Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File:                     VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier:          Jjy5GcqmOF2OiP8hMTjD/5VcuJjksQygxT2mjEsmW0U=
Subject key identifier:   E1:6D:FC:59:6A:34:48:00:55:24:FD:22:79:4E:80:06:58:7E:78:21
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer:       /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial:       019D389BEA64E33E7A506C8C67FA77A3501A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number:          1044
Signing time:             Sun 29 Mar 2026 08:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:35 +0000
Files and hashes:         1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: yZKeH9Z/CfKkdrocyRy9U4HI/ScFpT6bg5D5Maj/ej4=)
                          2: j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa (hash: rc09LpGqWbk6PYA80jVQRNeDW2Q3wDT/cj8KXISR7eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:ea:64:e3:3e:7a:50:6c:8c:67:fa:77:a3:50:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
        Validity
            Not Before: Mar 29 08:00:35 2026 GMT
            Not After : Mar 30 08:00:35 2026 GMT
        Subject: CN=e16dfc596a3448005524fd22794e8006587e7821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:8a:e0:3f:44:9d:93:c1:93:99:14:ff:6c:
                    35:41:c6:d2:74:e8:16:33:ce:ab:b4:fa:80:fb:23:
                    b5:ca:77:b2:ad:6a:25:16:17:bb:7a:30:26:82:e9:
                    80:40:e3:b3:50:1e:a8:26:bd:96:e0:55:9f:89:8e:
                    81:22:d3:1f:04:66:fd:40:f4:22:b7:86:4b:6f:9f:
                    cd:6a:5a:38:1c:92:7f:8b:a9:67:e8:0e:ef:a8:03:
                    9d:d3:a2:da:05:12:0d:d7:f3:73:c5:a6:8e:d8:c1:
                    e0:6e:fa:6c:a8:89:21:13:ab:4a:50:9f:8e:17:55:
                    45:1d:9d:47:63:b6:c4:2c:14:14:21:85:eb:47:da:
                    19:cc:2f:d0:56:e9:e6:13:e8:0b:05:53:b0:91:4a:
                    80:8a:b7:d5:29:d3:e0:27:47:43:ad:82:ff:1e:e1:
                    c8:b5:b6:ae:73:bd:8a:24:37:e8:5b:f2:7c:29:48:
                    e1:4e:cf:9d:e0:15:42:ac:71:bc:c8:08:89:d3:51:
                    e9:f1:8f:cc:71:3f:b4:8e:d9:54:24:69:c2:bd:7e:
                    16:14:34:c0:83:1b:a1:92:06:f0:b8:d0:10:28:8b:
                    e1:73:8d:41:2b:f1:fb:1b:5f:a4:bd:3e:84:c8:49:
                    ad:49:14:b9:5c:e6:e2:64:58:67:00:c6:eb:f8:eb:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:FC:59:6A:34:48:00:55:24:FD:22:79:4E:80:06:58:7E:78:21
            X509v3 Authority Key Identifier:
                keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b4:69:99:bc:a1:ba:22:c9:84:24:42:10:72:51:3d:f1:e7:
         4c:8e:db:72:5e:b2:0d:6f:82:b3:0a:5a:2d:58:69:ae:e9:c0:
         97:fe:07:bf:2a:2f:e5:3f:a0:4b:2a:92:1e:01:0b:8c:a8:17:
         b2:69:b7:32:51:f2:c0:93:06:3b:f7:c6:dc:60:cd:54:5c:54:
         4b:7c:54:f3:f9:ae:59:34:a6:30:22:96:e8:59:79:3c:e1:d9:
         fb:77:d9:07:6a:de:11:2e:64:45:78:24:fd:82:1d:f1:25:8e:
         5d:06:ea:32:8d:2a:40:ef:e9:a4:99:03:73:f9:98:a6:1c:9f:
         17:e4:b6:c5:a5:d8:36:d9:1b:1c:8c:b1:8f:f0:f7:0b:96:ce:
         43:8b:cd:8d:8c:c7:d5:85:59:1e:4a:51:04:19:06:45:7e:26:
         e5:d2:3a:86:f2:4f:93:46:61:79:b8:1d:ee:23:b1:85:46:d0:
         60:ed:f1:17:ac:a6:cf:ea:58:ec:90:64:0e:8d:e6:5a:48:74:
         b9:82:02:5d:56:f7:1d:e8:4d:5e:8a:63:28:20:22:00:bd:cd:
         f9:13:76:93:7f:04:30:f5:59:94:cc:6b:cb:27:74:b4:50:fa:
         9f:2f:f5:47:e2:9f:b6:a5:54:ca:8a:f3:5d:1c:bc:5e:41:5b:
         df:9c:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:51 2026 by rpki-client