Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          joTTqgEwGTqnlaVicHs6ae9GXeGvyxRqWIdG0SDmJwo=
Subject key identifier:   CE:82:48:47:B5:63:54:41:34:CC:2A:3E:A9:73:AC:C9:5C:C4:99:A3
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       019D284DD773D7677A2EFF02CD98A2BAEF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          BF
Signing time:             Thu 26 Mar 2026 04:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:23 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: pQE+aI1ZE7WeAymQh3crvjXPzGR2AdCRA+FSu+4z/Ak=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:d7:73:d7:67:7a:2e:ff:02:cd:98:a2:ba:ef:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Mar 26 04:01:23 2026 GMT
            Not After : Mar 27 04:01:23 2026 GMT
        Subject: CN=ce824847b563544134cc2a3ea973acc95cc499a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:52:d4:4c:6c:4e:82:fd:15:07:84:db:ea:
                    d9:ff:10:39:40:1d:09:5b:12:f5:eb:bb:66:d8:62:
                    4a:4d:a7:52:8d:00:bc:4f:5a:a3:84:3b:5b:11:a3:
                    fa:bb:f7:80:60:c1:fa:96:87:9c:08:87:f9:58:e0:
                    4b:9b:ad:81:18:d0:8c:3d:c3:33:d2:d9:f4:76:e0:
                    0b:fe:9a:e4:4e:81:97:d5:01:ad:c8:d6:23:86:99:
                    5f:16:55:c4:e3:7b:d8:33:c1:cd:ab:f7:80:06:9b:
                    a4:1c:70:d9:14:c1:cc:0c:4f:2e:03:03:7a:6a:d3:
                    a0:d5:89:4b:e2:99:68:4f:6e:e5:64:f8:ad:3a:d8:
                    cf:f6:f5:a1:63:77:8a:98:6d:e1:fc:70:df:5d:95:
                    13:8a:63:ab:07:7a:76:35:11:69:84:12:ee:e5:5d:
                    4c:4f:af:d5:ff:52:ca:84:75:da:f2:a7:7a:11:85:
                    9c:d5:0b:c6:c3:b7:b7:99:bf:d6:4f:d2:64:bc:ca:
                    32:13:a0:53:b0:9d:41:c2:06:17:c8:8a:3f:1e:a0:
                    a5:f9:99:7f:ba:02:24:86:3f:05:d1:fa:cf:98:7a:
                    6e:ee:26:7b:fc:57:72:c0:b8:00:e8:c2:f4:ef:f4:
                    f9:c2:c4:f5:ac:6c:58:08:7b:1e:c2:f3:07:42:c8:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:48:47:B5:63:54:41:34:CC:2A:3E:A9:73:AC:C9:5C:C4:99:A3
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:de:b0:7b:1d:f4:e5:65:e4:c0:d0:e1:83:27:d8:80:bc:
         91:d5:fb:d3:81:fe:9a:8b:11:7a:67:22:b7:de:5c:70:4e:89:
         41:58:70:45:2c:a1:ec:5d:30:a8:86:05:ec:93:32:1c:39:4a:
         e4:49:e3:0d:d6:70:0c:7e:ed:2a:5d:48:1f:6a:4a:c8:ae:8e:
         80:21:9c:14:b4:92:46:e1:10:43:3e:1f:a0:86:67:4c:9c:5d:
         f8:34:14:f8:7d:e8:d3:7f:72:5d:d6:f4:1c:f8:0b:1a:df:0b:
         f9:1c:bd:33:c4:5e:8b:23:8b:15:10:89:fa:bf:30:04:6a:2a:
         1f:11:10:21:19:c0:0e:b5:3e:04:30:de:b4:c5:d4:d8:e3:54:
         f9:b0:bd:9c:ff:2d:0d:9e:ec:1f:a5:99:68:ae:38:8c:bd:a9:
         8c:83:14:83:fc:7e:f9:08:51:8a:f7:52:40:00:6c:a8:1f:f8:
         98:b3:d2:d1:fa:6a:81:67:d3:03:d7:df:8c:17:1c:af:d1:55:
         f8:ff:9e:3e:64:ac:b1:a3:44:2e:b5:75:19:c8:74:4a:a0:fd:
         1d:7b:b7:ad:96:23:68:3c:2f:e8:bf:bb:79:92:25:6c:d7:f1:
         e3:e4:3a:a5:94:5f:b5:33:8c:c1:eb:d1:34:93:f1:98:d9:bb:
         94:8a:2e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTddz12d6Lv8CzZiiuu8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDJhMGMzOTgzOTE3NjhjNjE4MWE3M2YxYjQyNmM3NTRl
MTc0Y2EwHhcNMjYwMzI2MDQwMTIzWhcNMjYwMzI3MDQwMTIzWjAzMTEwLwYDVQQD
EyhjZTgyNDg0N2I1NjM1NDQxMzRjYzJhM2VhOTczYWNjOTVjYzQ5OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw9S1ExsToL9FQeE2+rZ/xA5QB0J
WxL167tm2GJKTadSjQC8T1qjhDtbEaP6u/eAYMH6loecCIf5WOBLm62BGNCMPcMz
0tn0duAL/prkToGX1QGtyNYjhplfFlXE43vYM8HNq/eABpukHHDZFMHMDE8uAwN6
atOg1YlL4ploT27lZPitOtjP9vWhY3eKmG3h/HDfXZUTimOrB3p2NRFphBLu5V1M
T6/V/1LKhHXa8qd6EYWc1QvGw7e3mb/WT9JkvMoyE6BTsJ1BwgYXyIo/HqCl+Zl/
ugIkhj8F0frPmHpu7iZ7/FdywLgA6ML07/T5wsT1rGxYCHsewvMHQsifCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6CSEe1Y1RBNMwqPqlzrMlcxJmjMB8GA1UdIwQY
MBaAFFTSoMOYORdoxhgac/G0JsdU4XTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgt
NGMyMzhjNmYwM2M5LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgtNGMyMzhjNmYwM2M5
LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjTesHsd
9OVl5MDQ4YMn2IC8kdX704H+mosRemcit95ccE6JQVhwRSyh7F0wqIYF7JMyHDlK
5EnjDdZwDH7tKl1IH2pKyK6OgCGcFLSSRuEQQz4foIZnTJxd+DQU+H3o039yXdb0
HPgLGt8L+Ry9M8ReiyOLFRCJ+r8wBGoqHxEQIRnADrU+BDDetMXU2ONU+bC9nP8t
DZ7sH6WZaK44jL2pjIMUg/x++QhRivdSQABsqB/4mLPS0fpqgWfTA9ffjBccr9FV
+P+ePmSssaNELrV1Gch0SqD9HXu3rZYjaDwv6L+7eZIlbNfx4+Q6pZRftTOMwevR
NJPxmNm7lIouuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:59 2026 by rpki-client