Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          K2NxElvOIdT+TpSyi36HpNbUQkSADmZHmGFjbbKBHSQ=
Subject key identifier:   C0:3C:87:0B:6C:0E:E2:F8:17:3F:F4:43:2F:73:39:CD:40:A7:E3:9D
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       019D265F571B77A72386CB72F9DDC52144C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 19:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:15 +0000
Files and hashes:         1: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (hash: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: mUV3vnriyktu3IJSlhzkyKI3paejwd+tQoss4+iX0f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:57:1b:77:a7:23:86:cb:72:f9:dd:c5:21:44:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: Mar 25 19:01:15 2026 GMT
            Not After : Mar 26 19:01:15 2026 GMT
        Subject: CN=c03c870b6c0ee2f8173ff4432f7339cd40a7e39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:a8:be:66:7d:45:40:32:fc:99:54:4a:d4:
                    20:d9:3c:25:74:26:87:1e:50:1e:dd:1b:fd:03:72:
                    c3:93:26:03:31:0a:dc:ab:ff:8f:c4:53:7e:d8:61:
                    1f:9a:3e:e7:df:f0:57:e6:7b:f7:b1:2f:a2:ca:3d:
                    a8:0e:3a:0a:a2:a8:3b:2f:de:9e:3f:11:17:ac:7b:
                    dd:d3:e5:b3:7a:6a:ab:37:9b:d0:ce:d2:f3:32:78:
                    0f:c0:e4:06:7d:1d:47:b2:2f:ed:3e:f4:ba:2c:a8:
                    af:de:8d:9b:9a:ed:25:67:b5:f4:c0:98:a8:7a:4b:
                    a1:25:64:6e:52:f1:e1:7d:94:f5:be:c1:bc:48:b2:
                    46:7c:be:59:50:c3:65:04:f0:99:a1:8b:28:cc:41:
                    c1:1a:8f:a6:40:37:7e:2c:9d:a3:3a:e4:45:b4:79:
                    36:ef:33:41:06:e6:e6:9b:d1:fd:60:14:70:26:13:
                    c1:30:90:18:61:20:e7:f0:23:55:15:fa:88:b7:9e:
                    72:28:57:ce:c5:b8:4e:70:72:95:07:42:16:23:01:
                    51:4a:cd:67:60:a3:f1:4c:bf:43:ce:4d:af:c7:57:
                    fa:0c:28:3a:f6:97:60:7d:4a:82:96:b1:ee:af:98:
                    3e:5f:50:af:41:8d:81:9e:2d:56:18:65:e0:4b:fd:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:87:0B:6C:0E:E2:F8:17:3F:F4:43:2F:73:39:CD:40:A7:E3:9D
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:af:1d:ef:7f:00:d9:d5:b2:8a:37:9e:6c:04:cf:08:b9:8c:
         bc:d2:83:53:b2:51:5a:9e:41:d5:9c:00:6a:74:4e:c9:cf:39:
         b1:52:62:04:8b:7e:7c:2f:d1:fd:42:57:2b:ed:2c:68:fe:dd:
         02:f8:74:b5:72:8d:a9:5a:ea:3a:e1:6c:8b:9a:fb:02:ed:4f:
         92:f4:d9:48:a5:48:ce:4c:63:ae:9d:75:15:08:7e:fc:ef:df:
         c9:49:20:65:2c:dd:7f:bd:1f:25:66:b8:7f:ae:06:ff:80:36:
         11:0f:76:6f:1e:b1:12:e7:d6:1e:49:d9:aa:7d:27:42:4d:98:
         4d:84:0d:12:66:47:7d:e3:78:ba:98:d2:85:df:90:18:73:01:
         15:69:dc:fa:46:0a:f5:33:79:1c:bb:3f:4f:ae:97:6f:fc:b8:
         47:6b:98:fc:90:2a:87:95:44:61:32:08:81:6e:ba:d5:c2:91:
         01:0b:c2:48:9a:17:6e:e2:6d:ed:73:31:cc:ca:b7:83:24:ac:
         57:8c:2d:85:31:01:7c:4b:2e:6a:4e:44:84:5f:66:05:ce:34:
         0e:6e:11:83:36:0f:9e:e2:51:05:50:c6:c0:a5:ee:50:b1:1d:
         cc:b2:1d:61:45:3a:1c:00:bf:48:98:d4:4e:a6:ae:88:6f:2c:
         31:8a:e9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1cbd6cjhsty+d3FIUTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz
YTUzZjgwHhcNMjYwMzI1MTkwMTE1WhcNMjYwMzI2MTkwMTE1WjAzMTEwLwYDVQQD
EyhjMDNjODcwYjZjMGVlMmY4MTczZmY0NDMyZjczMzljZDQwYTdlMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrqovmZ9RUAy/JlUStQg2TwldCaH
HlAe3Rv9A3LDkyYDMQrcq/+PxFN+2GEfmj7n3/BX5nv3sS+iyj2oDjoKoqg7L96e
PxEXrHvd0+WzemqrN5vQztLzMngPwOQGfR1Hsi/tPvS6LKiv3o2bmu0lZ7X0wJio
ekuhJWRuUvHhfZT1vsG8SLJGfL5ZUMNlBPCZoYsozEHBGo+mQDd+LJ2jOuRFtHk2
7zNBBubmm9H9YBRwJhPBMJAYYSDn8CNVFfqIt55yKFfOxbhOcHKVB0IWIwFRSs1n
YKPxTL9Dzk2vx1f6DCg69pdgfUqClrHur5g+X1CvQY2Bni1WGGXgS/37oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA8hwtsDuL4Fz/0Qy9zOc1Ap+OdMB8GA1UdIwQY
MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt
NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh
LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE68d738A
2dWyijeebATPCLmMvNKDU7JRWp5B1ZwAanROyc85sVJiBIt+fC/R/UJXK+0saP7d
Avh0tXKNqVrqOuFsi5r7Au1PkvTZSKVIzkxjrp11FQh+/O/fyUkgZSzdf70fJWa4
f64G/4A2EQ92bx6xEufWHknZqn0nQk2YTYQNEmZHfeN4upjShd+QGHMBFWnc+kYK
9TN5HLs/T66Xb/y4R2uY/JAqh5VEYTIIgW661cKRAQvCSJoXbuJt7XMxzMq3gySs
V4wthTEBfEsuak5EhF9mBc40Dm4RgzYPnuJRBVDGwKXuULEdzLIdYUU6HAC/SJjU
TqauiG8sMYrplg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client