Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          Mvp48qSfb2sEXVn1LOOi3waOhX+lpy1M0lmdlJPRkqk=
Subject key identifier:   EF:4E:A4:A8:85:BA:A5:96:D5:0D:C6:00:4A:37:0E:39:20:CD:3A:02
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019D09307ED345509BE3242D4F1568A85C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0799
Signing time:             Fri 20 Mar 2026 03:01:06 +0000
Manifest this update:     Fri 20 Mar 2026 03:01:06 +0000
Manifest next update:     Sat 21 Mar 2026 03:01:06 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: TC-CR-ZUgo3wldIr7f4nCXHpZbc.roa (hash: Tqa6a80CqmnICEwwvMch0Zn79fYz9/pDyy0fkcJDSKo=)
                          5: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: 50USgNXFASy48Xhecux58y8d+4vdnLwodMZLSAwecjA=)
                          6: Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa (hash: oAjU5QxrjsRQZUa6m4Qsajh/Teoh609vw8i9IlPtf6I=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:09:30:7e:d3:45:50:9b:e3:24:2d:4f:15:68:a8:5c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Mar 20 03:01:06 2026 GMT
            Not After : Mar 21 03:01:06 2026 GMT
        Subject: CN=ef4ea4a885baa596d50dc6004a370e3920cd3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:fc:ae:5d:d3:7b:f9:b3:71:28:a4:2f:b4:
                    40:6e:de:4f:35:45:8e:43:72:18:9d:e5:f3:75:b7:
                    cb:c6:77:d2:a6:92:b4:32:d8:6c:08:2c:74:7f:bb:
                    61:35:2e:90:61:6c:57:a2:4f:25:eb:62:74:9e:ac:
                    4f:c3:20:50:e4:0e:19:3f:3f:af:b6:e4:1e:72:19:
                    f9:21:30:37:0b:46:b5:c3:09:33:34:35:a7:a3:fa:
                    e3:b0:9e:1a:ef:7a:e9:2b:ef:45:ab:46:40:40:c2:
                    5f:96:9d:6b:73:60:43:07:34:2c:5a:44:c2:6c:a5:
                    67:f6:88:43:b5:a0:f9:bc:3d:ae:ae:58:5c:72:30:
                    92:e7:cd:7c:ad:96:f6:73:0f:4b:84:db:3e:a8:45:
                    80:95:37:77:30:6e:7f:66:b2:90:bb:3b:e3:b3:ea:
                    e8:65:27:09:7c:2f:51:89:84:35:0f:35:f3:26:17:
                    4b:96:e7:82:b5:53:48:e5:8b:a7:cd:b5:a4:91:d8:
                    b3:02:ae:2a:20:d1:fd:66:93:53:83:37:fe:91:07:
                    71:98:d2:26:fb:85:f1:0f:bc:af:3c:43:95:62:8d:
                    83:82:83:79:04:a7:8a:63:67:64:df:33:27:0e:05:
                    6f:b2:48:a3:3e:ca:87:cc:10:ad:72:ea:d0:72:1b:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:A4:A8:85:BA:A5:96:D5:0D:C6:00:4A:37:0E:39:20:CD:3A:02
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:4a:49:4d:75:a8:63:82:64:fd:0f:14:6a:80:d4:70:76:
         56:f7:b7:5d:d2:1c:96:63:2e:8b:b1:5b:bc:5d:e4:b6:c1:db:
         30:70:43:b0:cd:25:a2:63:ea:c2:52:b8:fa:e1:c6:72:dd:ba:
         43:e2:4c:83:55:9b:89:4f:bc:17:d4:26:91:90:c2:11:bb:29:
         3c:e7:55:22:3d:71:c8:1d:e8:11:49:4f:60:70:d0:6a:cb:61:
         70:ce:fb:af:b0:c2:68:71:0b:76:dd:64:f7:46:69:40:9c:3c:
         5b:3f:6e:55:d8:95:f3:bb:97:d3:48:9f:de:2d:75:02:97:f2:
         f8:7f:be:7a:c4:e9:6f:a8:be:6a:da:57:af:72:bc:a4:a0:0a:
         2b:8a:d5:b0:60:68:c1:29:1e:7c:6f:1c:a2:9e:3a:0d:ea:6f:
         50:10:b8:4e:54:aa:76:ef:5c:c9:cb:9c:2c:50:87:ca:4e:30:
         1d:5c:98:27:7a:df:4b:d0:72:cb:8b:79:b9:1e:38:d7:57:82:
         95:49:0f:a9:f8:07:b9:1e:b1:b4:13:22:63:57:f7:01:fe:59:
         51:a9:c5:ca:cb:77:34:48:cd:49:4b:55:91:ee:c5:11:7a:a2:
         23:a4:e4:2a:3d:55:fe:cd:11:c0:47:be:cc:db:0e:a2:7c:58:
         03:21:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:32:05 2026 by rpki-client