Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
File:                     Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft (raw, json)
Hash identifier:          jPDsYWyF4C1LznDDQOC5Xfc0vM1E5DDstH+SZicfSoc=
Subject key identifier:   35:B1:C6:AE:19:B5:8F:2B:94:B8:48:2E:FE:4A:6C:DF:4E:5E:E5:C6
Authority key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Certificate issuer:       /CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Certificate serial:       019D2A72636B36B0EB8CEB1D7C17103A6D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
Manifest number:          132B
Signing time:             Thu 26 Mar 2026 14:00:32 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:32 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:32 +0000
Files and hashes:         1: Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl (hash: /6lD37kPptXOpf12rO0Ae7UtFXFUeqwoSI2Y2h6JpzI=)
                          2: _b4OVLuaniL8RBMNln103Gpf2Gs.roa (hash: SkLNRNpLl3oBYMStmCvZjB2GsxsGbobUhwLq5rMJp9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:63:6b:36:b0:eb:8c:eb:1d:7c:17:10:3a:6d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
        Validity
            Not Before: Mar 26 14:00:32 2026 GMT
            Not After : Mar 27 14:00:32 2026 GMT
        Subject: CN=35b1c6ae19b58f2b94b8482efe4a6cdf4e5ee5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:65:cf:0f:aa:3c:d8:59:17:67:da:36:3c:
                    ee:a1:8b:d2:93:58:bf:ec:3f:bf:87:d0:d4:d5:b9:
                    5e:cf:39:ee:4d:84:70:4f:f6:0b:7a:a4:8b:56:ee:
                    fe:51:70:de:67:e7:3f:04:10:6a:e0:b7:01:fa:7d:
                    62:41:1a:71:aa:2f:60:c9:cf:42:c8:85:f4:3f:77:
                    fc:66:62:06:5f:37:15:ed:6d:57:34:8d:db:95:d7:
                    39:ed:e1:b9:07:5d:a2:f9:e3:3d:4e:15:dd:af:4a:
                    99:1a:f9:42:29:9d:7e:8c:ad:93:9a:1c:c9:98:90:
                    f4:d3:0a:42:9f:d2:20:e1:f1:03:5d:32:87:4a:7a:
                    0c:be:e2:7a:6e:a0:1b:e1:84:54:e8:4e:e4:cd:6b:
                    72:6f:45:c3:c9:e6:90:21:1c:07:81:52:71:f8:b1:
                    47:29:2e:78:dd:b6:bd:27:49:d5:69:72:50:0f:88:
                    a2:cb:ef:ba:27:fd:57:8c:f6:6f:22:e2:df:2f:39:
                    44:47:7d:1b:fd:bc:5e:57:b5:5d:bb:52:41:a7:b1:
                    d3:14:39:cb:68:88:32:11:f9:d9:a0:3b:1b:85:58:
                    1e:aa:b8:e3:f5:ee:7c:f5:9b:db:08:82:b0:96:a0:
                    46:1c:54:c6:8a:6f:94:23:9f:e7:0d:ca:97:f1:ac:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:C6:AE:19:B5:8F:2B:94:B8:48:2E:FE:4A:6C:DF:4E:5E:E5:C6
            X509v3 Authority Key Identifier:
                keyid:56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:27:ad:e8:da:3e:aa:57:78:04:23:07:a0:2d:ba:32:ea:b0:
         c0:a8:5e:4a:65:50:38:0a:e8:52:4e:85:d4:c2:a9:78:62:1c:
         7e:fb:31:ed:9e:3c:58:81:5f:2e:cb:f2:b0:ea:97:e0:ec:84:
         af:69:30:82:5f:8e:21:04:24:f3:66:bc:f8:51:de:78:26:41:
         b7:a0:01:99:09:42:f4:ce:6f:3a:8d:28:73:eb:2c:6b:05:f6:
         3f:aa:c6:30:b1:3d:b2:76:2b:d4:b9:16:ec:e7:9f:7d:26:e6:
         ea:26:c7:53:9a:8b:6a:9d:df:cb:e3:a3:15:8a:e7:b2:95:3b:
         14:04:c1:fd:23:58:3b:99:e4:02:f4:ce:e1:6e:cd:cb:fd:d6:
         e4:ca:d3:b4:0d:79:0c:2d:ac:02:e9:e1:5e:c4:2c:3e:2f:07:
         dd:19:61:5a:15:12:d2:85:12:44:58:49:c4:37:3c:0c:0e:88:
         f9:b8:f3:36:7d:76:88:92:c7:4b:a6:e9:ad:fe:75:b5:42:98:
         18:f8:5c:c0:c4:85:7c:7d:0d:d9:ea:cd:0d:f2:35:3d:b9:46:
         d9:65:06:e0:cf:66:95:8e:3e:7c:5a:99:33:00:4c:ac:53:04:
         db:d4:5d:cd:df:ac:e3:40:8b:9c:5b:4f:61:bb:9f:98:a6:27:
         8b:8d:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:16 2026 by rpki-client