Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          HaZLfwwrYpZXrVOwT0T+mkgg/sevpstVXeHbwHQ3CcQ=
Subject key identifier:   D9:88:7F:6A:93:C2:A2:E9:1A:A4:33:4C:1E:6D:9E:C4:2E:06:58:67
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019D2471935A6AE9394280F710B85113A8A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          0661
Signing time:             Wed 25 Mar 2026 10:01:56 +0000
Manifest this update:     Wed 25 Mar 2026 10:01:56 +0000
Manifest next update:     Thu 26 Mar 2026 10:01:56 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: rgkXr/dgPdiREN0LHvZgNHes7yU008OE4oakxQ16UBI=)
                          2: bexPf4wBiqE5B0cK8WpLE7_TGgw.asa (hash: f6uUWxmQPWv0jNUrF3hj3zTPBTwtBbg/p5UBKL2IpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:71:93:5a:6a:e9:39:42:80:f7:10:b8:51:13:a8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Mar 25 10:01:56 2026 GMT
            Not After : Mar 26 10:01:56 2026 GMT
        Subject: CN=d9887f6a93c2a2e91aa4334c1e6d9ec42e065867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:46:a9:74:1b:4d:3d:43:5a:67:df:6d:21:
                    09:95:d6:8a:ef:34:a0:da:d2:a2:3f:65:2c:1e:ac:
                    9c:ff:b5:be:03:af:04:04:a2:4e:33:12:96:ff:d0:
                    f2:a9:aa:e6:e7:98:33:7c:20:d2:7c:dd:40:17:7f:
                    e2:d0:37:42:4f:b0:76:ac:d5:12:a1:49:8a:f9:6b:
                    b1:58:44:b5:18:b9:ff:6c:23:bc:01:f6:5c:6d:b8:
                    b6:81:7b:3c:25:ab:35:72:40:4f:a1:d0:4e:5d:b1:
                    36:60:4a:02:ae:b8:3f:28:2b:dd:0f:4f:0c:da:3d:
                    f8:38:50:b0:2e:8e:e0:0f:48:95:e5:21:1e:6a:f9:
                    7f:60:ef:85:d2:c2:1b:c3:0c:19:77:33:91:2f:0f:
                    51:8f:cd:d3:4f:55:6f:11:89:bc:99:26:82:6e:65:
                    7a:63:23:ec:18:88:d3:c4:4b:98:77:5b:d1:b7:db:
                    b7:1b:b9:7a:c9:00:25:cd:4d:26:35:e8:91:7f:e6:
                    d4:1a:98:53:fc:d5:e4:6f:f0:f1:2e:c6:47:46:d8:
                    71:be:cc:5c:81:7d:b2:25:7c:7e:a7:d1:c5:15:8a:
                    34:87:7b:06:37:15:94:d2:64:9e:da:16:b5:15:03:
                    c4:24:31:42:9e:df:25:0b:b5:2b:16:24:32:60:2a:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:88:7F:6A:93:C2:A2:E9:1A:A4:33:4C:1E:6D:9E:C4:2E:06:58:67
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:e7:e1:f6:d0:2e:6b:71:55:b3:d2:cb:a9:2e:b9:cb:65:
         76:1e:cb:84:9a:5f:f6:88:5e:26:8f:1a:30:ef:ff:b7:9f:03:
         44:cb:0f:68:7a:39:ab:68:9b:36:72:9e:8a:2e:65:74:24:ec:
         f7:f5:58:7a:4e:af:8e:8b:23:bc:66:4d:11:74:84:04:19:42:
         df:72:08:53:97:e4:e9:c8:f3:46:c3:db:b5:e0:9a:ec:4d:d3:
         7f:13:e6:07:7a:69:55:89:a2:a2:d7:c3:a2:0e:a5:39:6a:2c:
         67:82:67:8a:fe:fd:62:23:d0:84:55:9b:d0:31:07:dd:44:9e:
         3a:36:90:b2:2e:e8:ca:15:4b:c4:17:3f:f7:a6:81:05:ed:c4:
         91:c6:ca:a6:1d:64:50:42:0d:48:72:be:b2:c0:9a:88:9e:74:
         0b:c0:fa:44:5f:50:b7:8e:94:ba:96:0b:cf:30:36:ab:4e:cd:
         94:df:e0:7f:52:22:50:07:07:a0:6c:05:70:94:3a:42:c5:dd:
         f7:16:7d:de:7d:ee:8b:b9:d1:65:3e:87:8e:68:d2:a4:68:7c:
         bd:0f:4a:a6:03:11:b3:a1:e6:82:af:6d:e7:cf:65:5d:7f:65:
         d9:58:70:10:09:e6:5d:31:56:ab:98:97:01:2b:77:c1:33:24:
         6c:93:44:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kcZNaauk5QoD3ELhRE6ijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQyZDUyMzdiZTMzZmRjZDM2ZjA1ZDk0OWNjOTE4ZTQ5
NzI3MDkwHhcNMjYwMzI1MTAwMTU2WhcNMjYwMzI2MTAwMTU2WjAzMTEwLwYDVQQD
EyhkOTg4N2Y2YTkzYzJhMmU5MWFhNDMzNGMxZTZkOWVjNDJlMDY1ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljVGqXQbTT1DWmffbSEJldaK7zSg
2tKiP2UsHqyc/7W+A68EBKJOMxKW/9Dyqarm55gzfCDSfN1AF3/i0DdCT7B2rNUS
oUmK+WuxWES1GLn/bCO8AfZcbbi2gXs8Jas1ckBPodBOXbE2YEoCrrg/KCvdD08M
2j34OFCwLo7gD0iV5SEeavl/YO+F0sIbwwwZdzORLw9Rj83TT1VvEYm8mSaCbmV6
YyPsGIjTxEuYd1vRt9u3G7l6yQAlzU0mNeiRf+bUGphT/NXkb/DxLsZHRthxvsxc
gX2yJXx+p9HFFYo0h3sGNxWU0mSe2ha1FQPEJDFCnt8lC7UrFiQyYCrXSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmIf2qTwqLpGqQzTB5tnsQuBlhnMB8GA1UdIwQY
MBaAFFS0LVI3vjP9zTbwXZScyRjklycJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTkt
Yjg1NTEzYzZmMjM2LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTktYjg1NTEzYzZmMjM2
LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqDn4fbQ
LmtxVbPSy6kuuctldh7LhJpf9oheJo8aMO//t58DRMsPaHo5q2ibNnKeii5ldCTs
9/VYek6vjosjvGZNEXSEBBlC33IIU5fk6cjzRsPbteCa7E3TfxPmB3ppVYmiotfD
og6lOWosZ4Jniv79YiPQhFWb0DEH3USeOjaQsi7oyhVLxBc/96aBBe3EkcbKph1k
UEINSHK+ssCaiJ50C8D6RF9Qt46UupYLzzA2q07NlN/gf1IiUAcHoGwFcJQ6QsXd
9xZ93n3ui7nRZT6HjmjSpGh8vQ9KpgMRs6Hmgq9t589lXX9l2VhwEAnmXTFWq5iX
ASt3wTMkbJNEVw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:29 2026 by rpki-client