Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File:                     VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier:          cJ1hOwKoL4rqPm3bXyHepR37+UBvGCl01is/etPIx3Y=
Subject key identifier:   C2:71:C7:FE:C2:6E:D6:47:CD:96:ED:7E:65:74:CD:83:92:19:67:D9
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer:       /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial:       019D284D2FCEFC0ECE2930A2317FEAB4778C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number:          1863
Signing time:             Thu 26 Mar 2026 04:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:40 +0000
Files and hashes:         1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: OxHzkp+5mQS3FmDcZ7jkgMCSRbCLUQYsalrLSu4MYoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:2f:ce:fc:0e:ce:29:30:a2:31:7f:ea:b4:77:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
        Validity
            Not Before: Mar 26 04:00:40 2026 GMT
            Not After : Mar 27 04:00:40 2026 GMT
        Subject: CN=c271c7fec26ed647cd96ed7e6574cd83921967d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:30:40:5d:36:f9:0f:ac:ab:af:de:1d:65:
                    90:9f:d1:be:02:dc:cd:ef:c3:61:a6:20:28:a0:03:
                    43:a5:f2:fd:52:65:b5:1e:02:36:be:3e:05:7e:29:
                    24:6a:08:ea:7f:a7:1f:9e:86:79:3f:61:65:c7:7e:
                    5e:d0:ec:47:fa:82:65:c6:3c:be:8a:36:72:37:f7:
                    84:94:f9:2c:68:d9:98:b8:ed:71:d2:cc:94:03:db:
                    95:ef:6d:3c:10:e0:32:4d:cb:9f:26:c5:d3:a7:fd:
                    da:0e:57:f9:d8:2e:c2:69:8d:bc:b3:3b:a7:e5:13:
                    61:a8:9f:18:89:93:44:af:b4:86:75:c4:4b:97:74:
                    12:0a:f1:c8:13:62:2e:c4:49:23:b7:ba:49:1a:96:
                    ed:c0:93:1e:82:40:e3:81:c2:54:87:56:46:f2:55:
                    0b:3f:39:00:c7:39:7c:dd:9a:fd:10:1b:ad:28:01:
                    81:dd:e7:8b:15:ef:c1:b7:c9:5e:cf:61:a5:6d:11:
                    ec:fa:d2:0c:a1:01:f5:58:87:5b:b2:8d:dc:a1:4a:
                    1b:14:c9:40:c7:4a:59:56:cc:4b:36:8b:de:e8:72:
                    c3:94:48:d0:19:4e:25:ca:57:97:4c:6b:df:6e:83:
                    15:bf:36:ac:0f:36:23:61:29:01:3b:08:6f:39:d2:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:C7:FE:C2:6E:D6:47:CD:96:ED:7E:65:74:CD:83:92:19:67:D9
            X509v3 Authority Key Identifier:
                keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:0d:b2:13:56:c4:b8:10:ce:89:7c:ef:bc:0f:08:39:0f:
         ac:73:f4:6c:31:07:ec:4a:da:6e:dc:9d:b2:ab:e8:c4:e9:01:
         f2:ea:05:e0:35:d7:bf:81:f5:2c:0d:47:1e:d6:91:28:ad:fb:
         73:09:21:47:fe:94:13:fa:60:3e:8e:c2:14:af:35:d9:79:47:
         33:9f:62:e8:c5:33:4d:67:b8:c9:65:5f:86:e6:e2:73:26:82:
         02:83:c0:9e:ae:25:42:b1:2d:6d:c9:65:be:ac:26:de:c2:90:
         b7:bd:71:82:32:b3:a7:69:b0:31:be:03:be:3c:94:7d:52:89:
         bd:02:3e:a0:55:f1:9e:20:4a:22:2f:d9:7b:c0:ab:85:fb:1d:
         d3:26:8b:1f:b6:44:13:6a:7f:14:ea:57:c7:18:c3:d9:0d:b9:
         9f:89:da:bf:50:eb:98:55:c6:be:8b:05:6c:ad:25:7b:33:2d:
         37:b9:8a:b6:52:e3:b2:f1:2b:61:6c:b7:0c:03:4c:7f:ed:9b:
         7f:b5:28:3b:cd:41:54:78:3d:c0:45:bd:71:70:76:75:ca:50:
         8a:19:05:2d:e2:6f:db:01:06:fc:68:27:8b:11:7f:b7:85:a3:
         28:2d:6a:87:e7:28:17:30:7e:a6:cd:c0:cc:0e:38:f6:94:32:
         4b:02:85:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTS/O/A7OKTCiMX/qtHeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzI5ZDQ5ZDJiMmUwMGJiY2IyODUzYTc0Y2JjMGU5NDY3
M2YwMTIwHhcNMjYwMzI2MDQwMDQwWhcNMjYwMzI3MDQwMDQwWjAzMTEwLwYDVQQD
EyhjMjcxYzdmZWMyNmVkNjQ3Y2Q5NmVkN2U2NTc0Y2Q4MzkyMTk2N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKUwQF02+Q+sq6/eHWWQn9G+AtzN
78NhpiAooANDpfL9UmW1HgI2vj4Ffikkagjqf6cfnoZ5P2Flx35e0OxH+oJlxjy+
ijZyN/eElPksaNmYuO1x0syUA9uV7208EOAyTcufJsXTp/3aDlf52C7CaY28szun
5RNhqJ8YiZNEr7SGdcRLl3QSCvHIE2IuxEkjt7pJGpbtwJMegkDjgcJUh1ZG8lUL
PzkAxzl83Zr9EButKAGB3eeLFe/Bt8lez2GlbRHs+tIMoQH1WIdbso3coUobFMlA
x0pZVsxLNove6HLDlEjQGU4lyleXTGvfboMVvzasDzYjYSkBOwhvOdJaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJxx/7CbtZHzZbtfmV0zYOSGWfZMB8GA1UdIwQY
MBaAFFRynUnSsuALvLKFOnTLwOlGc/ASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgt
MGZjMDYwMjIwNjI5LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgtMGZjMDYwMjIwNjI5
LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfukNshNW
xLgQzol877wPCDkPrHP0bDEH7ErabtydsqvoxOkB8uoF4DXXv4H1LA1HHtaRKK37
cwkhR/6UE/pgPo7CFK812XlHM59i6MUzTWe4yWVfhubicyaCAoPAnq4lQrEtbcll
vqwm3sKQt71xgjKzp2mwMb4DvjyUfVKJvQI+oFXxniBKIi/Ze8Crhfsd0yaLH7ZE
E2p/FOpXxxjD2Q25n4nav1DrmFXGvosFbK0lezMtN7mKtlLjsvErYWy3DANMf+2b
f7UoO81BVHg9wEW9cXB2dcpQihkFLeJv2wEG/GgnixF/t4WjKC1qh+coFzB+ps3A
zA449pQySwKFHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:12 2026 by rpki-client