Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft
File:                     VJcl8CZ02ckanUftGdAHkoBiO1U.mft (raw, json)
Hash identifier:          Id4jtPNk1zD4yQMk+6SdzUHMV3FyruNhhph8VuC4mGs=
Subject key identifier:   3A:E3:EB:14:D9:44:FA:37:11:0C:FA:BC:19:DD:CD:E0:77:41:55:56
Authority key identifier: 54:97:25:F0:26:74:D9:C9:1A:9D:47:ED:19:D0:07:92:80:62:3B:55
Certificate issuer:       /CN=549725f02674d9c91a9d47ed19d0079280623b55
Certificate serial:       019D25BAA0BBDFC401892C829DBEFC1FDCC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft
Manifest number:          0155
Signing time:             Wed 25 Mar 2026 16:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:20 +0000
Files and hashes:         1: VJcl8CZ02ckanUftGdAHkoBiO1U.crl (hash: mnu6FlY/ZdlK574012jQwF6WGJmSxzgfIMubMq1Z0Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:a0:bb:df:c4:01:89:2c:82:9d:be:fc:1f:dc:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549725f02674d9c91a9d47ed19d0079280623b55
        Validity
            Not Before: Mar 25 16:01:20 2026 GMT
            Not After : Mar 26 16:01:20 2026 GMT
        Subject: CN=3ae3eb14d944fa37110cfabc19ddcde077415556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:d2:b6:4c:43:0a:e3:f6:53:b8:32:56:a8:
                    70:71:8a:05:13:3c:96:13:7a:ab:e8:68:92:69:74:
                    d9:3f:6c:c2:50:2f:77:a7:ac:85:08:c4:81:df:ef:
                    2c:45:11:9f:f8:ca:c9:d4:97:e2:5f:e6:fd:e7:13:
                    3c:2b:92:8c:c9:5a:e8:f9:e8:8b:7d:b8:1e:16:32:
                    b9:1b:77:95:15:76:fd:28:ea:93:aa:1c:59:fd:71:
                    23:9c:d5:3b:80:f2:38:44:54:d7:43:09:3d:9d:27:
                    c0:fb:82:ee:92:15:3a:d6:af:a7:d1:35:13:8b:63:
                    1d:e3:39:e8:dc:06:df:ca:ba:9a:ba:92:6d:e7:eb:
                    3b:e0:f2:64:61:e7:6a:6c:ce:45:c8:36:41:59:ad:
                    c4:f5:72:40:c2:72:1a:16:4f:23:16:23:7b:a4:62:
                    87:02:76:80:52:45:cc:e6:9e:b5:24:f1:98:b9:63:
                    eb:cd:f2:e5:70:eb:b1:c2:0e:06:d9:32:6f:37:4e:
                    4a:c1:2b:83:e3:fd:0b:01:88:8a:4a:5e:ef:0b:73:
                    ff:85:a3:9e:08:f2:c4:84:cf:a3:2b:d2:f4:77:08:
                    f2:58:b7:32:fd:3b:cf:4f:47:7d:20:03:95:10:92:
                    55:d8:54:f2:45:2a:35:10:9a:ac:04:83:1c:10:df:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:EB:14:D9:44:FA:37:11:0C:FA:BC:19:DD:CD:E0:77:41:55:56
            X509v3 Authority Key Identifier:
                keyid:54:97:25:F0:26:74:D9:C9:1A:9D:47:ED:19:D0:07:92:80:62:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:6b:7b:fb:ec:9c:41:3e:04:eb:1e:f6:e9:79:9f:c8:10:
         67:7c:d0:99:f1:30:44:76:7a:2e:a7:36:39:0c:38:03:8f:68:
         8b:0b:64:32:a6:a0:9c:ec:8d:9c:df:12:a5:2f:83:0a:17:02:
         84:3d:57:cd:eb:a3:13:7e:3d:3c:73:f6:8c:22:5d:32:38:0e:
         d6:be:7d:7e:c5:aa:96:4e:f7:e1:8c:71:24:f1:a5:ae:15:04:
         38:d3:07:95:33:c9:46:d7:9c:5a:3b:c5:db:87:b5:41:2b:98:
         0c:89:b6:8f:3f:05:3f:2d:29:01:bc:34:62:47:10:ee:b4:a9:
         43:3d:8b:dc:c9:36:a6:8a:5d:41:5d:5f:29:05:55:1d:0f:5c:
         6d:ba:93:b1:1f:ce:9c:0f:b3:24:aa:7a:cf:61:c2:91:ba:b1:
         0f:fb:50:e2:fe:61:f8:a9:77:be:16:73:ce:69:e4:08:33:a8:
         db:0a:67:e9:53:c2:b0:e2:0c:4e:78:8b:75:96:17:7c:62:89:
         77:35:e1:ed:77:9f:56:ef:bf:be:1e:83:c9:16:4b:ce:cf:d2:
         17:f7:ab:fa:1f:82:51:e4:10:c5:a9:b6:4d:44:03:82:66:2c:
         c8:ba:fe:8e:f5:4f:49:73:65:72:46:72:37:38:f2:1b:5b:db:
         f6:a4:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:03 2026 by rpki-client