e:45:ef:f8:30:24:e0:78:48:af:cc:
                    72:53:c5:83:26:bd:dd:36:dd:d8:e1:b1:6f:34:60:
                    f0:a6:28:cf:b1:3e:c1:05:81:48:2e:10:42:13:56:
                    b9:ca:a3:db:62:a8:45:e7:b0:e3:92:1a:91:d5:2d:
                    f8:ba:8b:59:c4:b0:b1:52:b3:22:bb:30:4f:9b:53:
                    b0:cd:44:50:03:4e:51:9d:20:b9:26:bd:57:54:0f:
                    7c:ee:12:5c:35:2e:68:2d:1a:dc:ba:bb:ee:b7:db:
                    1e:da:4b:cf:d3:92:c8:cf:3e:59:d6:44:9e:d2:23:
                    f6:9c:ee:ab:14:05:f4:4f:b1:fc:5c:82:3d:65:03:
                    a8:a2:f7:6e:98:83:92:fb:a2:36:83:2b:22:22:e7:
                    3e:4f:82:85:c9:55:36:66:6b:1a:c6:69:ab:0f:dd:
                    2a:25:7a:28:3d:95:22:c1:3d:2a:a4:db:d1:cd:dd:
                    80:5c:98:e4:b3:0e:2c:ef:e1:cf:4b:61:b9:b4:eb:
                    77:25:b7:54:7d:4b:4f:7f:72:44:f1:0c:2c:e0:b9:
                    7a:3e:a3:8a:35:bd:2d:52:5d:3e:63:e9:81:9b:3e:
                    3c:99:51:4f:a5:29:62:68:8b:00:38:d8:92:b5:bf:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:73:1F:E2:C0:79:50:48:99:B9:62:2E:D5:BA:3A:2D:30:0B:EE
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:0f:ce:0b:7f:7a:c6:bb:95:75:f7:c9:f3:6c:f0:2b:92:
         69:f1:da:13:ea:01:c3:25:b0:c2:21:a1:d2:cf:3e:33:43:b2:
         79:c2:9a:4e:d9:87:66:0c:48:e7:23:a0:01:af:de:ff:f2:e7:
         58:6e:79:ae:dd:46:4a:44:f7:73:b7:23:f0:9f:50:8e:50:20:
         20:7b:6b:a0:02:90:1c:f2:1f:c4:61:82:66:18:ed:36:d3:fb:
         97:40:26:f0:f6:a3:61:d4:de:f4:12:df:07:65:f4:70:d3:c6:
         f3:6c:2e:88:20:4f:2b:d6:24:7d:d5:5c:87:cf:37:35:a5:be:
         35:a5:e6:ae:5a:9c:b2:de:11:0e:96:64:d6:97:31:45:a6:69:
         26:73:24:d8:48:58:26:94:0d:ad:2b:9f:4f:a7:fa:a0:0e:46:
         22:fe:d6:e5:bb:82:59:39:1b:98:61:03:6a:6d:b3:e1:82:10:
         4b:79:ba:b5:0a:95:ab:29:86:42:f5:c7:e8:b9:03:79:0a:9a:
         5f:0f:79:87:24:5b:e3:d9:33:23:3f:b8:53:9c:06:97:bb:e4:
         0e:91:76:20:75:e1:38:4f:5b:44:d1:aa:d1:bb:89:32:22:0c:
         91:ec:b0:10:c5:ee:f0:98:06:69:9d:76:1c:05:52:c0:a7:3c:
         86:a0:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:46 2026 by rpki-client