Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          WKT0lfhdR/qEZbU6pCGaSrPPbvtDBeSFMT7fTBrurnc=
Subject key identifier:   2A:B3:AE:0F:EA:99:8B:A1:C8:DF:F1:16:62:DF:AC:2F:F3:69:2D:17
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       019D29297A788CEA903C44184DA3081A71F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          03B8
Signing time:             Thu 26 Mar 2026 08:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:17 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: r+yeyZhNNkvNT4aJGoxpruhyOJ+YjR1+jIza5TlwvvQ=)
                          2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:7a:78:8c:ea:90:3c:44:18:4d:a3:08:1a:71:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Mar 26 08:01:17 2026 GMT
            Not After : Mar 27 08:01:17 2026 GMT
        Subject: CN=2ab3ae0fea998ba1c8dff11662dfac2ff3692d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:96:81:2d:19:e4:52:3f:78:0b:80:70:1c:
                    1c:f8:65:e4:4a:b2:7b:f0:b6:60:a1:9d:83:38:8f:
                    a4:7b:d2:0b:35:75:4f:d9:56:da:09:4d:1c:30:ae:
                    a6:55:90:4b:cf:a4:f4:fd:e1:98:7a:66:36:de:9a:
                    bc:aa:ba:b6:2b:dc:72:1d:a0:d1:1e:b7:93:fd:bc:
                    7b:7d:3b:62:47:dc:b2:47:cd:46:9c:09:01:9b:81:
                    f7:24:8e:4a:65:0f:75:ba:53:1f:72:ff:bc:fa:1c:
                    ba:8d:5d:df:89:03:ff:e2:a9:d1:2a:5d:47:a8:f3:
                    0f:72:5c:56:e2:0b:9b:92:dc:9b:60:e1:01:5e:8e:
                    75:1e:84:ad:31:48:a6:51:6b:a4:ad:d9:e8:f9:9b:
                    94:0c:16:24:a4:f1:b4:90:83:1a:69:69:87:47:d6:
                    60:2e:cd:0e:38:98:cb:6f:12:30:bc:24:da:aa:9b:
                    ab:92:68:ea:81:51:07:f7:2f:64:9b:ba:43:cf:6c:
                    db:f5:db:da:9e:69:b5:92:6a:1e:da:02:38:15:15:
                    64:47:03:f4:f4:db:2a:bf:3c:9f:f0:c6:e4:c9:09:
                    12:22:c7:4b:be:b5:7c:32:42:68:4d:b3:14:07:c4:
                    5c:91:e4:76:37:95:bb:6f:89:9b:6e:7b:1c:d0:a8:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:AE:0F:EA:99:8B:A1:C8:DF:F1:16:62:DF:AC:2F:F3:69:2D:17
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:cd:b1:f7:50:fa:17:dd:5f:81:88:2a:79:41:2a:a2:5c:
         b3:59:c5:a5:17:2f:71:02:7b:13:6e:cb:ad:6c:2d:90:45:58:
         cd:25:ec:de:31:bd:96:56:f4:5d:f2:ba:c2:0f:2b:dd:f1:93:
         b3:98:4c:96:5e:92:aa:2f:a9:23:da:85:ff:a0:74:85:b3:8d:
         31:65:ae:a5:68:65:a6:90:1a:7d:c4:ad:23:f8:87:08:d0:08:
         02:e5:bb:45:38:fe:e1:b4:a7:d8:b0:60:79:58:cf:a4:3d:de:
         07:3f:3b:79:38:55:b7:79:ea:8b:17:f4:4e:81:17:62:dd:27:
         d7:be:7a:6f:18:14:0e:67:b5:15:af:ba:67:1f:fe:5f:9c:c9:
         2b:94:6c:be:b5:e0:c8:da:a4:41:7d:27:48:93:ce:2f:fb:c2:
         34:4a:ad:2a:91:56:5b:d3:09:df:07:f5:66:ae:fe:f6:b9:3a:
         c9:f7:fc:98:d7:63:e4:25:51:6c:9a:1d:75:9c:1b:80:57:8b:
         6b:00:81:a3:30:b4:4f:8d:21:2c:57:8a:77:c2:7e:eb:77:fa:
         5c:a2:60:3b:91:7b:64:cc:52:23:63:96:f8:c5:2a:ee:0e:e8:
         3b:a7:48:50:46:f6:d5:c3:ad:90:9c:5a:7b:5b:71:55:f1:d8:
         47:39:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:28 2026 by rpki-client