Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          Z6MQspqgNXbKfDw0ClN39Frx1zYietAF1LimiJpDPAM=
Subject key identifier:   3C:5F:BF:0D:DD:C4:CF:A6:40:F1:A2:3C:1F:D7:E4:4D:8E:D8:F6:D5
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       019D27DF78A0441305A1EE6B5DB0A6003C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          078B
Signing time:             Thu 26 Mar 2026 02:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:49 +0000
Files and hashes:         1: TdRoRuguftg1_CqdWk5Gt48Zm3Y.roa (hash: pIKJO4UhdvjyOo9X0IBFTTqjiFZEhP9y8W9dyCKa0M8=)
                          2: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: SfxDxa9NJmNjcusQrXh0ZIHKHwvNIY2bJyTfgOK6Csg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:78:a0:44:13:05:a1:ee:6b:5d:b0:a6:00:3c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Mar 26 02:00:49 2026 GMT
            Not After : Mar 27 02:00:49 2026 GMT
        Subject: CN=3c5fbf0dddc4cfa640f1a23c1fd7e44d8ed8f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:72:be:f2:91:56:9d:09:2d:8f:4a:c7:0c:
                    7c:c6:4d:b7:49:db:00:bd:d0:2b:e3:52:35:f0:b5:
                    80:a7:e4:ad:ca:0f:0a:ef:35:0b:8a:b1:90:c9:3a:
                    13:c8:4a:01:27:b5:07:2a:f7:1c:8f:ee:bf:1f:ae:
                    b7:dc:a7:cf:08:57:f5:2c:50:03:e6:03:95:1b:a3:
                    6d:0f:15:3a:ba:e5:e6:32:1f:81:ac:af:9f:67:c1:
                    e1:dc:e5:af:4b:d4:75:9b:cf:29:98:cc:46:57:1e:
                    4b:9f:78:f7:bf:82:45:cd:1a:da:05:0a:ac:91:8a:
                    f7:43:05:29:5c:4f:0d:e0:75:b7:df:a9:da:e2:08:
                    e2:d7:02:ad:f6:cb:08:5b:de:c0:d3:38:7b:36:d6:
                    44:dc:44:ce:cf:a5:a0:f2:d7:a5:59:ff:91:50:5c:
                    ed:ec:23:ac:8a:28:7a:ec:78:6a:fc:4f:4b:6b:fe:
                    69:a0:7a:ce:8c:3a:5e:d3:03:8d:a9:57:8e:d6:02:
                    92:27:c7:2b:17:8b:b2:89:9d:89:80:c8:61:56:94:
                    77:e5:08:36:28:ae:8a:f9:e6:4d:e2:3b:fa:38:be:
                    a3:8e:15:62:5a:5b:59:ce:94:5e:5b:e1:a7:86:d8:
                    d8:7d:1d:ff:c3:d5:84:42:c7:ae:b2:04:49:10:f8:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:BF:0D:DD:C4:CF:A6:40:F1:A2:3C:1F:D7:E4:4D:8E:D8:F6:D5
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:c8:fa:8d:a0:79:d0:1a:70:dc:0e:d5:65:91:74:08:56:
         8e:b9:34:ff:79:65:e6:5b:57:48:21:ee:11:b4:dc:29:b5:91:
         8b:19:bc:dc:90:86:7f:68:3a:2c:0b:17:ff:19:3a:8d:62:3e:
         40:9f:9a:65:55:81:d2:c4:c7:23:16:6b:ae:cd:fc:bc:58:27:
         0a:d9:a8:9c:ea:25:11:e1:fb:d7:79:48:fb:a3:bd:0d:f9:4d:
         b5:ea:45:bd:a7:42:1d:2a:f2:d5:ee:9a:39:96:94:ea:25:15:
         21:f0:96:7d:9c:12:1b:a0:92:44:4b:ef:18:de:a7:c7:a3:6e:
         d7:f8:61:b7:0d:d7:7c:35:7a:36:7d:7c:f1:3b:ab:5b:85:60:
         17:12:b5:8e:0a:41:0f:5a:73:ba:0b:73:02:68:d8:32:89:fb:
         2c:3b:de:87:da:0e:7a:b1:04:0a:17:68:b9:f5:81:dc:5f:4b:
         e8:eb:fc:6b:60:f0:23:25:dc:e6:77:6b:7f:9c:db:4e:4a:b8:
         54:bf:8b:cb:9a:7e:39:6a:56:c4:e8:fb:9b:18:c4:4f:ef:32:
         d2:fa:6c:0b:0b:dc:6f:70:3e:74:e1:04:97:4a:e8:6c:c7:80:
         58:5f:6f:fa:58:35:8e:b9:0a:ad:d0:12:49:e2:04:d8:23:61:
         f8:77:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:44 2026 by rpki-client