Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
File:                     VZWbC9oKD1kfloQIU58zGBC7JTQ.mft (raw, json)
Hash identifier:          /OqNvK7jE1lG9sam+oVUxTfbHGLJoCcvOZZwDUKN3ik=
Subject key identifier:   06:C9:4D:A7:1A:48:53:BC:24:08:EC:79:15:31:63:52:8A:9F:DF:A8
Authority key identifier: 55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
Certificate issuer:       /CN=55959b0bda0a0f591f968408539f331810bb2534
Certificate serial:       019D38D35E11DDA3FB51868935E3D1478C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
Manifest number:          085E
Signing time:             Sun 29 Mar 2026 09:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:09 +0000
Files and hashes:         1: VZWbC9oKD1kfloQIU58zGBC7JTQ.crl (hash: YIkyDTWBKpoYn0++saWyHtjdc4Oz0pXQT6K+MnHu/AA=)
                          2: j47FN1b9Qh66nUBnpby1lJe9CYU.roa (hash: sZWGSAo/74IVtkMhs6kmHJc9kEJANjXcYOtxcE90TYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:5e:11:dd:a3:fb:51:86:89:35:e3:d1:47:8c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55959b0bda0a0f591f968408539f331810bb2534
        Validity
            Not Before: Mar 29 09:01:09 2026 GMT
            Not After : Mar 30 09:01:09 2026 GMT
        Subject: CN=06c94da71a4853bc2408ec79153163528a9fdfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:5e:d6:89:94:11:58:c5:4b:ab:26:23:53:
                    1c:96:34:9e:68:e7:ef:26:a5:b7:f2:61:fc:07:94:
                    ca:c4:2b:fb:43:af:35:fd:d9:f7:de:fb:4b:6a:e1:
                    ee:3f:4b:8b:de:e7:dc:58:1b:34:a0:d8:35:b7:10:
                    22:db:d4:b7:48:3c:ab:db:1c:c4:a4:04:82:e5:b9:
                    61:2b:2d:95:75:1a:fc:7b:ca:a3:63:39:fb:b2:6e:
                    98:97:25:e9:c6:bb:91:95:ec:62:b9:0a:8f:3c:74:
                    49:eb:9c:bf:2c:e6:ef:0a:2a:82:35:c4:4d:dc:fc:
                    01:36:ff:6b:0b:25:0f:e5:ac:c0:6d:18:59:40:79:
                    81:2d:04:78:29:06:09:aa:2a:c8:d4:df:c9:31:2d:
                    db:b7:e1:4b:9e:71:67:da:c3:55:2c:66:2b:e0:2c:
                    1a:a8:35:02:45:26:e5:ff:7f:19:40:fc:ce:7e:36:
                    7e:75:71:d7:c2:c7:d7:06:0f:f9:a1:29:90:9a:c8:
                    36:7b:64:32:df:9a:d3:cf:61:ba:b0:7b:e2:21:65:
                    ad:38:42:e0:fa:0e:26:a0:e6:5c:63:16:d0:55:55:
                    e6:10:14:10:95:bf:a2:bd:be:1d:de:c5:ae:64:0b:
                    bf:b5:95:1e:9f:d6:08:52:c7:38:f9:f9:3d:dd:6d:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C9:4D:A7:1A:48:53:BC:24:08:EC:79:15:31:63:52:8A:9F:DF:A8
            X509v3 Authority Key Identifier:
                keyid:55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:76:fa:97:ec:8c:00:dc:d3:0b:cc:37:b6:d3:a9:d2:f5:
         fe:d3:47:41:b1:48:da:d2:7a:af:ef:17:35:78:04:d3:c8:41:
         a1:f0:c4:50:eb:a2:66:58:80:e7:df:ed:c4:5d:9f:aa:a7:9b:
         73:fe:9b:45:ba:32:5d:9f:4a:15:37:1e:1b:65:2f:8e:a9:cf:
         e5:b8:c7:70:2e:e8:70:d8:76:87:27:90:59:95:a8:5b:8c:df:
         3b:f1:48:51:c5:be:6e:e0:62:c5:5f:9c:d4:d3:ce:c7:c3:1b:
         af:04:5b:54:ba:7b:65:d8:62:ca:c2:b6:fa:8c:0c:39:19:73:
         b9:64:54:a9:df:1c:f9:e8:d2:df:4d:a5:67:d5:a7:24:3e:15:
         ce:65:77:56:59:c0:c8:7e:81:a3:62:0f:e4:cb:64:21:45:26:
         58:9d:fa:53:4d:6f:ca:65:16:dd:e4:55:67:1a:d7:3e:e0:5a:
         73:b0:ce:cf:59:01:2c:dc:92:f8:5e:13:57:3a:62:47:e0:3b:
         6e:34:0a:6c:15:74:72:d5:a4:55:41:af:25:52:a6:11:21:29:
         e7:ec:1b:9c:a9:e5:aa:f5:49:1f:09:69:ef:e3:b1:9b:db:3d:
         6e:6f:f4:e4:89:a5:9a:5c:d8:5f:a6:2c:99:93:2d:17:5c:92:
         5e:06:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:44 2026 by rpki-client