Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File:                     VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier:          5KVI6nxNNW4tdxsJgkOsLWfgJkvB02jQbcSnKMpZ+k4=
Subject key identifier:   D7:0A:EB:7B:73:42:B5:39:36:9F:80:B4:6B:86:A5:18:D2:F8:46:52
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer:       /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial:       019D2884C5FD97EF8D30CE93F0DF4809C4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number:          1860
Signing time:             Thu 26 Mar 2026 05:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:23 +0000
Files and hashes:         1: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: hG8OPepBeRSVNf/f1AhlsBw7jFOc0t4UXBjgHKPKqZY=)
                          2: bwbnq1HdA4AZzkAemAt6HkUyTs4.roa (hash: wdqCH2TaxxBuj63rE4lc5Ctuv7BNWRJSr9E1thWFs6s=)
                          3: zIdeJERtNI4YBciW3TqnOW_FhlI.roa (hash: gb1oCn7StTANeNZVD37UKXQMlfOvC8/lLuU0st9zWGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:c5:fd:97:ef:8d:30:ce:93:f0:df:48:09:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
        Validity
            Not Before: Mar 26 05:01:23 2026 GMT
            Not After : Mar 27 05:01:23 2026 GMT
        Subject: CN=d70aeb7b7342b539369f80b46b86a518d2f84652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:f7:bc:c0:aa:dd:95:21:1d:49:bc:98:ea:
                    45:3c:12:ce:3f:24:8e:4e:22:60:8e:1a:d9:42:f4:
                    ab:b5:aa:9c:3e:cf:17:9c:3b:94:c6:1c:9e:bb:2d:
                    a1:ce:83:96:58:55:34:cc:a5:30:98:b6:98:9f:90:
                    f4:a4:15:86:2f:3a:14:6c:01:7c:82:c2:54:a7:ad:
                    94:ff:a6:88:9f:20:1b:de:68:cf:04:27:a7:3f:e0:
                    d4:18:43:34:1b:3a:14:2b:32:77:3b:cb:fd:d4:f2:
                    0a:de:69:7a:f7:a3:ae:97:9f:e8:fc:18:86:f0:d6:
                    ad:8e:06:b5:d9:24:98:c3:bb:d7:df:f4:21:57:d8:
                    31:b0:10:2b:74:af:dd:35:49:b2:35:35:64:9f:1a:
                    bb:a1:ff:b3:c1:87:35:38:50:3c:a5:13:42:e0:04:
                    b2:0e:7f:ee:4b:cc:5b:fe:26:a0:3c:f7:e5:03:4b:
                    d7:eb:8b:99:37:fd:a6:5d:15:6f:75:38:9d:be:dc:
                    a0:09:8f:4a:bf:c0:93:22:fc:9a:d6:14:d5:6c:6c:
                    c7:74:98:95:4d:4f:c3:7c:17:ce:a7:bd:1d:00:56:
                    ac:42:0a:6e:8a:18:6a:7d:b7:f9:78:fa:46:40:3e:
                    2c:15:9c:ae:9b:e0:17:7e:a9:1c:82:fc:54:a7:26:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0A:EB:7B:73:42:B5:39:36:9F:80:B4:6B:86:A5:18:D2:F8:46:52
            X509v3 Authority Key Identifier:
                keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:31:9a:aa:ae:6e:41:62:0d:a7:a6:21:e2:62:d9:45:1b:cc:
         ac:7b:4f:b6:ea:ab:33:af:5f:fd:d8:14:5b:30:b5:5d:86:95:
         de:ac:71:bb:23:0d:b5:67:dd:d1:f0:ac:94:9c:85:35:15:cb:
         c0:f1:5b:85:7f:2c:c4:ac:da:4d:7a:82:b7:f0:10:38:e0:9a:
         68:c4:17:89:ff:7e:be:e0:c2:a1:96:59:0d:c6:fe:1c:9b:9e:
         56:ca:bb:e3:1a:cd:95:45:e1:b5:d7:78:e9:45:8a:97:b0:20:
         c9:6e:4a:67:5c:0b:37:f1:5b:dc:68:58:4d:14:17:4e:c5:62:
         20:01:9c:fe:c9:24:38:02:ca:79:8d:68:56:7a:9c:bb:04:f6:
         4c:73:83:8d:b6:c5:e0:54:47:30:98:28:e4:ff:96:9d:fb:fa:
         8b:b5:d9:7e:25:26:a7:45:c2:07:a0:a1:60:fe:10:ed:15:57:
         3c:86:00:af:50:6d:e0:e1:7e:de:d2:09:b9:dd:49:14:ef:24:
         1d:51:ad:d5:31:15:4f:56:1f:c4:38:d6:0b:9b:e1:70:8c:db:
         2b:23:a9:c9:bf:05:4b:b4:8a:d6:89:73:76:32:a1:87:5c:4b:
         ab:a2:aa:39:97:4f:61:85:40:52:85:c3:87:fd:5c:89:5c:e5:
         21:08:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:20 2026 by rpki-client