Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File:                     VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier:          ueRXobCsKC2y8wjKlQpl8cUB2fWZblA6pIPNQyfYhTA=
Subject key identifier:   C9:AB:6E:65:6E:E7:3B:43:00:EC:99:F7:7F:00:17:91:C5:A3:B4:BA
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer:       /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial:       019D2AE15104C3DAB2E82D18A09E109F779F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number:          07C1
Signing time:             Thu 26 Mar 2026 16:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:42 +0000
Files and hashes:         1: 6BRNGEc-yI-LaV9wXNJpVpORCRo.roa (hash: xpVt+t681dM8x0OZBMnJR9/9LbsCdO2uDFKH45Cg9B4=)
                          2: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: xe/ypz1lm3dhKn/l8Tx5dhJqplP6c/tjjLDr6cXuZww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:51:04:c3:da:b2:e8:2d:18:a0:9e:10:9f:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
        Validity
            Not Before: Mar 26 16:01:42 2026 GMT
            Not After : Mar 27 16:01:42 2026 GMT
        Subject: CN=c9ab6e656ee73b4300ec99f77f001791c5a3b4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:6e:c6:87:18:d6:da:47:a3:5d:ba:3c:87:
                    e5:d2:cf:73:e3:50:10:fc:d5:d2:ec:36:57:22:67:
                    99:2a:57:68:29:94:16:41:67:48:28:64:aa:63:7e:
                    8b:ac:2e:a2:dd:b6:5b:46:5a:6c:84:7a:50:2a:3e:
                    c7:3e:16:50:e6:f2:27:ce:bd:c1:25:7f:9b:88:1b:
                    3e:33:d2:f6:bc:ce:41:5b:02:eb:29:57:39:6d:3a:
                    8b:9c:35:ef:46:52:dc:dc:e4:5e:97:ab:46:50:cc:
                    ec:25:39:b3:ad:b9:5f:59:78:19:77:98:83:9f:78:
                    ba:1c:47:1b:3c:c1:fe:bc:d5:0a:35:93:11:03:42:
                    d2:8b:84:0a:d2:93:c3:cf:a4:cf:b4:a8:ec:1f:5d:
                    6a:c3:bc:3b:9f:c3:02:88:79:46:8f:16:f6:46:92:
                    d1:ca:32:b3:f7:cf:e3:5a:ef:ae:9b:69:65:27:00:
                    e7:85:39:73:a3:f8:08:65:d3:95:9e:95:36:b7:0b:
                    1f:e0:3d:27:50:ea:aa:15:00:5e:d1:58:4a:cb:9a:
                    17:e1:84:df:24:91:90:e6:9a:6a:ff:ce:e7:2a:41:
                    13:05:bb:28:d9:fd:7f:f1:63:03:ac:cc:7b:c4:99:
                    e9:61:88:a7:af:34:02:65:b6:61:7e:d0:bd:db:e8:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:6E:65:6E:E7:3B:43:00:EC:99:F7:7F:00:17:91:C5:A3:B4:BA
            X509v3 Authority Key Identifier:
                keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:44:4d:71:cf:76:46:f4:f4:37:ec:44:5c:a9:6a:a6:20:
         2a:aa:c8:69:2f:27:36:09:19:48:ce:05:e7:af:3d:80:5d:b4:
         ce:dc:8b:cd:4c:6d:1c:d4:aa:3f:12:83:7f:4d:c3:de:2f:ed:
         bf:d7:3d:c9:99:15:a7:1d:45:15:11:cd:4f:0c:42:42:67:2f:
         97:ae:48:b5:44:f7:94:2b:0a:3f:fd:70:96:19:07:74:ea:b3:
         1f:49:da:cc:f2:05:08:ed:17:08:3e:8c:0f:93:39:82:94:85:
         34:81:10:53:cd:d5:79:1c:cb:c7:52:3b:e1:b4:b3:62:07:9b:
         bd:28:0a:b6:14:87:a1:48:df:8f:b4:69:ee:8a:55:c1:47:d7:
         1e:58:4f:7a:ee:40:78:72:28:53:c4:96:1a:50:f0:1a:b9:72:
         4c:88:98:2b:a4:1f:a3:65:ab:ce:5f:ee:8e:1a:fd:f4:5a:49:
         cb:65:12:d9:66:6e:e0:48:83:31:6e:e1:26:2b:44:e5:fa:92:
         2b:31:43:56:09:48:02:d8:8a:ee:27:23:fb:9d:19:bf:be:0c:
         52:fd:87:e5:71:89:b7:0f:f1:e1:ce:b5:62:34:bf:4d:9b:b0:
         76:16:4b:d4:31:7e:57:5a:05:ba:35:c2:71:46:97:22:bf:5a:
         91:b9:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:00 2026 by rpki-client