Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          H7BnyJ0KxsQ7BXCyOKD5qrM799t1N9M14jAOPsfQGPU=
Subject key identifier:   5B:87:D9:E3:82:D5:C3:58:0E:4C:CB:BE:4B:F1:85:88:00:F9:8A:AA
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       019D39099226825689ED7DC45AFD0F61918A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          0829
Signing time:             Sun 29 Mar 2026 10:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:21 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: Jaefpk+vaEF7c4vmKO/A2/ARYDPDfVkbgXqBkzc+hf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:92:26:82:56:89:ed:7d:c4:5a:fd:0f:61:91:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Mar 29 10:00:21 2026 GMT
            Not After : Mar 30 10:00:21 2026 GMT
        Subject: CN=5b87d9e382d5c3580e4ccbbe4bf1858800f98aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:07:cc:a2:5c:e4:8c:4a:98:89:31:db:66:
                    88:ca:2f:47:17:df:6b:51:17:b5:d0:02:2d:30:05:
                    06:93:e9:53:9b:11:15:4d:46:ca:ee:8c:8c:63:50:
                    7d:94:25:c1:e5:75:56:b0:b6:66:23:7f:a3:ed:c9:
                    57:fc:12:65:5d:79:75:4f:4c:c7:d9:20:75:2d:ac:
                    c4:cc:fa:b7:7b:86:c5:fe:cd:69:58:b0:b4:74:ba:
                    b4:5a:c3:aa:bc:56:ef:44:77:dd:f6:be:2b:60:31:
                    0b:82:81:8e:d6:e6:5f:0a:b6:c2:5e:f7:ff:ba:3f:
                    11:2e:95:f2:2a:fb:29:b0:b9:1e:f0:3b:44:2b:ee:
                    cc:31:1e:fd:5f:91:a5:70:21:2a:eb:37:6c:b4:83:
                    e2:1d:68:7b:0e:67:bd:cf:99:e4:8f:e8:be:c6:f1:
                    fa:8e:04:26:34:d8:4e:88:c7:88:4b:f8:a4:0d:8b:
                    cc:e4:4e:2f:41:0d:a9:6c:3a:a0:7a:1b:4d:06:b9:
                    0e:0d:18:34:9e:95:cd:d2:94:75:8a:09:8a:56:0a:
                    5e:a3:ef:e0:a3:40:17:b0:0e:69:11:f3:2c:c0:93:
                    f2:bc:c9:23:6b:13:e6:8e:0e:78:19:7d:bc:4d:fe:
                    76:d6:6c:b1:d2:e7:26:b8:2d:7e:43:9c:88:d2:9c:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:D9:E3:82:D5:C3:58:0E:4C:CB:BE:4B:F1:85:88:00:F9:8A:AA
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:73:27:65:00:23:57:dc:74:be:00:e1:5b:2c:59:29:a6:
         7e:65:4e:de:47:22:36:9b:f3:6c:f8:70:a4:30:02:ac:22:d5:
         e8:eb:75:3b:e7:70:2c:83:ae:28:6d:dc:a3:b6:ad:bd:84:9e:
         62:0a:57:bf:bb:57:5c:09:25:cb:33:9f:97:7d:b2:56:67:77:
         03:4f:4d:7d:64:84:c9:3d:50:a8:fd:32:ae:ce:f0:61:cf:0e:
         0c:93:6e:4e:0a:ec:10:0d:8c:72:5d:c0:b5:e7:3b:d2:25:5a:
         a1:cc:4d:93:b9:a3:9a:4e:02:ae:0d:a0:51:c0:98:55:b9:99:
         de:44:38:eb:5b:80:ca:a0:99:b7:54:19:54:3b:a5:a2:bc:86:
         f5:76:fb:d9:81:6b:df:84:52:a0:4e:a4:68:4d:d1:51:61:bc:
         4a:11:da:dc:75:c3:3f:3c:13:54:0c:5c:6f:e2:e9:37:61:3c:
         db:9e:3a:f5:cd:52:72:6a:05:37:41:62:ce:8b:ab:f3:2e:e9:
         79:1e:d5:02:1e:62:bc:d6:99:c7:28:57:e8:ff:6b:e3:bd:25:
         c9:82:1e:e5:29:c8:cf:82:e8:17:8b:64:b8:81:bf:f9:44:81:
         a0:23:a9:38:54:23:27:68:53:6e:97:0e:16:23:72:02:fa:ea:
         12:05:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:35 2026 by rpki-client