Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File:                     VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier:          Ow1lnMIqi1PsBBJf1xXLVyRwbEVl/I77e5p5dxZ1hB8=
Subject key identifier:   B3:C3:C0:E0:78:51:31:37:F3:71:33:0F:29:D2:F5:51:C7:90:D5:1F
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer:       /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial:       019D269658D1E364FA9D7B663143F4FA5D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number:          0206
Signing time:             Wed 25 Mar 2026 20:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:20 +0000
Files and hashes:         1: H6jqDEJRJpVr93f9cwyj02eDJQY.roa (hash: mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=)
                          2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: ziKCAJU3yi3Rl0uPWIe1oEQSEVqB/UDD+45GJM+/AGs=)
                          3: YzpO8VmPqRTAiscSwEyGgcQi0Dk.roa (hash: 6HjwbvCZxiS3ilZKcje0H+9ezmbZKBAXqwTXh4igaqk=)
                          4: uUGoEjdfbBo-jF6U1dwSdm-Vmro.roa (hash: zwHsLDdeMuR8VmDXVFWRldbxh4F8eqhJM3STNDr64Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:58:d1:e3:64:fa:9d:7b:66:31:43:f4:fa:5d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
        Validity
            Not Before: Mar 25 20:01:20 2026 GMT
            Not After : Mar 26 20:01:20 2026 GMT
        Subject: CN=b3c3c0e078513137f371330f29d2f551c790d51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:e1:f5:71:0b:86:30:eb:95:5e:66:f9:e6:
                    80:23:47:7f:9b:2b:8a:d9:59:85:98:f1:d6:66:58:
                    e3:2d:6e:fa:e0:a9:2e:52:a6:20:60:ce:34:af:93:
                    5a:83:db:17:5b:02:a7:fb:df:1a:92:5d:0b:01:84:
                    ee:63:1d:ab:0a:03:89:c8:82:07:75:e2:66:0f:ce:
                    78:a6:5c:0d:b2:9b:e4:3a:ba:d7:9b:f7:c0:cd:8b:
                    95:53:1f:46:f4:91:64:0e:ca:cf:15:8f:f7:e5:5f:
                    19:cd:82:40:a8:e3:27:be:f9:7f:02:90:2f:e7:7e:
                    da:9d:b2:9d:06:08:91:5f:56:18:6a:8d:96:77:56:
                    56:05:94:08:bb:99:e1:12:5b:c7:60:6a:d2:0d:7e:
                    0f:19:85:6b:9e:17:92:b1:5f:3d:df:67:9a:a5:b9:
                    64:48:4f:b4:b2:ff:56:94:13:48:80:86:df:aa:4b:
                    02:08:df:06:05:c3:18:b2:f4:fb:af:fd:b0:26:c8:
                    c6:c9:6d:54:64:50:b1:45:35:37:ed:b4:0d:77:17:
                    8e:72:ab:a8:0a:86:61:de:4b:e9:ad:c5:92:9b:4a:
                    32:d3:7f:8e:00:a3:61:78:38:05:a1:1f:fc:4d:b4:
                    54:a8:cc:ec:cb:ea:b9:eb:18:69:da:0c:6e:09:9d:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:C0:E0:78:51:31:37:F3:71:33:0F:29:D2:F5:51:C7:90:D5:1F
            X509v3 Authority Key Identifier:
                keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:6e:53:d5:33:e1:cc:db:90:b6:93:a4:d5:36:2a:cf:e0:
         56:b4:a1:ae:49:91:d0:48:c6:3f:b0:cc:63:1a:b5:60:9b:dc:
         d8:b5:6b:14:88:2f:9b:14:61:d8:b4:50:f1:9f:49:99:5a:21:
         d5:d9:47:7c:34:6e:86:53:b5:97:8b:c4:a2:f4:a3:6f:b9:62:
         f9:b8:b9:91:8c:4d:a3:83:a6:fd:54:fb:5e:11:35:21:45:05:
         ae:13:6a:cc:9d:6f:da:a1:c4:3a:db:93:bd:8b:c2:88:90:05:
         1c:63:02:a6:bf:df:88:d8:21:4c:9d:b4:3c:85:ef:da:be:f9:
         52:a0:ac:60:58:d2:f9:79:25:4d:e6:12:16:34:52:bb:f0:0b:
         d5:4d:32:60:fd:2e:de:45:e4:c7:2d:ca:8e:c9:f5:b6:78:69:
         af:23:20:a1:55:c6:56:88:74:6c:a6:c9:25:42:97:dc:e0:dd:
         e7:5f:36:08:99:83:05:8a:96:de:9f:93:dd:19:40:9e:89:3e:
         61:e1:ee:f1:17:54:8c:e1:6e:a3:22:c4:94:8e:de:00:a0:a7:
         3f:94:ac:fa:10:c8:07:fb:e3:43:4b:fc:f0:63:ee:18:e9:d3:
         91:b9:09:6b:e2:dc:61:9d:52:a2:ab:b4:4a:2c:91:e2:21:42:
         70:f8:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:04 2026 by rpki-client