Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File:                     Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier:          5K8quxgdY93orrSyXkJ7bWqi1iibJKupiow0vEYo5OU=
Subject key identifier:   0F:CA:E4:31:15:29:6C:48:DD:0E:D2:3A:76:13:1A:AA:84:6A:B0:36
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer:       /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial:       019D28848C0557BF6AC13C649CFAB765BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number:          1370
Signing time:             Thu 26 Mar 2026 05:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:08 +0000
Files and hashes:         1: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: HcvYOEZNV59eboeYtgZ/1Umik8HnwQjITq+Wo+oWiVM=)
                          2: gFCCxxR0ahmt0mXsK_NmxadCzY4.roa (hash: F6IH/d9c7KoM8MKvRJtR95Z2YE78byk45lVJ9DWIUOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:8c:05:57:bf:6a:c1:3c:64:9c:fa:b7:65:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
        Validity
            Not Before: Mar 26 05:01:08 2026 GMT
            Not After : Mar 27 05:01:08 2026 GMT
        Subject: CN=0fcae43115296c48dd0ed23a76131aaa846ab036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:1d:51:e0:d8:40:15:96:2d:1f:2e:ba:c9:
                    cf:26:2f:50:19:5a:f0:06:8b:82:ba:b5:c1:fb:9d:
                    45:3b:72:e4:56:57:dc:ff:8c:a0:29:d2:77:4a:82:
                    ba:22:34:cc:51:7b:81:16:1e:70:e8:8e:60:7d:7c:
                    1f:e7:68:5f:8d:ff:5b:98:cd:16:57:14:02:29:75:
                    79:c2:3c:32:69:89:4c:a3:21:d5:d4:32:77:08:d9:
                    27:9a:36:59:32:52:4c:32:16:d5:90:b7:13:07:bf:
                    5e:b7:7f:4e:54:7e:25:cb:9a:0d:cb:39:64:85:40:
                    1e:27:82:ed:60:70:f6:5d:74:80:e4:2d:aa:2e:1c:
                    81:cd:e8:aa:e8:04:ec:69:ca:33:66:10:2c:a3:38:
                    0b:12:75:31:63:ac:74:cc:86:f4:30:48:2d:8c:43:
                    4d:3d:8a:62:e0:33:8a:b4:e9:c0:44:d2:31:17:6b:
                    58:85:fc:a5:8f:65:b7:0c:e1:c4:ed:72:6c:47:f7:
                    41:f2:6c:2a:3a:38:e1:7a:58:77:86:11:22:92:da:
                    d3:4a:9b:00:e7:ee:e1:64:05:7e:30:6c:94:65:cd:
                    13:77:47:17:30:d6:4e:b2:29:55:98:28:e8:83:fe:
                    a2:22:b8:09:0b:83:ed:06:39:48:72:7f:6c:72:3a:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:E4:31:15:29:6C:48:DD:0E:D2:3A:76:13:1A:AA:84:6A:B0:36
            X509v3 Authority Key Identifier:
                keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:42:79:39:7a:2b:f2:82:ec:62:32:24:9a:bb:d8:6b:c0:
         2a:9a:29:4e:ab:37:7c:4d:f2:13:68:d0:f6:59:83:73:75:40:
         05:05:8e:50:7d:18:a0:bf:6c:86:b7:45:1b:28:10:ac:c8:90:
         f7:74:5d:40:21:96:6a:5d:19:c5:62:df:b8:db:31:ca:a3:26:
         ca:6d:11:94:8e:7a:92:e5:97:75:b7:14:fb:04:9f:b9:56:2d:
         a5:4b:96:14:53:04:67:90:b2:79:13:42:7a:23:a6:9d:5b:d0:
         d0:16:ca:97:80:db:82:51:32:2d:da:20:6a:18:6b:09:8f:f9:
         03:71:40:cb:bb:d2:fe:26:15:36:9e:82:c5:dd:62:ae:35:ec:
         aa:b0:01:c8:3d:b9:fd:8d:d7:b6:0d:61:24:37:c8:83:89:b1:
         14:71:78:9b:03:83:51:07:43:88:c6:71:f8:09:d6:7c:33:d0:
         2f:3f:9f:7d:8b:3d:ce:ed:a5:78:82:03:aa:85:d7:f7:68:72:
         be:4c:d1:74:a6:cf:ac:fd:7f:eb:ea:3c:23:b0:22:3f:2d:38:
         e8:e4:30:3b:a1:8c:84:5c:30:51:52:4c:a1:44:fa:9f:af:69:
         b8:96:04:ef:9f:47:51:0c:ea:43:fb:c0:02:d1:7b:f6:98:98:
         a5:2d:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:04 2026 by rpki-client