Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
File:                     vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft (raw, json)
Hash identifier:          x6LVHBswSYtl5PyLhmcat6VvgxPlfvGjjJtXrWOc9Kg=
Subject key identifier:   AA:A2:C4:2F:1E:B1:51:FE:1F:52:79:15:90:56:AF:18:F8:1D:45:66
Authority key identifier: BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08
Certificate issuer:       /CN=beffadb46a30360bb84f80701bcafb470f064208
Certificate serial:       019D2928EB1EA0EAF9501E24FD2BA4555F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
Manifest number:          0616
Signing time:             Thu 26 Mar 2026 08:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:40 +0000
Files and hashes:         1: vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl (hash: OmUPsVhMMAR639nTKDlQfWVc86dSYwAbFBsXEpvyquM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:eb:1e:a0:ea:f9:50:1e:24:fd:2b:a4:55:5f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beffadb46a30360bb84f80701bcafb470f064208
        Validity
            Not Before: Mar 26 08:00:40 2026 GMT
            Not After : Mar 27 08:00:40 2026 GMT
        Subject: CN=aaa2c42f1eb151fe1f5279159056af18f81d4566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:8d:c2:96:27:6f:0f:1c:3d:42:99:de:70:
                    0c:f9:1f:f5:02:bf:df:1a:ae:37:b3:58:cb:b6:b3:
                    22:b6:36:a7:15:f8:95:a7:46:42:b9:ee:dd:ed:4c:
                    76:fd:2f:72:b7:40:0f:c6:ed:c6:d3:d8:fc:d3:48:
                    58:d2:16:41:77:60:b3:85:1e:ca:de:3f:5e:b4:6d:
                    fe:54:ea:3f:1f:27:dc:78:37:43:ad:55:39:54:20:
                    67:10:42:2d:fb:05:02:c8:78:df:de:e7:45:8c:0c:
                    7b:88:e8:e9:b9:2c:27:69:3f:9b:fe:c8:85:ef:ad:
                    f3:f8:23:91:93:8e:a0:fa:fd:5f:7c:ee:75:c0:97:
                    44:1f:40:b9:19:8b:6d:6b:aa:21:78:62:a0:7a:28:
                    ca:ba:cb:7c:df:e6:b0:b0:87:6d:89:99:33:09:7e:
                    9f:85:6f:6e:25:85:22:28:d9:98:16:d1:d9:2f:00:
                    02:f0:c8:d7:a8:16:06:af:7c:72:0f:e9:d8:f6:4d:
                    7e:3e:e5:28:7f:b5:1c:7c:59:64:2d:f3:be:27:30:
                    bf:f0:0a:52:3e:c0:26:0c:32:1b:43:a7:ae:27:96:
                    01:ed:4e:88:85:36:52:04:c0:b1:3a:3e:85:c6:51:
                    4c:21:ac:30:26:e5:a8:35:41:a5:ee:8f:1c:5a:38:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A2:C4:2F:1E:B1:51:FE:1F:52:79:15:90:56:AF:18:F8:1D:45:66
            X509v3 Authority Key Identifier:
                keyid:BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:d0:23:e9:ce:b1:63:24:f1:cc:85:ac:4d:3e:e9:a3:ed:
         8d:a0:42:7f:7b:ba:dd:c4:b9:a9:d0:3f:f1:bb:08:e4:a4:b1:
         df:92:09:d7:59:dc:b5:e2:24:8a:0a:bc:3e:47:35:c4:83:b0:
         29:05:2c:13:17:71:6d:48:ee:3b:90:92:e0:7d:7e:12:cc:7c:
         55:68:fe:1b:d2:5c:5a:7c:77:7b:31:34:f6:6c:bc:69:6e:25:
         11:8b:24:1e:9d:81:b9:da:61:a9:b2:83:53:c4:f9:4a:62:f4:
         4f:a2:37:ec:a6:87:e8:73:64:37:a5:49:c2:db:6e:73:9e:bd:
         2c:f4:b3:e6:59:5e:da:3d:5d:ef:73:3d:6b:da:d8:53:3b:3f:
         19:e2:a7:fb:5d:6d:b0:0d:ec:6f:7e:e0:b1:8a:62:3c:83:db:
         39:d4:97:37:ee:15:c0:d5:28:33:b4:12:57:9c:9c:42:23:75:
         28:2a:5c:c1:c7:d9:8b:fe:53:3b:8b:46:ea:e4:17:27:45:de:
         05:27:6a:d0:87:56:d5:a0:43:a7:38:1f:75:b7:b1:ff:e9:31:
         10:8f:de:6b:5b:a5:43:fb:5a:11:ce:93:f8:48:0e:b4:f0:e8:
         9e:72:75:d2:21:82:02:00:b1:5c:92:90:4a:07:29:8d:88:84:
         55:7a:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:41 2026 by rpki-client