Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          AcROc71E423wzoZteAt6u6qdQnAdKBuvkbhwOkvTuUQ=
Subject key identifier:   E7:F6:6B:93:BF:93:41:D7:A8:CE:66:F2:42:6C:2C:E2:28:AA:D3:5E
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       019D273AC06998CA9B59FAC10983667719A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          1593
Signing time:             Wed 25 Mar 2026 23:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:54 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: WmZRIG9Vv38Xel7aaeJs41sP8swUJGEcNTDFCV7jM4Y=)
                          2: t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa (hash: y8z5xcdOoisg3/Lhw/UJq/FRgFg1letqfgFD0/0tbNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:c0:69:98:ca:9b:59:fa:c1:09:83:66:77:19:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Mar 25 23:00:54 2026 GMT
            Not After : Mar 26 23:00:54 2026 GMT
        Subject: CN=e7f66b93bf9341d7a8ce66f2426c2ce228aad35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:80:c6:7f:46:9f:23:ab:b7:e5:56:3f:b7:
                    f4:ed:fe:fc:e5:d0:30:89:11:d9:f6:8e:96:e9:75:
                    1e:88:22:5f:06:e5:fc:a3:49:12:01:4c:f8:ef:1a:
                    3d:05:7f:e2:11:c7:56:03:20:82:7e:38:1e:37:ea:
                    37:ba:bf:0d:f0:b3:50:85:ae:e9:19:ff:7e:6b:3a:
                    93:1d:e2:47:34:a3:94:d5:82:32:ba:1c:5a:a7:c0:
                    93:01:10:a2:25:c5:17:64:59:10:82:53:87:1d:e0:
                    8b:07:37:a6:cf:5f:26:8d:7f:85:56:ef:9f:04:24:
                    54:56:09:1f:63:76:67:ad:3d:5e:c1:97:07:29:33:
                    51:90:97:da:ba:cd:34:ae:06:e5:ec:2e:84:5c:c3:
                    82:12:77:6c:58:0a:49:bb:9c:40:56:f4:83:1f:08:
                    f4:6c:ad:9c:c5:a3:a2:bb:c1:ca:9c:29:ff:93:35:
                    b4:7c:eb:37:51:55:da:7f:52:5c:98:5b:99:6c:1f:
                    ce:82:df:d3:11:a5:05:ad:44:21:83:b8:f8:f3:f6:
                    97:46:a6:78:09:20:6b:4e:af:18:04:2d:10:16:ea:
                    fd:ff:06:27:f3:09:97:87:03:ff:46:6a:fa:13:d3:
                    30:29:2a:42:c1:ac:de:b3:e6:f6:17:77:73:c1:78:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:6B:93:BF:93:41:D7:A8:CE:66:F2:42:6C:2C:E2:28:AA:D3:5E
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f7:45:f9:d2:af:c6:e9:7f:85:d6:e2:a7:49:2c:09:18:af:
         f3:22:90:6d:3e:24:ca:d3:c4:d0:7b:6e:42:2e:30:aa:bb:11:
         3f:31:63:1d:78:95:08:8d:c7:0e:95:81:d5:d9:e3:73:ee:ca:
         63:43:ea:ed:08:c0:5f:81:d2:44:3e:38:13:71:fa:8c:20:ce:
         99:72:76:3e:1a:1e:d2:d0:87:25:12:67:90:fc:dd:dd:c8:19:
         58:0a:88:09:91:cb:11:dd:98:0a:97:63:cb:6e:b5:19:a6:bf:
         97:1b:8c:08:4f:a2:3c:bb:9d:99:20:00:61:ae:77:3b:f8:cd:
         58:48:61:35:eb:89:74:b0:2a:ef:17:d6:94:fc:7a:d0:96:85:
         67:7a:8a:21:a8:06:df:37:40:ab:b6:ca:33:88:85:49:20:b2:
         2b:5d:8a:23:14:b3:47:7a:52:22:63:a4:ab:45:12:a0:b5:fd:
         32:a4:8f:c0:96:d9:ea:90:3a:f9:22:33:16:51:86:5e:02:36:
         a2:44:af:fa:2a:9f:5f:59:1a:70:c1:3d:36:51:1b:05:55:5d:
         0e:b4:ce:4b:3f:40:60:26:a3:d9:5a:8b:5f:78:f6:72:77:6a:
         e9:05:2e:a2:9f:ab:f7:1d:d1:b2:f2:79:66:f7:2a:d1:27:29:
         5f:50:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:41 2026 by rpki-client