Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
File:                     VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json)
Hash identifier:          ZHJVQ8G+NF/MhSEubtSw/PCTCl6mSIWMExRKz5GZSZA=
Subject key identifier:   2C:1B:07:AA:44:86:3A:83:A5:8B:B4:08:87:95:D5:A9:B4:CC:B3:C3
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Certificate issuer:       /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial:       019D25BAA873D16061E2B163DFC9BB87F279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
Manifest number:          013B
Signing time:             Wed 25 Mar 2026 16:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:22 +0000
Files and hashes:         1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=)
                          2: JPN0ZhHYSvkn7r532xwlghazy8M.roa (hash: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY=)
                          3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=)
                          4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: juN0kR7/Y11EYDYE4h+MyJMHJuJbAReKXOGqmAef0uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:a8:73:d1:60:61:e2:b1:63:df:c9:bb:87:f2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
        Validity
            Not Before: Mar 25 16:01:22 2026 GMT
            Not After : Mar 26 16:01:22 2026 GMT
        Subject: CN=2c1b07aa44863a83a58bb4088795d5a9b4ccb3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:cf:38:d3:7b:3e:e3:f8:27:42:90:6d:c0:
                    78:53:97:ab:5d:be:2a:7c:37:16:19:70:04:5a:c7:
                    c4:f8:8e:ea:f0:24:00:e1:6a:4c:7a:31:33:a8:c2:
                    41:79:3e:7a:3c:7a:d0:82:a3:bc:40:5c:a3:55:e1:
                    ec:f8:0c:99:29:49:fc:ab:63:05:c7:9e:a8:95:bd:
                    2a:32:6c:bc:36:67:13:8e:09:7c:46:9f:13:fe:38:
                    1a:ad:8e:c2:4e:12:4e:61:2f:63:89:d5:2e:6f:42:
                    49:b5:a0:e6:17:55:8c:cb:14:ff:ff:8f:3d:ac:4d:
                    9f:33:46:0d:ca:47:01:7e:ab:fd:50:d3:1b:cf:ed:
                    e5:31:ef:ca:2b:ee:07:53:22:99:50:dc:2c:f3:3b:
                    40:9d:0a:ab:bf:19:c1:43:1d:cd:7c:ed:63:12:86:
                    a6:7f:88:ea:05:d9:0f:8f:9b:c9:4e:48:90:54:5c:
                    6f:9b:fc:56:95:78:c2:2a:27:ae:64:9e:33:5c:c4:
                    43:fd:24:65:5a:59:21:a2:82:c4:10:59:ed:75:7d:
                    ec:b0:66:46:f9:a9:c5:2b:1f:03:45:8e:ce:08:91:
                    d6:29:4d:90:33:ab:ac:76:c2:7b:1b:e1:f5:4c:93:
                    87:de:06:e0:5a:e7:8d:22:bc:1d:a1:ea:4b:be:77:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:07:AA:44:86:3A:83:A5:8B:B4:08:87:95:D5:A9:B4:CC:B3:C3
            X509v3 Authority Key Identifier:
                keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:b4:79:79:66:a3:00:31:ee:54:56:78:9e:7e:15:84:6f:
         ae:af:3d:00:2a:1d:58:53:de:a1:30:18:fc:39:c8:2e:f0:ac:
         ae:9b:63:a5:73:07:5d:77:24:e6:76:be:b4:c5:91:31:a8:1e:
         fb:9a:11:fe:8c:0d:c2:ea:8c:3b:03:3d:39:50:c5:5e:f3:ce:
         16:4c:d0:18:c4:89:e1:cb:72:98:29:e2:86:57:88:b0:d5:f0:
         f6:4c:8f:44:3e:8f:29:91:3f:ed:b1:c5:0d:59:0a:bd:ee:ff:
         34:79:ce:24:9d:6b:a4:25:76:6a:88:f1:79:f6:b9:a6:e8:0a:
         28:5a:2b:aa:32:6e:86:ff:23:93:00:d9:11:70:76:da:e3:0e:
         cd:47:7d:c0:92:01:f1:22:08:f8:7e:ec:62:ff:64:75:b5:40:
         98:49:d7:d1:dc:ec:23:9c:02:66:7c:b9:f3:84:de:dc:a9:04:
         b6:56:d0:e0:3c:36:35:cb:6c:0c:fa:bf:68:44:c0:14:7d:8d:
         e7:7e:a3:03:10:44:37:cb:a4:43:e3:f8:f0:4b:5e:a4:f7:0e:
         c0:59:93:9b:bb:be:77:fb:f1:b8:2e:2c:6f:01:f8:78:25:3b:
         36:ba:61:fb:07:0f:d7:e2:1d:5c:da:cd:27:29:a3:f4:88:84:
         08:11:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:27 2026 by rpki-client