Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File:                     VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier:          k6IB4P9pmgWNNusA670SEekzMq07I8AfJlBaA6gkW6g=
Subject key identifier:   D1:D7:11:B4:7E:07:30:69:76:B1:A0:CB:43:F6:B2:BC:45:30:2B:27
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       019D28BB7CB8B7DFA9DCCE0298F7006215D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number:          0D08
Signing time:             Thu 26 Mar 2026 06:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:08 +0000
Files and hashes:         1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: nzTJjOrBn/NiU8g0pClvdCjlkb2JDJzJxUJbz9X0dDA=)
                          2: vtiv1SuCImBiDyE_Yf93wTvMNSc.roa (hash: bNgzXmW67ESZNvtBeddoTaG7/VeqNg+fCmp6on+qafA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:7c:b8:b7:df:a9:dc:ce:02:98:f7:00:62:15:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Mar 26 06:01:08 2026 GMT
            Not After : Mar 27 06:01:08 2026 GMT
        Subject: CN=d1d711b47e07306976b1a0cb43f6b2bc45302b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:60:19:78:90:1a:be:1c:5f:44:47:87:9c:
                    a9:df:e4:6d:6a:dd:e9:12:0a:13:48:34:a0:b3:ae:
                    9f:87:c0:b6:41:e3:99:1f:96:a7:90:b9:e6:72:56:
                    fd:75:91:b9:49:d4:4f:17:c3:9e:a4:d1:38:e2:88:
                    1b:09:b6:23:04:9f:41:eb:1b:cf:df:06:9f:60:8a:
                    4b:a8:13:22:02:27:13:5e:70:50:7e:95:a8:d8:4a:
                    b1:57:f7:a3:2b:18:bf:0a:48:6a:f6:b5:28:5f:45:
                    ed:40:22:0a:b4:6b:12:b4:1e:61:e0:41:68:85:9e:
                    79:5d:30:12:40:85:82:3f:a9:72:65:5d:27:70:a4:
                    4f:e2:e6:5e:2f:6e:5b:9d:d1:b8:47:b3:60:ee:ee:
                    0a:78:af:f4:38:e3:ac:f2:20:ad:0d:fd:b4:f3:b3:
                    40:ce:7a:6a:1e:ac:59:78:d2:a4:a1:b1:d9:6c:3a:
                    7a:c1:0d:ff:3c:05:f2:1f:19:79:c1:3b:ba:93:2d:
                    b8:5e:95:8c:f9:52:b4:f4:7d:a2:3f:c3:6d:42:24:
                    8e:c9:fc:34:ec:0c:3d:31:5e:d9:8d:07:e3:10:b8:
                    c9:c0:47:82:e4:31:68:c7:5c:e2:33:ff:e8:ef:f4:
                    ae:65:8b:58:d3:d1:26:54:86:53:27:6d:d6:fc:2a:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D7:11:B4:7E:07:30:69:76:B1:A0:CB:43:F6:B2:BC:45:30:2B:27
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:d3:ab:c6:bb:63:fd:e0:a2:cc:ef:ab:0c:f7:04:2a:7d:
         4d:fa:fc:96:5a:f8:02:3e:01:de:01:a5:e9:59:9b:74:1d:de:
         ea:38:c5:32:9f:64:54:90:f5:73:62:f1:47:17:f8:93:8b:7f:
         1d:f4:7a:ac:d3:69:0b:f4:79:e9:e7:f3:7c:1f:28:f5:7d:d9:
         b7:89:14:39:c9:ff:ed:f4:9d:c6:a9:e5:af:a6:b4:ff:ab:69:
         92:75:97:1a:3f:e1:63:75:be:7c:ea:71:51:3f:6d:af:61:72:
         d7:99:99:cc:f8:f2:f1:3c:ea:7a:39:ae:67:90:8c:e2:c9:90:
         8a:c8:04:b7:20:3a:6b:9a:c5:4a:a2:e3:6c:ec:57:5b:a8:79:
         28:eb:76:cb:e9:98:9e:1d:d1:70:09:60:c4:50:44:55:f8:9d:
         7d:3e:64:dd:4b:1a:0d:a8:08:52:59:57:92:a1:86:2a:e6:17:
         38:47:94:be:59:a9:ce:7c:cd:91:07:3d:d2:b1:cb:d2:cc:23:
         0b:20:db:00:5e:18:54:58:95:5c:9a:39:d3:40:3d:2b:a5:4e:
         0d:0a:0a:a8:28:55:5b:18:f8:4a:37:62:47:55:6c:6e:29:9f:
         af:1c:9b:38:4c:b7:af:99:52:f9:89:eb:3a:27:a2:70:98:8a:
         84:76:b3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3y4t9+p3M4CmPcAYhXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZjQyZGJhNTFlYzI4MzVkM2U0ZDBhM2Q4YzQ4YmYzMjJm
NmJkYjUwHhcNMjYwMzI2MDYwMTA4WhcNMjYwMzI3MDYwMTA4WjAzMTEwLwYDVQQD
EyhkMWQ3MTFiNDdlMDczMDY5NzZiMWEwY2I0M2Y2YjJiYzQ1MzAyYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BNgGXiQGr4cX0RHh5yp3+Rtat3p
EgoTSDSgs66fh8C2QeOZH5ankLnmclb9dZG5SdRPF8OepNE44ogbCbYjBJ9B6xvP
3wafYIpLqBMiAicTXnBQfpWo2EqxV/ejKxi/Ckhq9rUoX0XtQCIKtGsStB5h4EFo
hZ55XTASQIWCP6lyZV0ncKRP4uZeL25bndG4R7Ng7u4KeK/0OOOs8iCtDf2087NA
znpqHqxZeNKkobHZbDp6wQ3/PAXyHxl5wTu6ky24XpWM+VK09H2iP8NtQiSOyfw0
7Aw9MV7ZjQfjELjJwEeC5DFox1ziM//o7/SuZYtY09EmVIZTJ23W/CrZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHXEbR+BzBpdrGgy0P2srxFMCsnMB8GA1UdIwQY
MBaAFFT0LbpR7Cg10+TQo9jEi/Mi9r21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgt
YTI0ZmFiZjU2ZGFkLzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgtYTI0ZmFiZjU2ZGFk
LzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp/Tq8a7
Y/3goszvqwz3BCp9Tfr8llr4Aj4B3gGl6VmbdB3e6jjFMp9kVJD1c2LxRxf4k4t/
HfR6rNNpC/R56efzfB8o9X3Zt4kUOcn/7fSdxqnlr6a0/6tpknWXGj/hY3W+fOpx
UT9tr2Fy15mZzPjy8TzqejmuZ5CM4smQisgEtyA6a5rFSqLjbOxXW6h5KOt2y+mY
nh3RcAlgxFBEVfidfT5k3UsaDagIUllXkqGGKuYXOEeUvlmpznzNkQc90rHL0swj
CyDbAF4YVFiVXJo500A9K6VODQoKqChVWxj4SjdiR1VsbimfrxybOEy3r5lS+Ynr
OieicJiKhHaz9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:16 2026 by rpki-client