Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File:                     VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier:          0mtHuWunhPFb37dzYpkImPqvmSkmmDkLG0DchYdHBFE=
Subject key identifier:   48:AE:B2:7E:4C:D9:FE:5F:B4:95:94:BA:58:8F:DB:8F:28:C7:EC:FF
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer:       /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial:       019D2884DAE1D8D79F164558D9C763E9BBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number:          0ED8
Signing time:             Thu 26 Mar 2026 05:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:28 +0000
Files and hashes:         1: FUHCBWvFrD-fPGoF0u_Zgw_7R3c.roa (hash: UgfMlpZ5XPwvnxTFMVPwY/dmDGcrnRN+mSGfC57sWfg=)
                          2: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: RvIbPdBTlHPmWYceBtLVBZpv8Gsq2f1AJzcUUbVi6HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:da:e1:d8:d7:9f:16:45:58:d9:c7:63:e9:bb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
        Validity
            Not Before: Mar 26 05:01:28 2026 GMT
            Not After : Mar 27 05:01:28 2026 GMT
        Subject: CN=48aeb27e4cd9fe5fb49594ba588fdb8f28c7ecff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:eb:fd:cc:10:a8:22:58:12:eb:a2:1c:c4:
                    c9:13:83:d0:65:b8:37:8a:de:28:f2:25:09:3e:27:
                    b3:52:35:61:1f:b0:0d:c2:4f:f5:b2:23:f8:84:fa:
                    f5:35:eb:21:5b:59:c0:08:39:7d:91:14:bc:87:74:
                    f3:9d:ae:e0:44:ee:2b:cd:ab:58:0c:d6:41:e9:db:
                    ca:c7:8b:1a:42:ff:9a:a5:a8:8c:61:15:c9:ac:24:
                    4e:61:78:bc:6a:96:ba:16:6f:43:97:26:25:65:d0:
                    5b:f0:9f:80:82:50:1d:25:90:7c:67:79:6e:ad:d5:
                    19:10:09:e7:2d:50:89:09:d2:fb:7a:ea:08:0e:a9:
                    12:d8:a5:49:b9:94:92:20:69:8d:96:e5:fa:a9:2d:
                    87:4a:ff:2c:84:f5:26:44:41:71:79:7b:79:9d:dc:
                    6f:18:73:1f:4d:e5:de:3f:9e:55:69:09:4a:8f:fa:
                    73:10:f6:b9:48:f8:6b:72:7e:6f:c7:cd:f6:d6:3d:
                    ad:51:a5:bc:cb:8e:42:1a:6b:54:af:35:33:cc:c2:
                    4b:8f:f8:83:c4:bd:f5:c5:92:d5:76:3f:b7:2f:17:
                    71:88:fd:e7:f2:0e:d6:20:74:ea:db:52:e2:ab:ff:
                    57:9e:dd:e8:d7:f0:ff:6b:da:bf:4d:94:23:c0:59:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:B2:7E:4C:D9:FE:5F:B4:95:94:BA:58:8F:DB:8F:28:C7:EC:FF
            X509v3 Authority Key Identifier:
                keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:0a:e1:e7:cd:d6:d7:4e:15:13:41:b9:ce:45:0b:83:0f:d9:
         0c:28:ae:e1:3a:df:05:af:b2:ae:18:de:6e:29:b3:56:9a:fe:
         60:18:da:a1:b1:db:8e:dc:95:10:e5:61:da:39:93:f8:d9:c7:
         ed:5d:9d:f0:86:2c:da:a4:da:60:4d:3c:01:9a:2c:db:a2:36:
         ff:4d:ea:a6:4e:4a:46:15:02:60:f9:80:4b:1b:04:93:53:04:
         d5:a1:91:db:90:39:35:8c:64:17:9a:ba:6b:3e:c6:e1:9b:6b:
         dd:58:90:df:df:66:73:3f:5b:01:09:61:66:71:ab:3c:f3:f7:
         53:15:61:11:e2:3c:73:de:bb:5a:6a:93:79:ba:10:6a:62:03:
         3f:f9:25:07:69:da:a3:5c:bb:05:17:85:2d:b9:b7:41:9e:ac:
         c6:60:19:ea:f4:ed:1c:29:65:64:fc:af:af:83:fd:8e:5d:1b:
         de:01:fb:38:d8:6b:e5:a1:1a:f4:a7:75:07:6b:ab:de:51:ef:
         2e:db:77:a0:cb:f0:1a:1f:d6:92:94:82:1f:9d:f7:58:a4:b6:
         f6:d2:47:2f:f3:e6:0e:e9:f7:09:35:43:62:d0:f8:cf:c1:20:
         e1:e4:40:63:4c:45:f9:d8:45:8a:a6:71:7d:fe:38:30:65:2e:
         76:bf:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:40 2026 by rpki-client