Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          rh1WI/rPoC3m4CM+JcyYETKBgJf34SA5OI70PSvk+78=
Subject key identifier:   81:7C:F0:CC:19:B9:0D:8C:B4:04:B2:A5:10:0D:3A:5E:98:1A:EF:24
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019D3A8A59F642C4AD93CC1DB790F470C16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 17:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 17:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 17:00:38 +0000
Files and hashes:         1: Ib0Ol3nFOYIDYH3957HPZoQwY64.roa (hash: NuhOlS+BLbt/74LFrOD5mSh8QUGvts9CSbc+WHsVsPE=)
                          2: J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa (hash: Bfl8ObvmfqtyBp5KbMoNS07tnVUojBcqdmR2bkync4I=)
                          3: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: OWO3vNEJzP1AAqqQiW3yLCWRzA2LJfAjVrZb7uj7VRs=)
                          4: jdfEMIWdXLEc60fasjfwFaquiJk.roa (hash: QpCSJQiJ63Lq7WSfKmPM9jrDX3jYq+/Wor8hrHw1FiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:59:f6:42:c4:ad:93:cc:1d:b7:90:f4:70:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Mar 29 17:00:38 2026 GMT
            Not After : Mar 30 17:00:38 2026 GMT
        Subject: CN=817cf0cc19b90d8cb404b2a5100d3a5e981aef24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:fd:1a:68:fb:d0:c4:da:5d:8c:7d:c6:dc:
                    47:b8:2f:41:66:a5:a8:f1:39:f2:ce:9f:07:60:9e:
                    b5:7f:02:7b:85:6b:6e:54:8e:11:73:00:b1:c2:22:
                    5e:16:bf:fb:0b:e8:bb:ef:4d:54:2f:d3:09:2d:b0:
                    60:27:81:69:75:28:22:cc:d7:5c:1a:74:af:5e:ed:
                    78:17:0c:2c:a3:1b:58:bc:1f:d5:ad:1c:ab:25:88:
                    2a:74:9c:28:d1:6f:ec:3d:3c:07:7b:a8:a9:3c:3d:
                    86:f5:3b:0a:8f:1d:ba:7b:01:96:f5:a0:d5:7b:a8:
                    07:eb:3d:84:0c:e8:68:1b:85:2a:c8:36:0e:f5:f0:
                    f4:5b:37:86:ee:db:4e:ef:67:c9:01:fd:c1:dc:a7:
                    a4:02:9c:cf:35:80:79:b7:43:41:14:10:1b:8e:1c:
                    d0:3b:11:9b:03:5a:40:04:cb:0e:97:0e:24:2f:fd:
                    5c:0c:9e:21:68:56:1f:9f:32:b4:db:bf:69:10:9d:
                    3d:a6:35:71:fb:b6:47:15:20:d0:aa:fe:f3:59:aa:
                    9e:21:7c:8b:b0:4b:2e:c0:a9:e2:2f:1a:c4:32:3c:
                    19:34:15:cb:90:9d:17:11:b3:ff:1b:cf:2c:1b:7f:
                    14:f3:de:c3:59:e4:b7:fc:b2:ec:88:94:25:17:b7:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:F0:CC:19:B9:0D:8C:B4:04:B2:A5:10:0D:3A:5E:98:1A:EF:24
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:86:99:9c:9e:6e:68:d1:f2:f6:2e:10:21:70:c4:3a:14:49:
         67:57:fa:ad:68:4c:df:62:e6:8c:1d:a2:8a:41:fc:96:3a:b3:
         19:9a:b4:3f:16:d2:ad:92:28:68:c8:a1:4a:74:e8:8d:d5:ca:
         6e:67:af:d3:e6:5e:58:58:56:7b:2b:37:51:1b:c0:d0:d7:c4:
         9e:dd:5f:c0:91:c6:6f:f0:6b:2d:0f:2b:dd:e0:54:68:b5:cb:
         84:33:90:92:57:ac:63:f3:cc:63:20:44:56:19:07:8d:dc:14:
         fd:13:96:07:85:54:fc:59:dc:a2:99:0d:0a:85:a4:b6:13:0f:
         54:24:2e:f2:08:98:32:e5:6f:58:c6:ce:91:93:70:90:e2:a1:
         dd:cd:91:d9:51:ac:44:98:bc:14:49:61:09:88:63:d6:94:53:
         20:f2:cf:3b:b3:73:60:ff:6f:8f:96:42:11:6c:90:7f:54:e9:
         f3:73:e0:86:15:f8:33:87:cf:a4:2e:87:8b:39:55:28:1d:0c:
         25:ed:8c:46:c1:a5:fc:9e:5f:36:81:e5:65:f4:bf:3d:21:14:
         aa:1f:ad:ec:bd:cd:98:92:40:17:a1:47:04:d5:30:3b:58:d7:
         fa:6c:60:fb:da:d4:19:98:b9:97:bf:22:8a:03:59:79:01:44:
         de:1a:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:50 2026 by rpki-client