Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File:                     VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier:          IPZyogK4zSQC/1WtP7CDCdrLRGLngtmrVs1DZc1MWsU=
Subject key identifier:   66:9C:67:45:7C:BB:52:E3:7E:81:24:01:A2:BF:46:D8:AD:C7:1C:EF
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer:       /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial:       019D2B17A8A45706CC40938D29017FEA4A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number:          06BC
Signing time:             Thu 26 Mar 2026 17:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 17:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 17:01:03 +0000
Files and hashes:         1: APCVsNpvhqWeQcqweSvgt5Wftok.roa (hash: c6yMfxg6aqbcbGYpnlzDdHyhq9WGqsNthHIttzMp2bY=)
                          2: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: eac7/CBR4isULzWQ/wLKJXHzn9yYBvlYf50NOsipDPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:a8:a4:57:06:cc:40:93:8d:29:01:7f:ea:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
        Validity
            Not Before: Mar 26 17:01:03 2026 GMT
            Not After : Mar 27 17:01:03 2026 GMT
        Subject: CN=669c67457cbb52e37e812401a2bf46d8adc71cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:8d:e3:b2:5a:d5:e1:8b:ac:15:41:07:43:
                    92:c8:57:aa:20:ed:28:d0:d0:62:c2:8b:b7:0b:71:
                    21:eb:42:09:f8:5c:6f:33:d3:21:be:56:cf:5b:0a:
                    ed:06:c4:5a:ae:83:35:38:1a:51:76:9e:f7:12:2f:
                    85:29:8e:10:62:53:85:cc:b5:24:c3:c8:26:3e:f1:
                    fe:b5:85:12:10:80:1a:0f:ee:e2:b8:21:12:2f:4a:
                    95:69:10:b0:bd:bc:8f:aa:41:ea:75:df:c3:9b:17:
                    59:58:59:62:19:23:9f:1b:c7:dd:43:af:c3:d8:1e:
                    88:ea:9e:2f:04:12:29:96:88:92:da:7f:01:f4:d8:
                    c5:da:e4:1f:3f:3f:72:08:fe:d8:38:a6:e1:5f:97:
                    d6:da:9d:e4:17:b3:6c:58:89:89:1d:3c:16:a9:d4:
                    28:15:ed:75:dc:43:d2:94:95:b0:0d:34:fc:d4:25:
                    53:3f:44:00:d8:a7:df:65:f1:a5:28:ef:44:37:e5:
                    79:ee:84:7e:9e:d1:40:c0:f7:45:ec:43:91:5a:3f:
                    84:70:29:ca:a9:4c:97:42:18:37:39:3f:41:74:91:
                    50:38:e4:e7:ab:a5:d3:b4:2b:e5:6c:37:3c:6d:46:
                    e9:11:43:65:2b:ae:d9:20:33:73:ac:75:59:c2:ec:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9C:67:45:7C:BB:52:E3:7E:81:24:01:A2:BF:46:D8:AD:C7:1C:EF
            X509v3 Authority Key Identifier:
                keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:9e:e2:36:07:22:0a:4b:ec:d7:73:64:c2:23:60:58:f7:
         a3:22:90:ab:98:c1:a1:a1:76:01:cb:f2:85:6a:09:67:68:51:
         f2:6c:09:1f:00:e3:e1:4c:f4:3c:0a:f2:dd:89:f9:42:f3:d8:
         23:0f:53:14:57:f5:f4:b6:d0:4b:2f:7c:02:9b:50:18:a1:0a:
         4d:b0:1b:ea:cc:a4:ab:ba:a7:c9:9d:53:28:18:a4:93:84:e3:
         6c:e0:e8:55:b7:0d:08:24:b3:a5:59:28:f5:53:51:4b:c5:1d:
         0f:6f:65:09:7d:1a:44:bc:12:96:aa:34:2c:b3:cc:43:e0:17:
         50:81:ae:4d:0b:cd:8e:50:d2:fd:12:c9:84:0e:93:65:e0:1e:
         1c:45:62:98:1a:d3:2b:e7:96:9e:0b:17:5d:7b:b8:0e:92:ef:
         6e:5b:07:c9:04:15:f5:6b:1f:04:12:93:64:70:01:c7:80:c7:
         1e:02:2a:6d:3b:13:8b:05:9d:42:5a:b7:05:10:6c:46:bc:d6:
         5c:e3:bc:ec:f0:51:87:e3:58:dc:03:cf:fe:1f:fa:32:8e:eb:
         62:7d:12:fd:63:19:7a:b6:01:01:ff:2d:6f:08:f0:45:ec:09:
         25:53:24:c3:cf:c5:da:6c:42:27:86:ac:22:05:e6:50:85:94:
         3a:b3:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:47 2026 by rpki-client