Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File:                     VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier:          SbENp7HmMg1Rh24aGdBmwqp3ZVZ9KxknfMxHvHMf7SI=
Subject key identifier:   E6:77:2F:39:44:0E:21:BA:3E:98:E0:52:6B:5A:22:DE:4C:61:0A:F1
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer:       /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial:       019D273B1E5BD9CD7D848D3ADE409C605DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number:          103B
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: ZAl+e5TneSLFDC+cKqA4u2QpJVUgRKt5PGdV8cmS44k=)
                          2: j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa (hash: rc09LpGqWbk6PYA80jVQRNeDW2Q3wDT/cj8KXISR7eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1e:5b:d9:cd:7d:84:8d:3a:de:40:9c:60:5d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=e6772f39440e21ba3e98e0526b5a22de4c610af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:36:ed:62:f9:c8:25:54:0b:2a:40:4c:78:
                    c3:0e:27:3b:96:64:01:52:35:e2:b7:eb:f5:81:49:
                    d3:6c:30:77:22:13:bd:9e:d5:2e:bc:ec:04:5a:76:
                    d8:b8:ab:b5:7d:66:72:92:6a:56:08:9b:23:97:71:
                    3f:fb:5f:41:e8:4e:0e:42:fe:f2:93:60:94:ac:a9:
                    45:79:da:4d:dd:65:c8:46:d1:cf:cd:94:e2:c7:56:
                    8a:fd:90:75:63:65:f7:2b:ca:4c:93:5c:ee:b0:79:
                    4d:81:eb:bb:e4:17:1b:44:84:5c:de:e7:13:5a:e7:
                    7c:30:e5:bd:0b:dc:c0:78:9e:a6:f4:98:b6:9a:c2:
                    9c:81:56:6d:fb:60:56:d9:ae:07:6d:62:7c:88:24:
                    de:d1:5c:b0:4c:ae:f9:03:76:0e:6a:97:02:f0:61:
                    44:66:70:dc:29:a3:37:de:e0:e8:62:42:64:5f:4f:
                    37:41:b9:91:25:69:48:d9:9d:d0:67:a7:86:06:81:
                    d4:6d:58:87:d2:f7:b9:52:db:45:10:39:27:f7:f4:
                    aa:68:47:c1:e3:35:6b:ab:59:87:9b:15:f8:34:77:
                    00:f7:a9:4d:fa:6d:d7:38:ad:30:75:d4:c0:e4:c1:
                    97:a9:dd:e8:80:8a:79:ee:6f:c7:9a:05:cf:7e:e8:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:2F:39:44:0E:21:BA:3E:98:E0:52:6B:5A:22:DE:4C:61:0A:F1
            X509v3 Authority Key Identifier:
                keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:71:7a:b1:2b:4b:22:3e:40:6c:cf:a7:76:e5:8f:e8:e8:56:
         bc:87:b6:e6:4e:b6:9f:7d:c9:eb:06:e8:1b:c7:ba:c4:dc:18:
         65:02:07:e2:f5:31:dd:49:bb:20:9d:ac:65:61:1b:1a:7d:75:
         44:e4:f8:62:db:99:18:87:fe:21:7e:e1:62:b8:67:92:3d:fe:
         16:51:fa:bc:fa:7c:b9:b6:7f:a3:cc:8a:f0:82:79:32:a4:ea:
         0f:50:9f:f7:f5:f0:7e:2f:42:b1:95:4f:d4:45:12:f6:7b:c3:
         54:f2:01:7c:82:af:4c:67:ff:09:89:a9:c4:25:bd:45:5d:df:
         3d:8f:1a:e0:ef:31:85:3c:c4:ca:a9:65:0f:66:81:e1:62:31:
         2e:6e:f8:20:b3:37:69:9d:d1:38:3c:03:9d:24:3c:a7:12:ad:
         d1:82:d1:ea:b8:7e:47:04:46:ae:d8:c7:b2:81:99:ff:34:2e:
         6b:46:ac:d7:fa:7a:e2:a2:3c:0a:f4:12:61:ff:9e:d8:97:3b:
         bf:42:86:74:96:fd:6c:d8:50:ea:12:97:b4:88:cb:77:d7:6b:
         29:63:65:0b:e6:e1:c6:fc:c8:02:d7:74:10:c7:4d:be:01:52:
         c8:3a:06:7c:1b:5b:f8:8e:fe:a2:67:e5:0a:40:3a:9b:7e:92:
         ef:99:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:28 2026 by rpki-client