Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          hTRQUSX1fSYM3ZVlh6UqRl/S/h45ncJkRZ3jIHmJJY0=
Subject key identifier:   4C:75:CE:68:57:7A:80:FF:3D:C8:68:49:D1:B5:52:D8:3E:ED:47:B5
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       019D265F6AC767FD6959EEC765DF5B8151DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          BE
Signing time:             Wed 25 Mar 2026 19:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:20 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: 6Iooppv/Hihk/AkV2DgEXCETcisyFdJE5EYGe1U8ALY=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:6a:c7:67:fd:69:59:ee:c7:65:df:5b:81:51:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Mar 25 19:01:20 2026 GMT
            Not After : Mar 26 19:01:20 2026 GMT
        Subject: CN=4c75ce68577a80ff3dc86849d1b552d83eed47b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:4f:58:0f:1f:d9:6c:fa:b3:17:27:ec:a6:
                    88:ed:f7:d2:cb:23:b5:14:9b:3c:ca:9e:81:0c:28:
                    e6:45:a7:2d:f2:c2:b2:b6:ea:0c:b7:6a:66:e4:58:
                    00:4e:0f:34:38:02:c8:8b:2b:7d:5f:69:6f:7f:21:
                    ca:b8:52:51:67:e0:e1:61:9b:72:0a:72:09:06:a5:
                    97:5d:d4:b1:d9:ba:53:40:9b:ea:4e:f0:b5:fd:82:
                    52:ff:4c:d7:0e:ed:59:d4:32:0e:98:c9:c9:f6:da:
                    8d:8b:2c:76:3a:4c:ea:e8:80:c2:5f:ea:45:6a:ab:
                    13:f0:2f:74:ea:27:42:c1:7c:ba:0b:aa:a0:30:4c:
                    d8:5b:b4:76:77:a8:af:37:f8:8f:69:8c:18:52:a2:
                    6b:32:82:1a:54:4a:2d:bb:f9:21:ae:b6:7d:13:ca:
                    cb:2e:f5:d4:c7:c9:80:0c:0f:f1:39:3f:6a:d2:22:
                    4b:57:9c:82:93:53:a2:5f:72:6b:46:83:bc:0f:c5:
                    0c:aa:a3:7d:1f:73:2c:65:08:e5:ad:f9:fa:e2:fb:
                    37:ac:7b:1e:c9:fc:8a:60:a2:a3:bd:21:4d:bd:0c:
                    ee:8b:ef:58:1b:3a:6f:07:c4:93:c2:da:6b:f0:ee:
                    bd:fe:42:2e:0b:8b:6a:d4:7f:02:2c:11:1e:70:7c:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:CE:68:57:7A:80:FF:3D:C8:68:49:D1:B5:52:D8:3E:ED:47:B5
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:da:d1:03:30:f9:40:6e:ac:77:2c:b9:ab:5c:5d:5c:c7:cb:
         bd:8c:29:a9:c0:00:20:fc:63:b5:5e:ab:b8:c0:b0:33:07:e0:
         c4:d5:ae:80:af:b7:4b:72:b7:e4:0b:f6:35:0a:a2:83:34:e2:
         56:d0:b1:cb:97:44:1a:6a:95:de:ad:de:88:e3:ee:35:3d:c5:
         74:68:77:a3:de:a6:59:82:cc:67:1c:0c:1c:a9:b2:d9:3a:88:
         50:6f:7f:1d:b9:cb:83:da:2d:e7:fb:50:af:6e:8a:96:dc:1f:
         69:48:3d:cf:4a:2e:fc:14:6a:e8:3a:f5:13:a0:26:18:71:00:
         36:8a:0d:8f:00:2a:d2:cf:63:40:7c:7d:98:2c:19:7c:60:85:
         43:74:53:01:6b:6b:e2:5c:d8:04:0c:1c:a7:e1:16:0d:ca:e8:
         f5:89:d6:43:1d:76:20:c9:15:50:ae:ce:d8:36:be:6b:cf:a3:
         9e:cb:fd:4e:8e:d2:88:14:53:06:a0:d2:b9:a8:5e:b0:c4:c9:
         46:a1:5f:62:e9:b5:9e:47:77:7a:1d:68:fb:3c:40:17:66:4a:
         08:08:86:4d:eb:77:15:f6:7c:d3:ff:84:db:0c:a2:8b:27:64:
         c9:e0:47:09:30:d5:89:66:0b:86:dd:78:2f:53:ed:db:e1:2b:
         e3:8a:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:31 2026 by rpki-client