Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File:                     Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier:          xAKkAPIicPyPJoXreN00XD1uHtGbdY3O/BqKfmp4YcQ=
Subject key identifier:   5B:E1:64:7A:4D:18:58:21:E5:D3:EE:8E:AC:AF:A0:93:79:26:99:45
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer:       /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial:       019D3909FEC508C85C82CB3A2406D57D156D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number:          05FD
Signing time:             Sun 29 Mar 2026 10:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:49 +0000
Files and hashes:         1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: ZVoI0rryizr/dYsjFEdRwPgzcegjgV9jrbcWvWsvSm4=)
                          2: vQqnvARNn1FXtEGfZ3CHw5z70o0.roa (hash: +SKN+m/Zy5SnpDyhDQfSEvZM8oK3F3dFeyWqxYSrWok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:fe:c5:08:c8:5c:82:cb:3a:24:06:d5:7d:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
        Validity
            Not Before: Mar 29 10:00:49 2026 GMT
            Not After : Mar 30 10:00:49 2026 GMT
        Subject: CN=5be1647a4d185821e5d3ee8eacafa09379269945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:c4:be:81:9f:b3:5f:02:ab:50:14:4f:6d:
                    11:49:4a:ba:bd:8e:95:d1:80:c0:7d:a4:02:20:bd:
                    56:c9:38:6a:a9:26:de:86:5c:e4:a3:74:51:5d:bf:
                    a8:e8:e3:87:37:ba:33:50:ad:f2:09:69:42:ad:23:
                    95:74:91:4e:05:ca:2d:8f:36:39:0a:a8:63:4b:37:
                    27:8b:49:d3:f8:a5:1c:72:dd:80:b8:f7:9c:19:87:
                    e9:50:e3:47:a9:52:6b:b8:7a:91:2b:24:5b:2d:10:
                    17:b9:ef:ef:dc:7e:da:31:44:a9:83:f6:dc:7c:79:
                    de:47:67:8a:59:7a:fc:21:03:28:b5:0d:88:4a:72:
                    b3:93:a1:cb:d9:00:96:eb:58:79:94:8f:08:e5:6e:
                    de:4d:7f:73:b6:99:8f:58:f7:cf:e8:bd:03:ee:90:
                    11:a3:c2:f2:f3:04:eb:e8:3c:ec:27:4a:bc:8d:40:
                    fb:11:0b:f1:c9:21:f5:95:47:78:f6:c2:e8:2d:55:
                    16:1c:87:e3:b7:b1:ef:a2:d7:a7:01:75:53:3e:da:
                    84:4c:6c:c6:93:f6:40:e9:1a:bc:a8:07:52:86:f9:
                    9d:bc:ae:c4:73:6b:a1:49:73:97:a7:23:1e:ca:9e:
                    8a:a5:d8:51:6a:12:76:af:89:ad:99:ac:c9:3a:40:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E1:64:7A:4D:18:58:21:E5:D3:EE:8E:AC:AF:A0:93:79:26:99:45
            X509v3 Authority Key Identifier:
                keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:a7:4e:b0:a7:2e:86:3a:ce:db:1f:26:b1:81:3a:36:1f:
         2a:ee:de:aa:f5:ab:d2:1f:4f:4f:0e:39:6c:6e:60:32:f5:a9:
         78:aa:aa:54:0d:bc:c7:7a:88:8f:e2:8e:1c:2a:8c:12:ed:6c:
         bc:96:3d:f0:87:14:55:0c:91:8c:4b:59:be:fd:28:b7:f1:81:
         24:1b:cf:6b:66:4e:aa:7d:f4:e3:6d:e9:46:cc:43:e3:5e:4b:
         b4:36:75:96:d0:8c:b6:ef:b3:19:3c:7d:5b:ee:1f:bb:85:c4:
         66:c3:62:f6:85:52:da:48:2e:3d:0a:7d:1d:a5:02:3b:bd:44:
         49:0a:6c:5f:d9:88:5f:2f:81:9f:50:ac:84:50:6d:57:d5:89:
         cc:ae:ca:9c:d7:24:95:f8:0b:6d:15:df:d3:77:72:b2:a7:bc:
         79:ce:6c:84:06:ef:12:16:97:29:b6:cc:1e:78:45:84:5c:61:
         d4:32:cf:a2:bd:09:d6:dc:b9:cd:dc:f5:fc:45:0a:08:99:6c:
         1f:49:25:ac:10:66:0c:aa:bd:b5:6b:11:52:ca:ae:e3:36:da:
         6c:c8:d9:61:e3:8e:f2:ab:40:90:e6:e1:84:95:5b:a7:33:48:
         c8:6d:56:dc:ba:f3:48:90:1e:03:ad:7e:77:4a:ae:40:87:d4:
         d6:44:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:00 2026 by rpki-client