Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File:                     VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier:          +5E+V//l3kWrlltmR+MXRBfII+yluB9Tt5/fB2WeNhY=
Subject key identifier:   2D:2B:37:6F:2B:EF:82:CF:5D:38:FA:3A:F8:91:44:01:2A:06:A6:41
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer:       /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial:       019D37C041ECFBD5E0973B763D403C6CED24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 04:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:39 +0000
Files and hashes:         1: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: LdjPNe+tomdfxeP6FOkBbWNpQ7u+QVA7WtYfcbWJtAU=)
                          2: h1XDgLusYZYzBKy-B3_oEeeQZbM.roa (hash: 5iJMVVOJPvV0Nkt7xC/3WSK+5BdOMwCxIwfFxLs7H2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:41:ec:fb:d5:e0:97:3b:76:3d:40:3c:6c:ed:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
        Validity
            Not Before: Mar 29 04:00:39 2026 GMT
            Not After : Mar 30 04:00:39 2026 GMT
        Subject: CN=2d2b376f2bef82cf5d38fa3af89144012a06a641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:c8:41:8e:43:8e:92:05:2b:b0:12:4b:21:
                    ff:cc:f3:d4:2e:35:e0:d7:5e:e7:61:7f:83:d6:b9:
                    23:90:ac:f6:c6:5c:01:f1:18:d0:9e:f1:df:79:0c:
                    e9:e8:a2:68:20:5f:f7:95:93:1d:7a:b3:5d:53:17:
                    58:83:99:72:30:3c:6c:bf:22:79:05:f6:d8:98:fa:
                    05:b5:ff:8a:3f:d2:69:51:c2:da:4d:2a:a7:3b:0e:
                    20:ac:fd:46:06:5d:72:f3:bb:27:1f:97:2f:73:ab:
                    c1:83:08:66:cb:bc:49:45:70:8f:a9:64:10:18:d2:
                    a3:f3:b9:f2:f8:fd:f6:9d:24:d3:42:37:5a:6e:2b:
                    c1:eb:68:fd:a6:5c:69:6c:3a:fd:b8:ba:e2:31:ca:
                    6f:63:4c:49:d7:53:c0:51:8e:4d:86:90:fd:ea:8a:
                    4b:64:c5:20:36:f9:aa:f5:b5:a4:5b:da:a9:87:5c:
                    58:e0:9d:7b:a2:53:60:28:bc:0c:96:ca:84:ee:cb:
                    94:72:a5:67:6b:54:b4:f4:a4:8e:cb:93:03:bc:01:
                    18:77:21:c2:b2:05:f6:8c:e4:41:e3:cf:90:69:ab:
                    83:fc:a7:2e:fe:af:77:fa:1a:c2:05:26:8e:53:fb:
                    de:72:8d:c6:57:44:d4:7a:d6:bd:c3:40:db:19:74:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:37:6F:2B:EF:82:CF:5D:38:FA:3A:F8:91:44:01:2A:06:A6:41
            X509v3 Authority Key Identifier:
                keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:a4:f2:32:f0:e7:7e:35:dc:1e:88:d1:42:45:68:89:a3:
         c5:83:97:6a:b8:7d:eb:ec:fd:ab:07:00:cd:7d:c4:e1:04:0c:
         72:b6:01:09:4f:59:29:98:6e:f5:1f:aa:24:29:66:26:6c:a8:
         0a:a6:41:75:46:dd:5f:26:ad:45:db:12:ab:4a:0d:b3:ba:7e:
         dc:4a:55:b0:7b:86:5a:e2:0a:5e:04:82:d4:b5:97:af:1e:bb:
         23:c6:bf:17:78:40:80:d1:d5:44:21:da:ca:8c:4d:18:97:fd:
         c2:30:c5:ce:c8:d7:29:e0:6e:72:5c:1d:8f:42:89:74:be:bc:
         70:15:02:98:1f:57:15:b8:d6:ff:fc:c8:71:2c:8f:44:92:b4:
         0b:eb:51:97:9a:a7:fb:8c:e7:c5:fa:9f:2d:2c:58:49:90:6d:
         d6:f4:0e:3e:6b:d7:c8:01:3c:a2:4c:62:2a:e9:31:23:92:6e:
         80:7e:75:98:9e:f8:4e:b5:16:8c:6b:6b:83:17:e5:e3:d7:b4:
         2e:32:0c:69:8c:60:7a:85:77:55:8d:ee:04:9c:e1:c6:13:b1:
         8a:e1:f4:25:e0:af:c9:f3:42:21:85:de:29:25:0d:35:4d:18:
         10:40:a8:02:07:d3:04:50:44:40:25:20:ac:bb:db:32:c7:85:
         d1:90:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:26 2026 by rpki-client