Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          KAkh5KrM3yWNpbk+yyBNBPYydwJwZTElMeH/kXf6ocs=
Subject key identifier:   7B:CE:E6:DF:AA:A3:2E:53:C5:B5:05:87:10:F5:C7:97:D5:D1:17:BB
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       019D284E3B6005BD5B468F26D305A55ABCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          10F1
Signing time:             Thu 26 Mar 2026 04:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:48 +0000
Files and hashes:         1: V2cjOhTQXe6Evf6XRnc71HEafpI.roa (hash: kxeF/2UnyuUG3dI7TNbvTa7lcDx1pSDsD3opjO0zHiI=)
                          2: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: UZjQLbQmTfPZNrrJcWG/XsDi0asD5mMSbC5wGeHuHsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:3b:60:05:bd:5b:46:8f:26:d3:05:a5:5a:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Mar 26 04:01:48 2026 GMT
            Not After : Mar 27 04:01:48 2026 GMT
        Subject: CN=7bcee6dfaaa32e53c5b5058710f5c797d5d117bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:19:00:d6:0a:1a:c7:5e:a3:30:24:ba:0e:
                    c8:32:a0:05:5e:1e:cd:a4:e1:fa:dd:86:e1:3f:24:
                    de:f6:34:da:59:90:13:7f:e2:00:bb:35:00:67:9b:
                    ff:10:54:b3:69:f5:2e:22:77:3d:5f:fe:2f:f1:03:
                    db:80:02:98:3e:5d:8b:47:e2:f5:62:42:0b:88:81:
                    a0:ba:33:10:bc:77:ef:2f:92:87:d3:41:96:bf:b7:
                    39:00:28:63:4b:e7:5b:59:b5:21:e2:1a:de:6d:8d:
                    31:68:22:26:7a:9a:d6:67:fd:1b:3a:8c:22:41:74:
                    bf:bb:72:85:7c:21:f1:96:f3:c9:4e:65:21:c1:13:
                    8e:c5:e0:ea:fe:b9:ae:5e:82:ce:ce:0a:e9:d5:6c:
                    4c:8e:a6:f3:5c:35:71:37:81:27:1b:49:f7:bd:6b:
                    2c:8f:3d:26:2d:ee:f8:7b:56:62:94:34:d5:05:59:
                    02:c1:d7:23:f1:19:53:91:e3:dd:d6:d8:c0:68:e1:
                    62:79:9d:b0:58:4a:25:75:3c:46:de:9f:dd:12:c8:
                    8c:17:ec:7b:3e:76:7f:3e:3d:64:af:e7:26:3a:c3:
                    dd:49:ed:e4:a5:71:d8:e1:a6:dd:d7:66:61:03:0f:
                    50:af:eb:af:06:c9:15:35:b8:7d:17:f7:d4:7a:95:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:E6:DF:AA:A3:2E:53:C5:B5:05:87:10:F5:C7:97:D5:D1:17:BB
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:15:7a:85:c3:81:52:bd:2e:62:82:bd:9e:33:78:a3:ee:
         eb:bb:f2:87:91:5d:c9:a1:69:8d:35:a9:0a:be:a4:17:db:f7:
         c3:17:24:70:1f:2d:bd:4b:ce:ec:c9:2d:85:00:01:c6:87:f2:
         ff:11:d4:38:de:c9:ed:a4:a6:9d:97:de:2d:75:37:34:cf:82:
         41:ff:c6:77:a3:f4:47:41:6a:f6:5c:34:13:cb:1f:76:be:bd:
         bc:3e:35:8d:45:61:47:1c:94:61:ec:ab:2d:a1:37:26:0a:3b:
         04:c1:40:f3:58:bc:6c:a8:4b:71:ac:81:26:7c:a1:d3:6d:83:
         df:bb:46:51:3b:68:35:15:ec:23:5a:07:df:3b:63:6a:ec:66:
         d6:b7:a7:b7:f7:60:52:5e:9e:ac:cb:34:a6:a4:1f:3b:ff:6b:
         be:4c:b3:fd:43:b3:6b:30:49:88:53:90:a8:52:a6:ef:cd:e1:
         f1:65:98:39:f2:7a:47:e6:10:21:e7:a5:31:fe:7d:f1:36:bd:
         8e:01:75:2f:a9:eb:c7:88:6a:d1:28:94:09:14:64:f3:d2:e6:
         43:51:b5:61:1e:c1:b6:06:42:51:85:53:1b:e4:3c:ed:89:0e:
         c5:20:08:8e:cc:3c:fc:75:93:9c:e5:62:c4:f5:2f:f2:3f:b5:
         02:85:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:37 2026 by rpki-client