Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          3wI5ObwHttQh0bjiqOaE8ihHY947M3p8DltqxP0z+nM=
Subject key identifier:   19:10:9B:E5:17:E4:55:0A:26:95:BF:CA:40:28:B4:A7:50:8A:44:58
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       019D28F222B6E50A65D49533C28000D4BFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 07:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:50 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: K5Xru1JKRT1LIlecDFSXFePwVas0/D2o79Vys698s9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:22:b6:e5:0a:65:d4:95:33:c2:80:00:d4:bf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: Mar 26 07:00:50 2026 GMT
            Not After : Mar 27 07:00:50 2026 GMT
        Subject: CN=19109be517e4550a2695bfca4028b4a7508a4458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:5b:ec:ab:28:ed:da:20:41:f0:fc:73:5a:
                    39:9a:a6:bd:17:82:f3:3e:0f:f2:87:ce:1e:fb:fd:
                    24:c0:96:0c:e2:ff:f8:87:23:a3:8e:6f:12:af:24:
                    35:e1:f7:31:55:5a:c0:f3:51:59:61:bb:78:cf:dc:
                    15:5b:88:8c:c5:ff:36:62:87:3b:c3:b0:5c:15:93:
                    a7:15:46:c1:ae:17:bc:b4:5e:d7:64:45:4b:8e:82:
                    df:6f:fb:51:77:d6:bd:21:1e:d6:1e:ab:9f:6c:35:
                    3f:76:34:b3:20:5a:58:fb:6c:81:47:81:6d:37:43:
                    21:a5:c7:d1:60:3e:96:a3:17:fc:72:5f:8e:bc:49:
                    dd:e9:59:9d:5a:12:8e:cd:76:97:6a:65:6d:10:d3:
                    6b:e2:52:08:84:ab:ba:f4:42:d2:58:cd:f3:58:df:
                    db:3a:61:d6:b2:a2:70:5c:a3:f5:41:33:0f:e9:d5:
                    00:fd:3b:3a:e7:c8:a2:b3:1c:c3:ca:7c:a8:21:fa:
                    6e:91:57:61:da:fa:ab:c0:a0:ab:7a:b4:40:57:4d:
                    30:24:86:ac:f9:03:80:bf:82:52:97:94:01:0b:95:
                    58:30:83:3f:f5:19:a3:2a:ea:50:ba:48:21:7e:82:
                    e8:93:2b:c7:59:bd:7f:04:83:a1:26:17:aa:0a:89:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:10:9B:E5:17:E4:55:0A:26:95:BF:CA:40:28:B4:A7:50:8A:44:58
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:56:7c:b6:f2:fe:ef:c2:5c:2f:7b:11:4e:d4:26:db:0c:
         80:f0:5e:84:6c:2d:52:ba:43:bb:9a:04:87:5f:ef:eb:19:a8:
         89:2a:10:fb:d6:60:9c:2f:1b:5d:7f:07:b0:ab:19:77:ef:37:
         14:0d:aa:a5:7e:19:4d:d0:03:9f:a8:f5:2d:26:01:63:1e:1a:
         87:21:86:76:c4:ab:3b:5a:20:f0:14:7a:68:92:a9:5b:5e:83:
         6b:df:aa:44:f6:42:4f:c7:83:0c:98:34:45:91:37:d8:8c:3a:
         a6:a4:eb:ab:29:78:88:55:01:9f:46:20:2c:f8:f2:76:50:6e:
         e9:74:35:0b:25:f1:32:d3:07:3d:bc:4a:a0:5e:45:77:6a:36:
         19:09:58:8b:78:5e:f3:d4:31:2e:f2:3b:82:9a:8f:12:89:d9:
         b2:de:ff:c8:0b:9f:f9:77:62:5c:a8:d2:a9:ea:17:4e:68:f1:
         0d:ce:f2:93:2f:e2:a6:73:d6:07:47:e7:99:0e:c2:e5:76:82:
         cc:cc:a8:ff:e8:1e:89:1f:75:ce:63:23:e5:38:88:fa:8a:81:
         00:05:bc:2a:03:62:06:fa:39:b0:59:5a:61:cd:69:56:36:f3:
         a3:cb:f5:6d:84:ae:b2:a9:6d:2f:20:bf:53:d5:e6:49:22:42:
         46:61:7f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iK25Qpl1JUzwoAA1L+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjgyMjE0ZjU0Mzc5ZDdiMzRlMWExMDNkNjU4YTEzMWU3
MDE4MWIwHhcNMjYwMzI2MDcwMDUwWhcNMjYwMzI3MDcwMDUwWjAzMTEwLwYDVQQD
EygxOTEwOWJlNTE3ZTQ1NTBhMjY5NWJmY2E0MDI4YjRhNzUwOGE0NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRlb7Kso7dogQfD8c1o5mqa9F4Lz
Pg/yh84e+/0kwJYM4v/4hyOjjm8SryQ14fcxVVrA81FZYbt4z9wVW4iMxf82Yoc7
w7BcFZOnFUbBrhe8tF7XZEVLjoLfb/tRd9a9IR7WHqufbDU/djSzIFpY+2yBR4Ft
N0MhpcfRYD6Woxf8cl+OvEnd6VmdWhKOzXaXamVtENNr4lIIhKu69ELSWM3zWN/b
OmHWsqJwXKP1QTMP6dUA/Ts658iisxzDynyoIfpukVdh2vqrwKCrerRAV00wJIas
+QOAv4JSl5QBC5VYMIM/9RmjKupQukghfoLokyvHWb1/BIOhJheqCol54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkQm+UX5FUKJpW/ykAotKdQikRYMB8GA1UdIwQY
MBaAFFb4IhT1Q3nXs04aED1lihMecBgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTkt
ZTU4MDllYmUyZDRiLzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTktZTU4MDllYmUyZDRi
LzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4NWfLby
/u/CXC97EU7UJtsMgPBehGwtUrpDu5oEh1/v6xmoiSoQ+9ZgnC8bXX8HsKsZd+83
FA2qpX4ZTdADn6j1LSYBYx4ahyGGdsSrO1og8BR6aJKpW16Da9+qRPZCT8eDDJg0
RZE32Iw6pqTrqyl4iFUBn0YgLPjydlBu6XQ1CyXxMtMHPbxKoF5Fd2o2GQlYi3he
89QxLvI7gpqPEonZst7/yAuf+XdiXKjSqeoXTmjxDc7yky/ipnPWB0fnmQ7C5XaC
zMyo/+geiR91zmMj5TiI+oqBAAW8KgNiBvo5sFlaYc1pVjbzo8v1bYSusqltLyC/
U9XmSSJCRmF/Xg==
-----END CERTIFICATE-----