Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File:                     VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier:          XOJzDeHwVwbiR5McwhwKs7EFHouUvXYO44XR8KP9pLc=
Subject key identifier:   50:33:0E:16:69:BD:49:E0:0D:2C:C8:13:8F:0E:0E:C8:76:EE:41:41
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019CC93E77A645DEC0E6A71269A085F8D826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number:          0350
Signing time:             Sat 07 Mar 2026 17:00:40 +0000
Manifest this update:     Sat 07 Mar 2026 17:00:40 +0000
Manifest next update:     Sun 08 Mar 2026 17:00:40 +0000
Files and hashes:         1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: hkPN4EprJKG4fuH3lbJN/vggxCvoMJ/U0dQhikKvI3k=)
                          2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 17:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:3e:77:a6:45:de:c0:e6:a7:12:69:a0:85:f8:d8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: Mar  7 17:00:40 2026 GMT
            Not After : Mar  8 17:00:40 2026 GMT
        Subject: CN=50330e1669bd49e00d2cc8138f0e0ec876ee4141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:88:78:cd:55:78:bc:11:90:fe:e9:67:81:
                    6e:70:01:6c:0f:32:34:03:bf:53:95:3b:ed:39:38:
                    a9:7c:84:ae:e3:58:14:bc:c6:83:62:70:7f:1d:28:
                    9e:ba:fb:be:a3:ee:aa:39:6f:61:f4:53:09:aa:ec:
                    29:8a:b3:07:06:27:f8:d0:90:a3:a3:c9:16:c9:ab:
                    0a:d2:37:5e:b3:e2:7d:46:9f:37:72:73:aa:ed:84:
                    97:8c:89:6d:29:2b:e4:82:97:f2:67:f3:7a:93:8f:
                    8b:da:be:2c:3a:5e:56:91:c9:a7:ff:ea:50:ec:42:
                    d2:60:37:1d:81:ab:fc:96:ab:81:1b:52:58:46:1b:
                    64:8b:0c:bb:c4:ee:b4:43:2c:53:d4:ff:9d:d8:35:
                    16:a7:43:1e:bd:51:fd:a9:2e:7a:55:5d:cc:de:6d:
                    d8:38:18:d5:06:83:8c:0a:c2:eb:50:61:20:16:0e:
                    ee:b4:64:32:fe:3f:b5:50:b6:ae:ba:f9:9d:81:a2:
                    35:a9:17:c9:9a:c0:51:3b:14:7d:d5:ab:a3:7c:f9:
                    72:84:02:35:a9:10:fd:8a:bb:ae:d7:f7:8d:ba:f6:
                    77:a0:c1:ba:9a:1d:15:cf:5a:cd:cf:c2:b6:05:29:
                    79:cb:98:3d:8c:f9:c1:57:ca:49:6a:01:31:7b:72:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:33:0E:16:69:BD:49:E0:0D:2C:C8:13:8F:0E:0E:C8:76:EE:41:41
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:b7:9e:b1:b5:cc:c3:ea:a6:6d:7c:b0:af:f7:ec:bb:63:
         f9:d5:af:7b:47:1c:64:0d:71:43:51:2e:5c:30:82:61:a9:f1:
         04:98:59:99:9a:71:b6:aa:7f:78:68:d1:fe:2d:07:88:f5:c2:
         fd:21:c4:50:3b:97:dc:77:82:5f:ea:5a:9b:d3:49:93:12:0d:
         c1:f4:a0:ae:48:ab:31:ec:25:83:8c:d9:7f:1a:a4:97:7a:36:
         d6:78:d6:62:52:fb:92:70:ce:8c:2d:5e:e8:7e:08:c3:20:7a:
         bd:59:e4:e9:f4:f4:ab:c6:2b:c6:52:f0:90:ff:26:89:1a:00:
         f0:69:aa:4e:41:fa:0c:2a:fa:cc:e1:8f:bd:1d:87:44:2c:ec:
         57:46:9b:dd:ba:72:50:c9:f6:06:dc:26:39:11:28:7c:46:52:
         40:af:21:11:8e:c2:11:ce:31:19:d3:99:43:7a:35:70:99:7b:
         02:ef:17:39:dd:0c:73:80:50:db:e0:b6:e5:9f:be:51:b3:ef:
         9a:c5:2f:52:ce:5e:f8:3e:50:42:e5:94:b7:ff:31:2d:68:8e:
         c2:2f:1f:8b:69:27:5a:7b:61:dc:c6:e9:ff:e5:7d:c5:d2:7c:
         65:72:c4:49:f6:20:50:4c:e2:da:84:de:c0:cd:49:c5:73:aa:
         8c:05:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:54:01 2026 by rpki-client