Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File:                     VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier:          TK13kHwF+Tvw51sQFJWlI9WjwMG4TXnNHKJKas8eI/o=
Subject key identifier:   58:B1:B2:49:31:86:9D:FF:41:1E:DA:3F:47:B8:F5:DE:9D:63:88:AF
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer:       /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial:       019D284E488EBC21B40C9D7876F25E524881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number:          0DCE
Signing time:             Thu 26 Mar 2026 04:01:52 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:52 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:52 +0000
Files and hashes:         1: FTZo4j3WvgKRWbiHUOCPZsX1zgQ.roa (hash: Q/+Okbz+6+jAXp/C9vXemB7x6MV3XdMTaEZvLlqSiqE=)
                          2: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: BJG+WB1JJmw9klLwP8G45FEdzQi7kFn4JQsmzbrhkbw=)
                          3: i_CKqQDTzCYTHYBFuIiGupNbzAA.roa (hash: 03FzL9n2bbmchymDnADpesB2nqCt8Q2nLR4stWRaFl0=)
                          4: u705RusaSvuc7EH6EPykfRGiVNE.roa (hash: Uxi6awTK0JVTN4Iab0EWPeAZqgFJiY/Mi2s0A2eP9fU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:48:8e:bc:21:b4:0c:9d:78:76:f2:5e:52:48:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
        Validity
            Not Before: Mar 26 04:01:52 2026 GMT
            Not After : Mar 27 04:01:52 2026 GMT
        Subject: CN=58b1b24931869dff411eda3f47b8f5de9d6388af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:e7:95:10:04:27:23:9a:f7:11:74:b4:1b:
                    a6:7f:f7:cd:ff:3f:47:09:13:6b:04:45:ad:99:d8:
                    a2:c8:59:c3:ac:fa:a7:da:b1:30:d0:0b:f4:2c:fa:
                    22:50:ce:c3:1e:5c:b3:4a:65:d0:7f:d7:73:67:1f:
                    5e:bf:4f:16:13:62:59:72:2b:a6:3a:b5:7e:d7:d1:
                    04:c6:78:07:28:d6:f0:2f:c8:76:38:e6:3f:7e:81:
                    12:53:fa:fc:5f:bb:b6:c8:bf:75:5d:c6:aa:6a:c4:
                    b4:ac:45:61:2b:65:be:1c:5a:17:7c:a4:20:4a:b5:
                    0f:41:ff:7b:2f:b5:37:a9:1c:43:89:a6:2c:73:8b:
                    29:65:7a:75:8d:80:ff:74:48:c1:bc:1f:48:43:d0:
                    c0:c1:ce:16:10:04:5a:17:f2:50:b6:a3:df:b0:a2:
                    56:54:44:e9:08:c4:0b:61:7c:00:fb:19:f9:20:c9:
                    ea:59:f2:c2:a5:e9:8d:52:d4:85:35:85:9a:c0:70:
                    42:68:06:30:93:0c:0b:cd:e3:70:0b:f2:b8:1b:14:
                    a7:02:d8:ac:d2:98:43:06:45:f5:95:b0:e7:97:ae:
                    5e:e4:b1:9d:42:01:25:85:40:53:4e:87:c8:4e:e2:
                    31:1e:cc:f6:3f:75:26:06:be:ec:8a:55:7a:9d:cc:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B1:B2:49:31:86:9D:FF:41:1E:DA:3F:47:B8:F5:DE:9D:63:88:AF
            X509v3 Authority Key Identifier:
                keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:68:b9:dc:3a:50:d4:d5:aa:39:9c:a0:a1:8b:43:cc:12:2a:
         ce:40:66:7e:4b:ec:7b:9d:e1:62:5d:be:65:90:51:05:69:3d:
         26:78:8f:ad:26:0b:0a:17:d0:45:37:17:5e:19:91:5c:0b:9a:
         28:57:b5:7c:17:b9:e4:33:17:05:de:ea:53:78:d7:64:e2:d4:
         43:a9:7d:e3:57:96:c8:3e:8f:14:12:99:d2:38:fd:bc:13:d7:
         0c:f4:67:d1:a4:29:1c:ac:34:b8:08:d7:20:37:cf:4f:a6:39:
         e7:14:7a:73:c6:49:24:f0:7d:08:cd:cf:4e:c0:ba:92:2f:26:
         50:f9:e0:a2:21:c7:0f:11:e9:12:88:39:c6:0c:13:71:d6:34:
         a0:34:15:5f:f5:7b:ea:35:7b:19:c3:9e:cf:19:a3:ae:cb:0c:
         40:12:a7:ea:39:b0:c3:51:2f:44:1e:f8:42:17:e2:7c:5e:a1:
         f7:4a:ca:45:f9:d5:30:88:03:8c:a0:b4:98:b7:a5:86:2f:44:
         22:ed:3b:53:fd:4f:bd:1b:a7:02:07:b2:91:85:a9:ed:d6:13:
         9d:25:77:56:18:56:a7:34:8c:93:c6:f9:8e:e2:b4:70:27:06:
         61:57:32:00:f5:84:ec:bf:f8:0f:9f:da:ef:11:cc:63:ae:ed:
         fd:c4:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:12 2026 by rpki-client