Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          kjXmqz1y7o65GvqA5nZSWlW6LvmJTxMarfpF/sVfA1o=
Subject key identifier:   6F:E1:CF:5E:CD:32:88:07:64:5D:A8:61:45:F0:02:0F:8A:7B:60:7D
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       019D38659A7D111B6A6C1389D65B47D8B6BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          10F4
Signing time:             Sun 29 Mar 2026 07:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:15 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: 2gTxEMKwlYxVr7tzlKhjLj2P5ONS8i2Ehw8xZaMLqFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:9a:7d:11:1b:6a:6c:13:89:d6:5b:47:d8:b6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: Mar 29 07:01:15 2026 GMT
            Not After : Mar 30 07:01:15 2026 GMT
        Subject: CN=6fe1cf5ecd328807645da86145f0020f8a7b607d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:a3:43:bd:14:70:87:1e:31:7d:94:a5:1d:
                    bb:0e:3e:27:87:c9:c0:87:26:19:ae:d2:3f:3e:ee:
                    a0:88:62:99:de:36:6d:7c:4b:87:67:3b:bf:8e:fd:
                    21:d8:ac:3c:1e:0f:6d:10:a5:99:58:31:ad:63:10:
                    32:bb:a6:e1:4f:ce:42:90:1c:90:04:47:b1:ae:68:
                    0c:ad:17:c5:4a:c4:34:d7:be:68:04:be:70:e7:57:
                    68:bc:f0:d9:47:2b:c2:a2:8a:c8:91:ec:d2:9b:62:
                    50:5d:93:c2:16:62:8e:d9:53:ce:07:31:4c:f6:f5:
                    1b:76:31:96:c0:1e:fc:e3:43:56:63:6d:29:f8:04:
                    9c:0d:c3:3f:c5:53:3f:f9:44:e0:52:45:f3:50:a5:
                    40:5a:9d:a1:ea:09:d9:3b:f3:ee:a2:f2:ed:ff:d9:
                    21:c9:fa:0d:56:0a:d3:dd:f9:35:61:b1:7d:cf:e3:
                    eb:ef:c7:8c:98:52:54:5c:c2:83:9b:27:47:33:6c:
                    3e:d4:d0:b7:96:7c:19:ff:bc:89:ff:4a:e4:21:2b:
                    88:fc:bf:2e:bb:96:15:5d:d7:7c:52:79:3d:0d:36:
                    ad:cc:87:c6:12:c3:56:3f:fe:49:14:86:d5:24:34:
                    33:fd:5a:6f:17:46:bb:ef:f9:c0:95:a8:1b:34:5e:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E1:CF:5E:CD:32:88:07:64:5D:A8:61:45:F0:02:0F:8A:7B:60:7D
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8f:f4:41:ad:6e:0e:d1:30:4c:f7:fb:1e:24:2b:fd:d0:10:
         98:e4:be:c4:c8:14:71:f7:1d:30:65:69:90:ee:32:19:c0:a0:
         db:9a:cd:e2:48:08:e4:b0:40:6e:3d:1d:3e:36:5c:7a:1a:13:
         fb:41:bb:d5:3e:31:1f:1a:bd:8b:7b:fa:b0:4f:5d:01:c9:e1:
         fd:2b:03:db:b3:d4:80:8a:e6:ab:9b:7a:c6:d2:54:7c:51:71:
         9f:73:84:3e:17:a4:a0:d1:85:29:09:72:7e:28:32:aa:07:66:
         57:18:42:36:ef:87:e2:e1:8a:d0:7d:21:1a:03:b8:2a:ef:a4:
         e3:ef:02:7f:d9:0d:36:2c:94:89:8e:c9:49:29:3c:ce:d4:ea:
         eb:a8:4a:8e:0c:13:06:a9:65:46:32:f8:53:e8:8f:20:92:00:
         7c:7f:07:ff:f5:e6:ce:e9:99:9f:b9:26:62:01:e1:c1:f3:13:
         b5:c4:81:44:37:e4:3c:04:67:b9:96:0f:e0:cf:c1:d7:7d:7e:
         08:83:22:d6:f8:7b:f2:7d:34:b2:99:41:37:75:c1:a7:cc:10:
         37:00:d6:33:e9:87:99:ff:47:d3:4e:04:ba:ad:29:5f:ed:8b:
         a8:d3:4f:7c:ba:4c:e2:88:b8:b2:27:c4:4a:49:ac:4e:52:97:
         47:a2:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client