Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
File:                     vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json)
Hash identifier:          GZX/Z0Cpyj7Fh/ymhHUOTiBKaZb7uzs7NMNVdzSCges=
Subject key identifier:   D4:26:D4:04:9F:50:3E:44:A8:9A:E9:D7:70:CD:B6:0C:6D:75:76:47
Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
Certificate issuer:       /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Certificate serial:       019D37890A32E7EDD0D8235E2F2BDEDA3B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
Manifest number:          0213
Signing time:             Sun 29 Mar 2026 03:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:21 +0000
Files and hashes:         1: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: aRAsWbypglnJc+PqQWAX4eXhpXUdha1jnwMkKTqcbtM=)
                          2: vw2ntvLesz6s464z3Zxlqxg_Jfg.roa (hash: jJvGLsLP1bSLpBaz6ycodyIwzcBAdVDfBxgVTq271mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:0a:32:e7:ed:d0:d8:23:5e:2f:2b:de:da:3b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
        Validity
            Not Before: Mar 29 03:00:21 2026 GMT
            Not After : Mar 30 03:00:21 2026 GMT
        Subject: CN=d426d4049f503e44a89ae9d770cdb60c6d757647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dd:85:52:97:b6:1e:35:47:74:e7:8d:16:c9:
                    4d:2a:38:0b:23:c0:cf:b2:8d:b9:36:e1:c3:73:55:
                    cf:f8:1e:9c:84:cc:0a:e1:02:4b:23:44:07:49:03:
                    51:13:e2:fd:81:2d:31:90:0a:73:d7:72:e8:ad:a3:
                    7e:0c:a9:ca:d7:d9:e9:ff:bd:ce:5c:f3:64:02:4e:
                    25:51:fb:fe:7e:2a:9a:32:05:63:07:ff:98:d3:88:
                    0f:c7:e0:02:f4:9c:87:6a:cd:16:ae:a7:f8:1a:00:
                    26:de:eb:bf:f3:8d:c1:47:86:54:4e:af:c0:54:78:
                    49:76:7e:4e:14:ed:1f:25:13:4a:45:bd:5f:4a:c8:
                    6f:0e:67:4a:b4:28:e7:b9:e2:65:50:85:4b:8f:18:
                    7f:9b:bb:ab:ea:47:cb:3d:f0:16:97:a8:cd:b4:3f:
                    3b:f5:4e:df:38:39:b3:9b:84:3d:ea:33:ce:fd:17:
                    b7:7f:bd:3d:71:d3:af:d2:76:e5:b7:0d:75:bb:fc:
                    47:24:23:00:9e:cf:d9:18:ef:37:a2:4d:b8:f1:07:
                    1b:1d:53:10:5f:34:cd:a1:96:fe:43:41:cc:a1:24:
                    cc:0d:7a:8a:cf:e5:19:89:fc:a8:87:1b:a0:82:34:
                    62:09:35:c0:79:b3:dd:4a:65:18:30:07:68:b6:ff:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:D4:04:9F:50:3E:44:A8:9A:E9:D7:70:CD:B6:0C:6D:75:76:47
            X509v3 Authority Key Identifier:
                keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:93:48:ee:73:fa:c9:0a:94:8e:c2:db:b4:5e:05:f3:fc:
         71:ce:17:51:3d:fc:3c:57:3d:fc:ef:61:95:7d:29:18:7a:a0:
         31:12:4a:e4:71:e2:09:57:3d:d6:a8:70:e2:3b:18:ac:85:42:
         42:23:6b:20:92:1c:00:cf:87:1a:30:a0:25:ee:46:dc:35:06:
         3c:19:aa:e1:e1:24:d3:6d:e6:ad:41:bb:bd:6c:5d:66:67:1b:
         0e:2d:05:f2:eb:5c:74:61:17:f5:96:c4:a7:e1:5b:df:0a:30:
         8f:aa:8c:4f:be:54:b7:5a:9f:05:fd:86:73:83:f2:1b:08:e8:
         cb:bd:2d:8b:46:b6:a5:6f:fe:bc:4f:28:e8:6c:7f:ac:f5:6f:
         76:50:76:97:f6:ff:2f:63:51:52:3f:c8:8c:a4:53:19:73:65:
         20:eb:9b:ed:ac:d8:e8:6c:d3:09:63:3a:43:60:cb:4b:e8:a0:
         66:6b:7e:38:65:37:df:8b:33:96:65:c6:11:70:e5:9b:0b:d6:
         00:e7:17:10:8a:ee:f4:23:6b:c6:d5:a8:78:a5:e5:bc:db:bd:
         81:ab:86:7e:c1:9b:f3:77:4e:2f:e3:de:c0:0f:50:63:1d:45:
         8f:3e:42:e8:80:9b:86:90:73:fb:02:0b:74:a1:b2:3e:ed:b0:
         cf:61:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:08 2026 by rpki-client