Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
File:                     VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft (raw, json)
Hash identifier:          0apa7WRWmQkbot5QmMTSP3I5UR51VtwPhsMiT2ovzyQ=
Subject key identifier:   FC:7A:B1:39:E1:89:21:A4:6F:FD:9F:50:CF:8B:6A:04:8C:51:AA:08
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Certificate issuer:       /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial:       019D284E2ED26B5C510E830D6D6BDB500DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 04:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:45 +0000
Files and hashes:         1: VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl (hash: WdeI7A2bqdqFDAAcS9owD8zY+n2zDLw9pHQNchJjYjc=)
                          2: Vchu28hFiP2g2wl5siwgeV6-0Mo.roa (hash: nzslrPM5r0/2SJpIcbCIN9cB87EfRDEPS3VmNNiKSEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:2e:d2:6b:5c:51:0e:83:0d:6d:6b:db:50:0d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
        Validity
            Not Before: Mar 26 04:01:45 2026 GMT
            Not After : Mar 27 04:01:45 2026 GMT
        Subject: CN=fc7ab139e18921a46ffd9f50cf8b6a048c51aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e4:14:30:58:5a:c7:d7:38:5c:17:c8:93:82:
                    a8:7e:5e:10:8a:78:65:f4:c4:8b:d4:16:be:a4:35:
                    ff:0e:50:61:00:f0:25:9d:ad:f0:da:fc:c4:51:41:
                    36:c1:87:21:00:34:56:b1:51:2a:22:a4:9d:0d:c3:
                    7c:6e:9e:ed:1a:dd:41:d5:f7:c5:66:6a:82:32:fc:
                    74:ee:b0:f3:91:9b:13:a6:df:32:88:44:c4:aa:73:
                    00:a8:64:fe:b7:ea:d7:56:56:80:8d:4e:af:23:39:
                    42:b6:cb:e8:97:6c:f5:c1:e0:bf:a4:c4:44:65:20:
                    31:fb:d7:d6:e2:cd:b4:92:d6:86:99:78:f9:f7:c4:
                    6c:a4:f1:e6:79:01:24:d1:ba:6a:cf:c5:50:db:8b:
                    c5:20:7e:0e:6b:38:4a:75:99:fa:8f:39:85:3d:da:
                    f5:42:13:d3:22:45:27:0f:38:ef:e6:40:4e:53:50:
                    79:54:e3:14:c8:39:51:dd:2e:d4:36:37:50:54:5d:
                    3a:f5:47:b3:2d:b6:9a:77:97:d5:f3:25:ff:01:65:
                    40:93:5e:2f:7d:4a:ae:7e:22:d1:ed:f2:c1:b7:ee:
                    ee:1f:da:b3:41:7b:aa:dc:be:d1:89:1e:18:51:14:
                    42:7f:ad:cd:77:34:36:48:1a:f2:94:29:d4:ff:b9:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:B1:39:E1:89:21:A4:6F:FD:9F:50:CF:8B:6A:04:8C:51:AA:08
            X509v3 Authority Key Identifier:
                keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:39:5f:e5:2b:97:e9:f8:8f:f4:19:8a:ef:24:c8:c8:4f:f2:
         81:5c:6a:2e:13:89:63:6c:94:47:a3:0b:92:ee:66:0e:85:27:
         ee:8a:e2:6e:59:2f:05:f8:cc:8a:60:b3:22:da:02:87:4a:64:
         b2:49:51:67:8e:ad:30:cc:c9:5b:a1:45:4b:ed:ac:1f:b4:fd:
         ae:96:b2:cd:55:87:4e:fa:36:04:80:f5:b5:be:3e:a7:9a:e9:
         a3:68:fa:c2:25:6b:2b:8d:1d:33:07:ff:84:48:ca:4f:f0:21:
         5c:5b:21:fc:ee:59:70:c9:70:c9:5f:2e:e2:cc:d2:3f:08:4c:
         2f:ea:8c:f6:0d:75:04:f5:c1:a7:8a:01:10:85:fd:6b:2b:24:
         10:9b:66:45:aa:de:4f:ab:85:31:7d:6d:24:7e:6b:81:5d:82:
         ac:dd:70:76:24:10:68:f1:96:04:ad:1a:16:62:0d:db:7d:17:
         0b:08:65:10:88:65:7a:b9:d4:97:52:aa:c5:66:8a:9b:fc:1b:
         bb:d7:ff:32:b7:d5:85:eb:21:86:19:0a:08:fe:fb:a6:84:e7:
         59:ac:07:72:29:3e:1e:be:7e:ec:18:1b:86:66:77:01:75:f0:
         af:ea:89:b4:bf:b7:81:dc:24:c1:8a:ce:4c:05:c8:67:99:ff:
         ff:6f:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:15:43 2026 by rpki-client