Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File:                     VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier:          ZYnvS903IfkaNW26L1ckrxqJ1azsUg5G4iKBfIyGkxc=
Subject key identifier:   FA:BE:82:53:EA:D4:9D:70:E3:C9:0A:DF:FE:AD:16:50:55:C0:F9:B1
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       019D2A0482DA25BEF9EF57BB7B17369B9785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number:          17B1
Signing time:             Thu 26 Mar 2026 12:00:31 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:31 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:31 +0000
Files and hashes:         1: 2IXEUsMCtUFoIZgluOZi_By_Vdw.roa (hash: sgv+jQ08DlqNTj0gUcq4U4io8ILyjyHfAClvIpsUWck=)
                          2: F9miMrY1ZJTKM5Hsr08Nsl2WVlQ.roa (hash: q+6garZ/8AXrfE/f+LCJdQf0ISs5jtEKLzvklthpstk=)
                          3: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: sQpx4zS1JIr3u+IzIwYSwODgx2trqZUloZGWZzBlvVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:82:da:25:be:f9:ef:57:bb:7b:17:36:9b:97:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Mar 26 12:00:31 2026 GMT
            Not After : Mar 27 12:00:31 2026 GMT
        Subject: CN=fabe8253ead49d70e3c90adffead165055c0f9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:df:cd:cd:44:a8:72:14:e3:a1:d1:59:d0:
                    2c:df:ab:4e:c2:c3:1a:1e:c2:a6:b1:17:e9:7f:aa:
                    f9:80:85:37:bd:c3:23:11:66:eb:be:bd:2b:1c:1e:
                    c5:4e:ce:eb:05:ca:38:a5:54:10:ea:7e:2f:d5:a4:
                    4a:77:ef:2b:c4:52:ba:c8:22:49:df:8a:4c:f6:93:
                    a3:37:66:53:62:40:87:e1:a1:ff:1c:21:3c:bb:ea:
                    01:a2:ba:10:e0:b3:67:63:c8:b5:d4:8a:25:27:76:
                    e3:90:8c:fc:87:6d:3d:cc:0e:0c:b2:e4:21:fa:ad:
                    ec:59:7b:67:0d:47:ac:23:85:6c:02:35:19:a0:2f:
                    1b:85:83:1b:1d:d0:5f:e5:21:b5:1d:81:80:2d:e5:
                    a0:fb:e6:da:7b:6c:b9:b6:2a:49:91:53:bd:20:a7:
                    3c:30:ab:c2:47:d2:3c:f8:c1:9d:5f:55:f0:f0:18:
                    d1:30:97:e9:85:f9:a0:f8:a5:bf:ac:aa:2d:c7:df:
                    54:69:c7:5b:ca:98:be:11:0b:bb:ea:1a:01:fe:ff:
                    91:93:dd:6d:e1:c5:b6:18:c0:52:87:a1:1c:81:f1:
                    c8:4c:59:86:f8:fa:1c:f3:5a:05:4c:ea:16:e6:93:
                    c8:12:68:e3:22:56:fc:e3:aa:0d:dd:b5:90:f7:4f:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:82:53:EA:D4:9D:70:E3:C9:0A:DF:FE:AD:16:50:55:C0:F9:B1
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:bb:98:61:1d:1f:72:5c:dc:74:ad:27:3e:17:2d:2a:d0:
         88:49:d1:94:b8:0f:cc:bd:d1:af:20:e2:29:44:aa:69:56:bf:
         cc:8c:4e:e5:46:c9:55:b7:bc:2c:4a:1c:b3:2c:9d:06:21:dc:
         7c:c4:e8:11:ed:09:9d:8f:e1:05:06:9a:70:f1:6a:7b:ed:91:
         78:de:04:65:08:49:12:15:53:e1:e0:aa:f8:01:61:25:b3:70:
         18:21:e4:79:38:e6:c5:77:49:a6:ae:88:ce:c3:25:e6:71:c0:
         d6:75:8e:ba:47:8d:9f:2b:cb:36:e6:73:1e:2e:bd:02:44:a0:
         d4:b2:96:2d:13:80:96:3a:89:d8:38:b4:6d:a2:4d:5c:fb:8e:
         b2:f7:e8:a8:b9:c2:be:32:b1:95:3c:62:dc:6a:2a:b0:1e:f6:
         fe:a7:bf:22:b4:4d:2a:7f:68:0a:3a:dc:eb:77:0d:df:31:d6:
         af:53:5f:5e:d2:55:72:f0:15:88:26:40:3f:dd:2c:98:8e:5b:
         58:ab:fe:2c:a1:e0:22:9c:9b:d4:31:aa:4b:53:7f:0a:8e:b1:
         2d:4e:6a:ea:bb:62:75:5e:08:19:cd:3f:8a:e8:0a:a4:42:91:
         04:bd:d4:b3:73:73:49:de:20:e8:ce:17:82:97:df:9a:5c:4b:
         85:71:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:53:35 2026 by rpki-client