Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
File:                     V-lT6Re6lbeqwtI77rwX8kxvf2k.mft (raw, json)
Hash identifier:          +b4Z51LK7QIkMT+IhLJXnZ3+Gc4fR0NzJ7cKxq36LaM=
Subject key identifier:   98:91:8D:D7:F6:A7:0F:61:F4:65:3A:B7:DB:C1:ED:35:BF:63:B8:5B
Authority key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
Certificate issuer:       /CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Certificate serial:       019D254C5050E482DD785C70135B2083C628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
Manifest number:          B4
Signing time:             Wed 25 Mar 2026 14:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:51 +0000
Files and hashes:         1: V-lT6Re6lbeqwtI77rwX8kxvf2k.crl (hash: p+ovoYOgtU4fN4UlPtrl+U4JuBLp3RKOJZhQPlP0NSQ=)
                          2: VfqZdMoRpIE35tf8kQhe2jGnGIE.asa (hash: iQlE4HGCvRo8X4vnZHpUoRVxIqGCB+Rovyoe95ujbNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:50:50:e4:82:dd:78:5c:70:13:5b:20:83:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
        Validity
            Not Before: Mar 25 14:00:51 2026 GMT
            Not After : Mar 26 14:00:51 2026 GMT
        Subject: CN=98918dd7f6a70f61f4653ab7dbc1ed35bf63b85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:0c:a4:ee:d4:83:1b:af:7e:4b:ab:2c:c3:
                    01:73:b4:6f:a2:fc:fe:35:df:56:87:56:b2:be:fa:
                    d7:49:25:31:05:8d:08:28:d0:52:06:d0:30:e0:51:
                    98:65:60:b3:1a:ab:c3:87:ae:d3:90:ea:03:50:5a:
                    95:1c:ed:a5:d0:00:8f:76:5c:94:2f:29:e5:e7:1e:
                    7a:ed:a7:ab:c9:08:4b:27:1b:3a:68:f3:f1:0f:c9:
                    c7:53:94:2c:65:7c:1b:ba:78:8d:91:77:a8:5f:0e:
                    9f:e3:ac:14:85:3f:f8:87:08:d8:c6:6a:2d:43:48:
                    7a:ce:94:44:3c:e7:79:bf:ef:0b:59:17:ab:a0:69:
                    6a:10:a4:76:3c:64:d6:55:08:e5:e6:c0:cd:c8:a1:
                    e5:ca:93:9b:21:1f:7b:f7:37:cb:8f:fa:d5:47:ea:
                    2b:6b:60:c9:1c:1a:e9:6e:dc:9e:75:eb:e7:dd:85:
                    b2:53:b0:e2:16:d2:00:17:05:6d:83:be:83:27:0f:
                    0c:65:84:e5:16:4a:b8:4b:88:20:56:b4:da:16:7f:
                    b1:f8:97:ef:d1:87:70:d9:73:5e:c3:9b:b4:a0:23:
                    77:43:72:17:ee:0e:2f:34:ba:bc:f5:b3:a7:a8:25:
                    a6:a4:7e:d8:72:b0:ce:13:64:65:dd:5b:fd:38:89:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:8D:D7:F6:A7:0F:61:F4:65:3A:B7:DB:C1:ED:35:BF:63:B8:5B
            X509v3 Authority Key Identifier:
                keyid:57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:44:e7:db:aa:24:55:1d:d8:1b:ce:b5:81:e6:0c:6d:c7:
         36:19:cc:91:b9:b9:da:0a:32:1f:f2:cd:1d:22:a2:c4:ca:a4:
         fe:68:5f:bf:c2:f7:df:70:f9:8e:d6:db:83:59:ca:8c:c5:fc:
         bd:3e:0f:63:d3:72:4b:e7:db:ed:2f:18:52:c3:a7:06:61:43:
         cb:31:af:42:2a:41:9f:e4:e4:da:fd:55:1c:16:ce:f4:20:b3:
         5a:17:8f:ff:1f:4b:5c:4c:6f:45:e1:25:b0:53:cc:e8:47:e5:
         ce:25:df:25:01:d5:a7:93:06:f5:76:3a:2c:f8:1f:82:f4:1e:
         ed:bd:c1:74:04:d0:7b:f1:55:6d:86:ad:cd:91:fa:5f:f3:02:
         f9:d5:91:7e:97:32:75:ee:db:69:b7:ec:c7:4e:1c:2d:95:d0:
         9d:ed:0e:b2:a9:e1:f9:ee:c3:6f:3c:b8:4f:ed:de:82:36:a0:
         4e:38:02:df:bb:24:67:45:f3:4e:6e:72:22:70:2f:84:ad:dd:
         c1:31:f2:8c:24:0e:67:a6:9f:14:53:23:3e:20:82:4a:07:9d:
         45:f9:e1:61:aa:65:42:1a:56:ab:be:2d:b5:00:48:69:de:bf:
         f1:cc:2a:9e:3d:ed:ba:ca:2d:df:0b:8a:e9:a1:46:ef:7c:bd:
         49:76:3d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTFBQ5ILdeFxwE1sgg8YoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTk1M2U5MTdiYTk1YjdhYWMyZDIzYmVlYmMxN2YyNGM2
ZjdmNjkwHhcNMjYwMzI1MTQwMDUxWhcNMjYwMzI2MTQwMDUxWjAzMTEwLwYDVQQD
Eyg5ODkxOGRkN2Y2YTcwZjYxZjQ2NTNhYjdkYmMxZWQzNWJmNjNiODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYAMpO7UgxuvfkurLMMBc7Rvovz+
Nd9Wh1ayvvrXSSUxBY0IKNBSBtAw4FGYZWCzGqvDh67TkOoDUFqVHO2l0ACPdlyU
Lynl5x567aeryQhLJxs6aPPxD8nHU5QsZXwbuniNkXeoXw6f46wUhT/4hwjYxmot
Q0h6zpREPOd5v+8LWReroGlqEKR2PGTWVQjl5sDNyKHlypObIR979zfLj/rVR+or
a2DJHBrpbtyedevn3YWyU7DiFtIAFwVtg76DJw8MZYTlFkq4S4ggVrTaFn+x+Jfv
0Ydw2XNew5u0oCN3Q3IX7g4vNLq89bOnqCWmpH7YcrDOE2Rl3Vv9OIlTxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiRjdf2pw9h9GU6t9vB7TW/Y7hbMB8GA1UdIwQY
MBaAFFfpU+kXupW3qsLSO+68F/JMb39pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYt
YTBlYmRjOTZiNTMzLzEvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYtYTBlYmRjOTZiNTMz
LzEvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASglE59uq
JFUd2BvOtYHmDG3HNhnMkbm52goyH/LNHSKixMqk/mhfv8L333D5jtbbg1nKjMX8
vT4PY9NyS+fb7S8YUsOnBmFDyzGvQipBn+Tk2v1VHBbO9CCzWheP/x9LXExvReEl
sFPM6EflziXfJQHVp5MG9XY6LPgfgvQe7b3BdATQe/FVbYatzZH6X/MC+dWRfpcy
de7babfsx04cLZXQne0Osqnh+e7Dbzy4T+3egjagTjgC37skZ0XzTm5yInAvhK3d
wTHyjCQOZ6afFFMjPiCCSgedRfnhYaplQhpWq74ttQBIad6/8cwqnj3tusot3wuK
6aFG73y9SXY9lw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:56:27 2026 by rpki-client