Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File:                     VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier:          iotkL+QUwa1bbX6voZH22HlyoMLMHh3amXWILGHxrcs=
Subject key identifier:   47:52:43:C4:E9:6C:97:92:45:18:92:B7:C9:51:6C:9A:15:03:80:3E
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019D27E06A14D962CB9AD3A02E4CA396C75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number:          0381
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: d+T+yKidCpCPpfCzHtbmwZiDJZo7o7KjoXHv+NH66+k=)
                          2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:6a:14:d9:62:cb:9a:d3:a0:2e:4c:a3:96:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=475243c4e96c9792451892b7c9516c9a1503803e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:b1:07:c6:ec:d7:8b:cc:2b:20:1f:4e:dc:
                    24:83:41:02:26:fe:0c:5f:0c:28:dc:bd:6c:53:d4:
                    5e:8f:16:ac:15:2f:02:37:19:17:fb:da:5e:cf:da:
                    72:8d:d2:4b:c9:4f:85:61:54:09:60:e9:17:e0:d2:
                    ec:37:ff:e2:a3:02:32:a1:51:db:77:22:e3:5d:bb:
                    5f:88:e3:3e:0d:5f:95:08:7e:68:e3:41:e9:79:66:
                    85:f2:e7:9f:34:09:6b:5b:04:12:10:02:1d:54:28:
                    f0:78:0f:36:38:52:c1:63:d9:a6:89:c1:57:16:df:
                    f5:c7:80:cb:ca:ca:90:9c:57:04:b1:b1:f5:84:20:
                    fd:a4:89:d9:20:19:00:4e:98:af:96:56:7c:96:56:
                    67:e4:57:95:a2:37:e7:4c:2b:17:e2:bc:ae:1a:9c:
                    75:22:6b:44:dc:5d:28:33:4e:df:6f:e9:c0:30:4b:
                    00:d8:ef:8d:67:3e:22:33:ca:61:8f:85:49:5a:58:
                    2f:8e:f8:65:6b:83:bc:a5:79:70:7e:76:e8:41:23:
                    9a:24:d7:32:be:90:67:3e:6f:75:9d:62:5d:0f:8a:
                    73:54:42:9f:2d:99:d2:85:6f:3c:e7:1c:5b:de:2f:
                    df:bb:eb:af:6e:3a:af:f9:fc:5b:69:2e:2e:f8:15:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:43:C4:E9:6C:97:92:45:18:92:B7:C9:51:6C:9A:15:03:80:3E
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:df:f3:f2:a9:9f:01:c7:7c:4d:20:09:71:d4:fe:3c:ae:
         03:20:5d:50:5c:5a:6b:11:e3:ce:7e:8d:47:3c:f5:a1:91:73:
         1c:85:4c:45:7c:c2:ba:40:96:bc:16:eb:c5:e5:62:ad:c1:b5:
         79:61:08:e6:f8:03:86:85:ee:b6:e8:08:45:6c:9d:e1:d1:ac:
         d6:2e:65:df:c1:13:7c:a5:9d:c4:c9:c2:bb:79:1e:c0:51:d1:
         88:ea:92:47:c8:cf:8d:78:38:78:26:6f:7c:ac:c2:13:87:2e:
         e2:3e:c9:04:4b:97:56:f7:fa:22:d8:74:c9:ca:f1:80:7b:51:
         b8:f9:35:b6:0e:fa:5e:66:ed:54:87:01:28:07:04:d5:4c:98:
         f1:aa:bc:cf:78:d1:ef:e7:84:80:46:c8:b2:e2:b8:e9:e4:9a:
         b0:8f:e8:ba:01:f9:cf:13:ca:48:a6:61:65:42:de:c3:d6:e9:
         cd:bf:69:ab:49:34:0a:8c:67:84:ba:59:33:79:7f:e8:3c:48:
         c4:fe:fa:90:f0:ae:e5:f8:5d:a0:91:c7:7d:84:3c:86:36:54:
         ad:19:cf:52:8c:c2:35:9f:b8:7b:b8:26:60:37:57:ef:d6:f7:
         ac:07:31:5f:e9:25:70:51:dc:3a:df:e7:f1:1f:d4:4d:c9:9c:
         30:0f:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:03 2026 by rpki-client