Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File:                     VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier:          gxuHrUjnwaJ4Z1ECS3QUDBXpf5qXXPrB6KSZH8PjuRs=
Subject key identifier:   29:D0:4B:5A:D8:7E:AD:F3:58:20:87:E3:DB:0C:E6:E4:74:0D:6E:C5
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       019D39E5457134957245999AD3CE29E5619A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number:          162C
Signing time:             Sun 29 Mar 2026 14:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:19 +0000
Files and hashes:         1: JjGWu_iS8cN2zsRmRzGaL41mOkE.roa (hash: g4eeZndVmzfMZIquXIPB+scdVjdZfzjwgvSICfGOgYk=)
                          2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: sMbV/+OV2B7WbZhVVcB/WBGYvvX7oIMA7sCJIhHHaB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:45:71:34:95:72:45:99:9a:d3:ce:29:e5:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Mar 29 14:00:19 2026 GMT
            Not After : Mar 30 14:00:19 2026 GMT
        Subject: CN=29d04b5ad87eadf3582087e3db0ce6e4740d6ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:e4:f3:9c:62:03:23:e0:ee:90:c5:c1:f7:
                    48:f8:42:3e:a9:49:b4:7c:9c:cf:0d:c5:50:a9:e8:
                    cc:9f:14:57:8d:03:12:8c:08:77:31:87:aa:07:91:
                    b5:02:52:99:71:ff:25:52:1d:88:da:76:66:5e:2d:
                    ad:b3:6e:2c:da:6c:f2:51:e8:bc:f1:da:a3:2b:07:
                    15:f3:cd:20:7e:90:38:93:e1:23:16:e3:5c:45:95:
                    f3:8d:8e:e5:46:eb:c6:3d:7a:9f:46:13:67:9f:0c:
                    8e:66:60:42:f1:60:a0:30:76:c4:80:7d:b0:14:b7:
                    b8:c5:19:e9:65:2e:ba:15:aa:bc:02:13:7a:47:66:
                    5d:92:da:73:7e:bd:ab:c2:5e:c9:75:19:03:7f:2c:
                    8b:8f:03:0c:c1:49:d0:02:cc:39:15:08:5f:72:b9:
                    62:94:87:eb:89:d3:a2:f1:ff:06:52:94:a6:84:c2:
                    64:fc:69:86:fd:97:4f:2f:11:c9:1e:ef:03:2c:2c:
                    08:41:e5:dd:eb:4c:4d:4c:71:66:11:46:b3:2f:36:
                    f5:e5:9a:54:de:14:70:b4:be:7e:43:0f:02:ce:32:
                    0d:11:a4:8d:88:0e:cb:72:d1:12:3d:e6:3e:f3:d6:
                    0c:b6:2b:e2:13:d3:9c:a2:b3:98:c5:71:b4:68:e7:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:4B:5A:D8:7E:AD:F3:58:20:87:E3:DB:0C:E6:E4:74:0D:6E:C5
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:81:3c:ce:6b:1e:f0:d0:ac:bb:3a:71:91:4a:5a:f0:ad:41:
         24:2f:b1:1c:01:0c:07:c8:e7:c7:15:9a:aa:9b:88:e4:68:6f:
         d3:0b:84:54:8d:e5:9f:33:68:76:85:92:3a:f6:ba:8c:2e:92:
         c4:cd:90:49:f7:b9:61:89:d5:84:13:10:05:88:dd:9b:33:f1:
         91:8f:ba:eb:fd:93:ef:4e:0d:bd:c9:52:ec:24:9f:d9:88:56:
         19:65:45:df:ab:1f:ea:a5:cf:9f:e8:a0:55:3a:d7:cf:96:43:
         b5:90:7f:8c:47:01:de:aa:f3:34:ad:f1:66:de:df:a2:45:d4:
         1c:21:0a:55:18:86:71:d6:a2:6d:6e:64:1a:0c:b5:f9:63:2a:
         b7:f5:16:e8:fe:d3:d9:25:f8:08:e6:73:aa:d7:1d:68:67:cf:
         1c:eb:b7:ac:b9:26:7e:48:7d:ff:a7:7b:f1:b3:98:c3:02:e7:
         81:cb:a1:1d:14:a0:3b:e8:f1:f1:9c:72:4d:9e:d4:d0:da:90:
         82:9d:0a:5a:de:a2:54:8a:4b:f2:28:ec:31:3e:3f:36:b7:1f:
         a2:f6:ef:94:e3:9b:8c:e4:08:01:7b:22:ad:3d:5c:93:f3:d6:
         bf:6c:46:bd:a6:6d:5e:32:a5:1f:c5:2f:8c:fb:2c:08:a0:5a:
         a7:1b:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:31 2026 by rpki-client