Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File:                     vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier:          8qf7H2LWmkt1GKN47GK5LRLd3zwQsrvae8n+WmEUTOM=
Subject key identifier:   CF:2F:41:74:6B:E3:01:D0:C9:B2:3D:C7:B2:3C:22:0F:D0:10:78:B6
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer:       /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial:       019D265F3274A48802D5D320DC3605B4C7A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 19:01:06 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:06 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:06 +0000
Files and hashes:         1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: aFR5DcXnNGsshZnXbtWA93e0VTMgzGuU49oVQNS3Iwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:32:74:a4:88:02:d5:d3:20:dc:36:05:b4:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
        Validity
            Not Before: Mar 25 19:01:06 2026 GMT
            Not After : Mar 26 19:01:06 2026 GMT
        Subject: CN=cf2f41746be301d0c9b23dc7b23c220fd01078b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:f8:8b:d0:17:cb:bd:bc:6e:b9:cb:7d:55:
                    73:8f:81:da:64:61:cf:c6:ae:5f:b2:b7:31:eb:58:
                    ad:22:49:7f:69:1b:3e:0a:67:26:e1:08:8c:63:db:
                    0d:81:38:df:39:0a:66:d1:bc:e2:9b:6f:86:18:39:
                    1b:74:b2:b0:0c:af:8a:80:5f:87:4e:8f:77:b0:2a:
                    f8:c4:6b:09:e6:89:7e:b1:bb:d2:8f:1e:ad:4a:75:
                    fe:21:71:96:62:d2:1b:70:d1:6f:24:bd:89:aa:5d:
                    a9:d8:a8:ac:0d:05:12:9d:e0:67:51:46:53:55:e0:
                    c8:42:fa:80:63:d6:05:ba:8b:e7:22:d2:f2:fe:68:
                    a7:3b:91:8d:28:9a:57:d2:92:05:69:3d:be:37:41:
                    73:dd:5c:6c:47:85:af:40:59:39:4e:55:85:69:21:
                    c6:77:e5:41:5e:10:c4:8b:87:3b:36:92:b0:05:a2:
                    e4:c5:14:0b:5a:fc:f0:47:3a:33:ff:fe:0f:3a:b8:
                    45:83:2a:12:d6:3e:5f:62:a0:15:cf:5c:e3:90:47:
                    35:02:c3:40:03:46:12:70:0a:db:f7:d2:ad:8e:c4:
                    36:2f:37:c7:82:fe:b2:bf:ed:e1:57:22:2b:f6:73:
                    bf:08:9a:6b:82:7c:77:4b:ff:f5:82:6c:0a:bd:a2:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:41:74:6B:E3:01:D0:C9:B2:3D:C7:B2:3C:22:0F:D0:10:78:B6
            X509v3 Authority Key Identifier:
                keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:26:ba:38:b3:1a:fe:fa:57:9e:58:39:71:38:99:50:1d:7c:
         c7:84:dc:ab:e6:08:d9:9f:0c:87:52:65:1f:1c:7f:9d:6b:7e:
         ad:fd:ea:ec:ed:04:c2:77:e0:a7:8a:14:03:aa:32:9f:ce:93:
         fb:bb:8a:6b:ce:1c:88:91:2e:ef:00:5a:26:20:44:52:3c:1a:
         c9:09:dc:ec:f2:ed:4f:2d:2f:49:c1:a2:5b:09:0f:d6:52:7c:
         1f:ee:ef:c5:70:2e:a8:e1:76:c0:e5:e1:f4:33:d1:b2:8c:7b:
         99:dc:3f:71:23:3d:01:6c:69:b6:b3:d5:5c:6a:43:a6:90:c8:
         dc:b2:2a:8f:73:85:52:a4:03:ab:07:5a:ea:c6:ba:6a:0d:f3:
         ac:dd:1c:3a:a1:63:d3:b2:b3:45:d6:cf:48:94:ba:7b:81:fb:
         79:0a:a0:02:e7:c1:54:b9:a4:25:f1:c6:42:14:e0:d8:72:55:
         6f:42:df:70:ea:3b:64:61:31:17:a9:6d:b0:ea:23:2e:cb:f4:
         43:2f:6c:57:15:9e:ed:f2:74:c0:46:68:e9:fb:a7:c3:22:0e:
         d8:82:24:ee:40:67:91:0d:7e:f1:04:2a:2c:33:2e:06:49:44:
         9a:0e:f4:57:e5:0f:85:c3:9c:26:2d:cd:16:ed:ed:d5:2e:27:
         dd:dd:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client