Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          npWxCKsZnI/FB5PFB4L78zTbmoGDkwqaqxVumGKXjwU=
Subject key identifier:   57:9F:4F:14:24:4A:C7:9F:C1:19:F2:5E:FC:49:D9:45:C6:2F:7A:97
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       019D2583319796595BABEFA346241BBF6258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 15:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:48 +0000
Files and hashes:         1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
                          2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: mwh3ieW2P2ubkJGDfbWWSzhALO0vlx12NWGKHfLMnY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:31:97:96:59:5b:ab:ef:a3:46:24:1b:bf:62:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Mar 25 15:00:48 2026 GMT
            Not After : Mar 26 15:00:48 2026 GMT
        Subject: CN=579f4f14244ac79fc119f25efc49d945c62f7a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:31:61:0a:df:6b:f6:78:da:e0:2d:b8:fe:
                    41:67:2e:12:e7:ff:cd:c0:bc:72:93:bf:fa:8b:a9:
                    ba:0f:76:b6:bf:21:bb:4a:2c:49:e0:b1:7c:05:f9:
                    bb:4f:6d:30:69:3f:25:75:71:10:f4:67:7c:27:34:
                    93:7e:6f:59:b1:ca:0b:98:50:f5:5e:c2:b8:8b:e3:
                    56:47:a7:22:70:a7:45:ad:4b:a6:2f:b1:37:97:fd:
                    e2:19:e7:10:f2:bb:06:38:07:9d:f3:97:38:88:9c:
                    09:83:b6:3b:76:3b:4d:60:34:92:ba:2e:1b:93:e1:
                    74:7e:45:64:76:9c:14:ff:ea:18:f2:5e:ae:90:50:
                    37:fb:cf:54:cc:6b:ac:83:a5:d6:a5:23:12:54:2b:
                    90:39:7d:d9:6b:c6:4c:b0:6e:4a:2b:b6:6e:ee:bc:
                    b3:f8:4a:78:b3:e7:32:75:cf:91:55:d3:ea:9e:d9:
                    65:5a:5c:ef:72:1a:2a:58:d6:7c:56:56:35:db:54:
                    17:21:d3:1c:e6:e9:e7:b3:02:13:a6:56:ea:f8:6d:
                    70:08:0e:34:35:51:95:a0:56:65:42:a7:4f:a5:a7:
                    02:ba:6c:5a:0b:ff:b9:65:cc:4b:3c:5c:05:00:93:
                    5b:a4:08:bf:32:e4:77:c9:f5:6e:3d:5c:df:39:b3:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:4F:14:24:4A:C7:9F:C1:19:F2:5E:FC:49:D9:45:C6:2F:7A:97
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:bb:cf:4b:2d:01:9e:48:2b:cd:85:da:06:c1:11:71:ba:
         d2:b8:7f:ab:d9:2d:93:0c:f9:09:8e:9b:96:7c:30:c0:65:3e:
         f8:89:2a:7c:7b:a8:f8:ef:71:07:00:79:c2:03:c1:aa:a6:17:
         1d:63:aa:66:76:d8:76:ba:59:63:8a:96:21:71:4d:1f:c5:61:
         4d:c1:d0:40:d9:b8:f8:5c:d6:4b:5c:ce:9a:6c:7f:78:ea:48:
         b6:bc:f0:38:d6:9b:48:be:06:95:83:87:f8:21:d6:b4:29:cd:
         b1:31:56:15:5c:bd:51:4a:55:bd:4f:28:56:f1:2b:07:92:b1:
         e4:45:48:eb:14:cc:8a:25:d6:21:c7:b9:38:e3:17:91:fa:0d:
         9a:c9:00:bd:65:8b:5a:8f:0c:4c:2b:38:b8:da:d5:5b:f1:97:
         82:e6:72:e5:c2:cf:a1:c5:28:2c:4a:5f:10:6c:6e:1c:17:36:
         a4:13:28:51:ec:2c:31:42:2c:20:55:61:b9:5b:8b:f6:6b:50:
         d9:2f:54:c9:7c:aa:2e:bb:81:2e:ec:70:98:97:3d:fe:3b:a1:
         d0:dd:44:7e:9a:7c:48:05:44:6e:f4:e6:d5:0f:4a:3d:ca:9d:
         e4:f4:f7:15:29:2c:8c:77:e4:16:21:42:5d:29:ac:95:56:38:
         63:93:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:50 2026 by rpki-client