Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
File:                     VZWbC9oKD1kfloQIU58zGBC7JTQ.mft (raw, json)
Hash identifier:          YVruSnST13HNbx2LVdr6oyUiRLjU5snRR6eveGOD8tw=
Subject key identifier:   E4:DD:18:9D:ED:90:89:CE:25:AF:74:23:68:1B:6F:6D:0E:8D:34:37
Authority key identifier: 55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34
Certificate issuer:       /CN=55959b0bda0a0f591f968408539f331810bb2534
Certificate serial:       019D277219572087A56DF54CF69F8B80A86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
Manifest number:          0855
Signing time:             Thu 26 Mar 2026 00:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:22 +0000
Files and hashes:         1: VZWbC9oKD1kfloQIU58zGBC7JTQ.crl (hash: XU2wJWRCt/zljqfoA3zF6Kju3BGADFgzAHeAe0mN+ag=)
                          2: j47FN1b9Qh66nUBnpby1lJe9CYU.roa (hash: sZWGSAo/74IVtkMhs6kmHJc9kEJANjXcYOtxcE90TYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:19:57:20:87:a5:6d:f5:4c:f6:9f:8b:80:a8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55959b0bda0a0f591f968408539f331810bb2534
        Validity
            Not Before: Mar 26 00:01:22 2026 GMT
            Not After : Mar 27 00:01:22 2026 GMT
        Subject: CN=e4dd189ded9089ce25af7423681b6f6d0e8d3437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:b0:4a:ba:32:56:14:fa:84:0c:c0:cd:09:
                    a0:88:1b:93:e1:30:c3:8a:85:c8:64:a0:f0:0a:f6:
                    03:b9:7a:a0:53:0c:fb:58:e0:f9:6c:3f:9a:d8:80:
                    58:3b:0b:ea:aa:4d:84:c1:15:66:a2:fb:97:69:ef:
                    80:26:ee:60:8c:e9:2e:eb:13:7d:50:9e:fe:5f:1c:
                    25:0a:9e:31:05:b8:ce:fe:15:fd:2c:5c:94:90:7d:
                    f6:6a:c5:4b:ab:73:86:2c:8e:58:ac:39:63:be:38:
                    ef:8c:5e:dc:1e:33:3e:04:9c:3a:4c:5d:f7:1d:57:
                    b9:1a:b1:c0:89:9f:a8:8e:8b:7e:1c:17:28:0a:28:
                    b7:22:56:bc:b0:2e:25:10:01:00:d1:22:eb:94:4b:
                    b8:be:2e:bb:a1:df:38:9f:6a:6e:3c:3a:af:2e:17:
                    2c:71:ee:93:2c:48:1f:ff:e7:ec:8c:8f:ab:fd:45:
                    e0:4a:8e:19:07:59:d6:89:2d:c8:e9:81:91:ef:fc:
                    f8:c0:2c:e9:fa:b7:db:cf:58:30:46:67:8e:d8:75:
                    71:21:18:82:35:09:b3:fd:0b:88:ed:95:2a:46:51:
                    2f:ec:c5:bc:f7:aa:63:13:49:81:7d:82:b7:81:bb:
                    fd:d6:26:90:5a:1e:e5:e8:a8:3a:f9:bf:88:9b:9f:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DD:18:9D:ED:90:89:CE:25:AF:74:23:68:1B:6F:6D:0E:8D:34:37
            X509v3 Authority Key Identifier:
                keyid:55:95:9B:0B:DA:0A:0F:59:1F:96:84:08:53:9F:33:18:10:BB:25:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZWbC9oKD1kfloQIU58zGBC7JTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/13fc59-3b4f-452c-81d4-141528664d0b/1/VZWbC9oKD1kfloQIU58zGBC7JTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:ff:fd:48:0f:ce:9f:d7:63:98:c6:60:fe:8a:fc:0f:5c:
         9c:9e:6e:cf:f9:bf:6f:9d:20:ac:dd:68:52:05:a0:a0:93:8b:
         bc:65:07:ac:f5:d2:f8:29:e6:11:7a:1a:c5:ba:86:71:04:82:
         84:03:ac:69:27:a9:70:34:73:af:e0:0b:87:9e:4b:7a:17:1a:
         8c:71:d0:22:b5:4f:aa:b8:70:e8:1e:93:20:64:ec:71:80:6f:
         dd:c9:93:90:2f:99:18:2b:59:60:d3:93:3f:82:ac:16:de:ce:
         c6:7c:a4:60:de:b6:c0:61:bd:6d:f5:03:80:b0:cf:16:06:28:
         67:2c:91:2d:fc:76:2b:8c:58:86:ef:91:30:66:bf:40:50:42:
         64:3b:ff:8d:01:c3:0f:fe:a7:31:5a:e4:d5:25:73:63:61:65:
         f9:49:b2:5f:a5:0f:2d:9f:6a:53:95:31:68:15:72:1c:33:61:
         03:75:01:a4:ec:31:66:3e:c3:bc:ea:95:3e:41:cf:fb:2e:ab:
         50:e2:9f:04:3d:78:29:0b:fa:84:84:ec:9d:f0:c1:15:6a:b8:
         b5:c3:f2:09:76:81:3e:be:f3:59:fc:1a:9c:5e:fa:bd:68:cb:
         4e:41:0c:3a:d7:e4:f6:bf:6b:2e:a5:8c:e7:17:0b:be:7b:85:
         13:cd:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:39 2026 by rpki-client