Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          QphlcEEi08DIaiIZIVjI8pkGEDYFnWiNlPqECdhknlk=
Subject key identifier:   EA:5B:E3:B9:CB:3E:5A:80:31:40:A4:12:34:37:5A:5C:78:F7:1B:47
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019D265FF4741B63CFA8AD80A617C05B8EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0D1D
Signing time:             Wed 25 Mar 2026 19:01:55 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:55 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:55 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: 9UXwkgy1nxGTIvr/8cSRkt9SZexE4fj61YBJNbvK+o4=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:f4:74:1b:63:cf:a8:ad:80:a6:17:c0:5b:8e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Mar 25 19:01:55 2026 GMT
            Not After : Mar 26 19:01:55 2026 GMT
        Subject: CN=ea5be3b9cb3e5a803140a41234375a5c78f71b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:9a:4e:75:a8:4a:69:aa:a9:34:4e:c6:8a:
                    97:20:70:8d:3f:89:c8:41:27:76:88:57:57:6f:b8:
                    20:95:17:b2:cc:03:cd:ac:6b:72:b8:10:53:fe:ec:
                    b8:b2:b4:ff:c3:e8:66:64:ed:07:8b:ff:b5:f3:20:
                    c8:50:8d:80:b9:12:80:16:c4:13:83:4e:2c:d4:b7:
                    0a:84:f0:df:51:4f:65:63:cb:91:dd:d1:31:11:01:
                    e7:0a:d9:9b:b7:e2:1c:a6:d8:44:21:13:3b:6a:ad:
                    9d:cc:c6:d7:cb:70:9a:c1:a8:5a:12:14:9c:1d:84:
                    e4:e7:10:68:38:2c:75:49:83:38:29:35:a9:02:ed:
                    42:c9:9a:99:a7:08:40:0c:ba:0f:fe:55:2d:0e:16:
                    a4:97:18:7a:49:2e:6b:4a:d6:50:bf:fb:21:e2:95:
                    cc:48:ad:8a:18:9a:56:c8:e1:da:77:d3:89:32:2a:
                    b0:47:21:35:90:b2:1e:7f:4c:56:f8:29:e5:cb:ef:
                    ec:58:6c:61:a8:62:17:b9:72:9b:6f:5e:8c:da:33:
                    95:9e:21:66:7b:f8:f5:47:90:fb:e3:0f:1f:c0:56:
                    5f:b1:9b:20:fb:64:20:15:83:d0:63:16:73:0b:ac:
                    e0:14:b4:2c:30:1e:13:8f:8a:11:20:f6:72:98:44:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:E3:B9:CB:3E:5A:80:31:40:A4:12:34:37:5A:5C:78:F7:1B:47
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:25:15:13:16:a7:0c:76:8c:31:b2:12:e4:24:cd:ba:3d:
         80:ea:0f:53:fc:80:6b:6c:46:54:d3:ab:63:44:0b:8b:08:02:
         1e:22:dd:7f:9d:66:b8:72:82:86:c3:b8:e9:0e:7c:a4:59:d6:
         63:19:08:c2:34:1d:6f:41:28:cf:2f:26:d2:17:13:a5:85:b3:
         f9:26:73:f4:95:7e:ba:54:f6:df:d7:14:a0:f3:65:3c:a8:7b:
         22:18:91:79:73:13:01:cf:b9:a0:5c:1c:6f:7e:40:73:c8:a1:
         15:51:5f:45:6f:46:70:b3:a8:35:89:86:7a:74:17:66:c1:59:
         e1:d5:ba:9b:ac:40:73:66:29:4f:1f:e3:3a:f3:04:46:b1:16:
         1c:43:43:45:a1:66:d7:73:2c:09:63:7c:fa:cd:05:a1:fa:7a:
         7d:ed:9e:52:8f:54:69:fb:ad:93:8a:a2:6c:15:f0:d1:a1:e3:
         27:0c:34:2a:a4:44:97:d3:de:33:dc:a1:7b:4b:60:a3:28:9c:
         6d:d0:12:51:6c:39:c8:ab:85:03:c0:9e:c3:f2:53:9b:4e:25:
         87:ef:d8:5c:d4:12:60:7a:1c:50:fb:84:29:7d:a9:dd:d5:e0:
         4a:f1:3c:c9:ab:2b:49:8c:26:62:f3:38:4c:9a:61:23:95:69:
         e8:23:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:41 2026 by rpki-client