Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier:          d+ZykXwtFF45kDDfv3WW0vmiqMD6H+BWeAgn5j5HxjE=
Subject key identifier:   B9:41:68:C7:7A:C0:19:64:F3:02:F0:38:0B:F7:E6:77:8A:DE:FC:AD
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer:       /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial:       019CE5C8D2754A55F699E835F5174811BC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number:          1493
Signing time:             Fri 13 Mar 2026 06:01:09 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:09 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:09 +0000
Files and hashes:         1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
                          2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: iGpxpmSCm9FwJ8yBpgL/DnXIyrk1WEcx1Rs3K65UVWo=)
                          3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:d2:75:4a:55:f6:99:e8:35:f5:17:48:11:bc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Validity
            Not Before: Mar 13 06:01:09 2026 GMT
            Not After : Mar 14 06:01:09 2026 GMT
        Subject: CN=b94168c77ac01964f302f0380bf7e6778adefcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:4b:9b:f1:50:16:7f:24:5a:29:e1:79:dd:
                    1d:bc:7f:3c:d8:7f:63:50:3e:5f:09:2b:cb:f8:f0:
                    ad:a0:99:ff:dd:85:f6:23:18:c0:c6:40:70:aa:3b:
                    0f:f8:98:b3:ef:af:9e:df:43:38:91:50:79:6b:c3:
                    5b:d8:25:d1:be:de:8d:b1:58:e7:3f:d7:1d:b0:03:
                    39:ea:de:82:ee:cb:fe:4f:34:a9:74:3a:e6:a4:5f:
                    18:13:7a:8b:a4:0f:6f:ae:ec:6a:7c:07:73:79:4f:
                    b1:a7:e7:88:91:c2:09:54:af:72:20:64:a1:4d:48:
                    5a:ec:2a:5d:0f:7a:c9:05:3e:eb:c2:ad:53:73:07:
                    aa:13:5a:3f:b6:91:3d:79:ad:60:99:83:91:0f:72:
                    3d:af:fe:e3:b7:f1:cb:d8:47:af:09:3a:b1:cd:97:
                    94:31:18:b5:80:f4:f5:d5:e5:b2:09:6a:75:d1:3b:
                    26:ad:c4:11:8a:bc:5e:0a:74:cd:42:6d:5d:d6:8d:
                    b1:5a:67:45:e7:f2:fa:ff:e2:5d:50:88:03:fb:f2:
                    0b:a1:67:66:82:88:8a:35:ac:53:9f:5f:39:81:a8:
                    a8:cd:f1:4d:ee:57:46:6b:87:1b:93:d1:c0:84:45:
                    7c:9f:69:f6:bc:1a:47:52:78:3a:05:c1:03:0e:4a:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:68:C7:7A:C0:19:64:F3:02:F0:38:0B:F7:E6:77:8A:DE:FC:AD
            X509v3 Authority Key Identifier:
                keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:bc:78:5a:61:aa:f1:7f:3c:82:65:99:6a:26:3a:c9:99:
         2e:c8:a8:e0:6a:84:cb:0f:be:01:2b:6a:63:1b:cf:e6:fa:a5:
         9c:7d:ee:7e:b4:3c:34:f1:40:84:50:5a:62:ae:37:7b:c0:fe:
         90:b7:80:31:58:68:cf:d1:94:36:8f:08:81:55:9b:a9:10:34:
         c6:20:17:49:cc:25:f2:82:41:ae:ce:87:27:74:bc:f2:b0:40:
         af:b8:ea:87:8b:ac:40:bb:6d:f6:ad:1e:4f:f8:9e:fc:99:1e:
         71:67:17:bb:35:7b:b5:99:bf:8c:83:9c:ea:86:66:57:51:e6:
         4e:04:30:ab:7a:b3:2c:24:1a:94:59:23:2c:28:6b:3a:c1:ae:
         5d:ea:04:32:09:99:c7:b7:f8:bc:ad:0c:f2:b9:37:77:7f:b0:
         ac:8b:45:1a:27:75:5b:35:8d:cd:f2:8a:18:76:57:6f:d5:6c:
         67:7f:a2:1b:2c:a3:95:31:ab:b8:c7:43:0e:53:be:b8:71:02:
         52:f4:8d:ce:ea:e9:b0:36:28:76:21:7c:40:6e:c4:c2:1e:d1:
         94:72:bb:e2:9f:23:c8:e7:a5:9f:4d:d4:55:ea:be:5f:52:27:
         ce:3d:32:79:db:65:41:ed:f3:67:e4:f3:bb:3c:62:28:03:f4:
         50:10:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:37 2026 by rpki-client