Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          qRY9P3636fce1kfkEUBEBIRPgkKb3qwvi0ka2ymFQ0Q=
Subject key identifier:   7D:D6:6B:39:A0:53:04:02:67:1C:02:BD:FD:D1:2C:59:23:12:FD:A1
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       019D25F16F7AE5709C465A7EEB0BF4B88995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:12 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: uRZTjzGlzftHGtI0pBa+R/7I7Ykz75hRmC0daTg7WTk=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:6f:7a:e5:70:9c:46:5a:7e:eb:0b:f4:b8:89:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Mar 25 17:01:12 2026 GMT
            Not After : Mar 26 17:01:12 2026 GMT
        Subject: CN=7dd66b39a0530402671c02bdfdd12c592312fda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:22:85:b3:bf:64:31:c2:da:59:c7:60:e3:
                    49:e0:7b:d8:1a:e0:28:dc:fc:99:b0:3e:cb:82:38:
                    27:7a:3a:53:b3:ef:32:bb:db:1a:d3:c0:e4:4c:d4:
                    e7:c0:f8:59:77:09:36:f7:55:01:d8:5b:c3:28:14:
                    a3:70:0a:05:5d:8a:b3:84:31:36:02:4c:c8:a5:e9:
                    5d:25:9e:29:22:c8:10:16:17:af:00:2d:ea:0f:88:
                    3b:c8:49:5e:d5:c1:63:21:07:37:df:2f:07:da:e4:
                    2c:ea:6b:d8:76:f8:b0:d8:8f:f5:10:4b:7f:f4:9f:
                    eb:bf:a3:30:19:c1:e5:ea:8f:5c:f0:6b:2b:75:d0:
                    e3:3f:0e:58:6b:75:24:ce:e1:0e:86:e8:8a:22:ac:
                    52:87:7a:dc:85:28:51:15:08:a8:71:61:60:5e:25:
                    9c:a7:79:20:50:d5:80:73:f6:2e:35:7d:0c:3f:81:
                    f0:20:ac:fc:71:3a:39:03:b3:cc:a2:97:ca:98:27:
                    25:b5:f2:a3:35:4f:86:fc:7b:90:93:64:60:f4:89:
                    ca:33:85:7a:20:73:7f:f8:e8:d6:a7:c2:3a:76:83:
                    42:4d:57:ea:4a:26:51:bf:bf:f1:ad:de:08:f9:52:
                    a4:b9:35:73:3c:ce:e2:21:dd:cc:24:0a:c0:e7:91:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:6B:39:A0:53:04:02:67:1C:02:BD:FD:D1:2C:59:23:12:FD:A1
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:b9:88:d1:23:e0:49:d3:35:77:98:2c:9b:33:4c:c0:23:
         ae:28:72:4d:d8:ae:e9:74:5a:dd:ae:02:c9:b2:8f:27:a1:f1:
         cc:68:0c:17:5a:8c:5c:c7:0e:ca:99:92:6e:85:2c:33:e3:0b:
         11:d7:4d:b0:f8:ea:28:00:2e:cf:34:6d:e1:43:8a:40:1e:be:
         3f:77:4b:53:91:43:88:58:d3:47:bd:32:09:91:e7:64:e3:e7:
         68:1a:0e:93:e8:3a:b7:d0:9a:6e:ad:d3:61:d7:b9:09:41:cf:
         af:ab:8e:25:1d:08:d6:57:9d:12:03:87:ac:49:06:88:ca:02:
         49:57:12:5d:76:6c:f8:1b:26:17:a7:a9:88:b4:39:36:10:d6:
         e0:53:4a:af:34:2e:66:16:64:97:de:f3:a0:85:69:83:95:63:
         b8:99:5c:b3:5f:db:2f:e0:40:d9:f3:db:5b:36:56:95:d0:a5:
         44:d0:ff:b7:94:a4:be:c8:e2:1d:dd:98:74:0b:e2:15:eb:e0:
         04:e9:1b:99:64:16:d4:00:20:5a:d3:97:da:e6:7f:07:92:17:
         ac:00:09:cd:7e:2f:ff:8d:98:fb:7f:cc:c5:a9:5b:03:71:ed:
         64:08:9e:6f:9d:d1:bc:08:af:76:78:2c:cc:15:cf:00:ff:5a:
         28:22:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:58 2026 by rpki-client