Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          RQVMzET83YgAleLS/4+qdm0752WA2YQncuaP/jSRqLk=
Subject key identifier:   19:22:0A:D8:AA:91:D1:FE:1A:DB:CA:81:20:0C:24:CF:3D:1E:2A:D6
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019CE2C7E16150661143E876443463343B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0CFA
Signing time:             Thu 12 Mar 2026 16:01:16 +0000
Manifest this update:     Thu 12 Mar 2026 16:01:16 +0000
Manifest next update:     Fri 13 Mar 2026 16:01:16 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: VMOLdJOJSd3SxI9RsGZyNopEoRmvbNO055254O995Xk=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c7:e1:61:50:66:11:43:e8:76:44:34:63:34:3b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Mar 12 16:01:16 2026 GMT
            Not After : Mar 13 16:01:16 2026 GMT
        Subject: CN=19220ad8aa91d1fe1adbca81200c24cf3d1e2ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:13:c0:4d:50:71:70:76:90:92:e7:8c:99:
                    eb:df:34:ef:5b:4f:aa:4b:c5:0f:e2:96:5e:bf:a3:
                    04:22:15:d7:eb:5f:98:e2:6c:13:de:89:af:4a:24:
                    6f:b1:c6:13:ed:14:a1:f0:64:9f:47:f9:46:1e:d0:
                    ac:42:e1:f2:ef:1f:73:6b:57:32:30:3c:83:3f:bb:
                    36:ad:f3:4c:60:4e:9e:fd:05:9c:82:c1:4a:bd:52:
                    25:37:9d:49:39:fc:e5:19:a0:95:ff:5c:94:80:66:
                    3d:8f:42:35:3e:c2:e2:ff:56:ef:b6:fe:21:cf:1a:
                    d3:df:1e:fe:cb:cf:22:b7:ee:11:59:61:11:61:34:
                    0d:17:73:4a:66:29:13:56:52:7c:62:31:b9:62:cf:
                    49:76:e7:a9:07:e6:b7:5a:cd:97:9a:3f:7d:7c:45:
                    ca:9e:e0:72:8c:64:f2:b8:f7:d6:59:07:66:7e:ad:
                    c9:39:bc:3a:37:f3:c7:c2:cf:11:8c:1e:88:bb:3c:
                    64:f8:74:4a:f6:7e:eb:b9:37:3e:d6:24:19:92:06:
                    4e:0c:ac:aa:8a:f3:b5:7f:93:54:ee:ba:fe:05:2c:
                    7d:b3:db:04:71:6f:28:1b:b5:34:62:fe:36:d3:90:
                    57:c6:f5:07:b0:63:e8:ed:08:c2:43:9a:61:06:e5:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:0A:D8:AA:91:D1:FE:1A:DB:CA:81:20:0C:24:CF:3D:1E:2A:D6
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:a3:b1:cb:4b:a3:c4:f8:f1:7a:8d:e3:50:62:5e:6b:58:
         8c:dd:25:5d:b1:44:64:65:48:6b:91:f0:cb:24:96:c1:48:cc:
         e8:f4:61:95:de:9a:aa:e7:c2:78:af:8a:0b:d3:11:67:17:d9:
         9d:66:58:a7:20:ec:50:8e:88:c3:66:e9:2d:b0:c5:25:35:15:
         38:14:5d:e5:d0:f3:1b:71:1a:0d:69:c1:0a:5b:b4:6d:2d:7d:
         c2:75:2d:c0:cd:d9:1f:3a:0f:2c:63:2c:d5:ac:c2:f9:74:70:
         e9:d5:81:db:4f:d7:66:a1:9e:f7:b3:08:1c:04:66:a1:13:4e:
         4e:f0:f9:da:5e:b6:23:10:cd:f4:7e:1e:07:1e:6c:84:2e:94:
         a4:43:fb:ff:6a:09:42:c5:bb:03:34:9a:19:5e:de:45:bb:46:
         01:5e:79:0b:c9:5a:3f:6e:61:f0:d0:0c:25:e6:80:75:d1:6d:
         53:72:09:e8:aa:34:39:8e:9f:fe:ef:cc:18:8e:e7:06:82:44:
         09:69:5d:30:40:74:87:ff:ee:c5:2e:70:1b:1d:a9:97:e6:b6:
         13:77:36:d6:9a:64:0b:57:fe:5b:ac:94:20:16:d0:a7:d8:64:
         25:39:80:00:11:88:91:58:1b:f5:f7:ab:5e:25:bd:50:64:e8:
         68:b9:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:10 2026 by rpki-client