Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          o88tsRw8nnpt3Wrm4h12QL0lk4SGDUgEgc3/y4NvAEA=
Subject key identifier:   B6:55:2D:AD:F1:61:85:50:3E:8C:5E:57:15:29:7D:1F:44:83:AC:6E
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       019D2929B35C800D7B944A6F7534352A5639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          02F2
Signing time:             Thu 26 Mar 2026 08:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:31 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: Tvkq1sn9F9PWhtDEmiAKYmkD3XNCxB3zBry8FNUo0Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:b3:5c:80:0d:7b:94:4a:6f:75:34:35:2a:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Mar 26 08:01:31 2026 GMT
            Not After : Mar 27 08:01:31 2026 GMT
        Subject: CN=b6552dadf16185503e8c5e5715297d1f4483ac6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:ce:6a:29:98:3e:62:48:bd:0c:0a:a2:54:
                    9d:b2:51:f6:57:9a:8e:2b:b4:9b:f1:aa:91:3d:dc:
                    22:cc:f5:c4:66:4e:16:56:ce:7b:79:85:2a:00:a6:
                    de:bd:d9:b6:3b:88:d9:a7:4b:75:20:a6:36:75:8c:
                    1d:38:05:5e:5d:cb:e0:7d:92:aa:a2:97:01:b8:e0:
                    c3:ad:0f:94:96:d1:c8:33:06:58:23:ee:72:d6:7c:
                    fd:cc:fb:ee:95:cc:21:96:44:d6:6e:d7:46:ad:14:
                    ce:9a:13:97:99:47:3b:57:31:cf:50:c3:53:d8:43:
                    33:2c:eb:08:e4:0b:fa:42:9e:66:f7:7c:58:32:4d:
                    c5:ca:8c:8d:ce:9e:01:27:28:a3:ae:45:76:b9:f6:
                    bb:3d:af:21:12:e2:63:bb:d2:2d:71:6b:52:ed:5f:
                    b4:f8:20:e7:c2:5f:3d:d9:da:ed:8f:25:7b:95:1e:
                    fa:1c:e5:85:37:7f:07:ef:90:ea:f9:09:de:11:f7:
                    fb:77:d8:78:5b:da:8b:ec:47:ae:9e:60:f1:a3:da:
                    1c:bf:d5:da:3e:6a:33:bb:0a:1f:22:8e:88:01:8b:
                    b0:b9:36:82:fd:d7:40:f5:c6:15:17:6f:14:f8:93:
                    45:fa:c6:95:f0:33:61:cb:7f:5f:b0:8b:86:06:11:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:2D:AD:F1:61:85:50:3E:8C:5E:57:15:29:7D:1F:44:83:AC:6E
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6d:5c:7a:18:41:2b:e5:b8:3f:e4:ab:4a:d8:cc:05:2c:fc:
         d1:c6:0e:f8:6e:e7:8b:3c:5f:b6:99:71:49:e1:73:de:3d:20:
         03:11:c6:b0:de:c4:df:1f:56:6e:9c:a2:f4:f7:5d:c9:9a:7f:
         e5:98:1b:dc:63:c6:f2:3b:5a:6f:fd:d4:54:10:ea:31:cc:44:
         73:e6:e0:1e:f6:b2:c8:8a:9d:23:bd:48:e0:03:dd:b9:ce:cc:
         72:26:68:35:5b:6c:6b:03:08:36:60:55:41:a1:99:ab:6b:31:
         f0:01:7e:12:51:e9:3b:54:ab:e9:ef:3f:cd:4f:d4:72:7c:6d:
         2a:df:4b:c4:63:58:17:96:e3:aa:c1:16:cb:c8:54:76:b1:93:
         cb:e0:50:86:d3:6a:b9:c3:21:45:b6:4f:19:27:38:75:23:56:
         a0:d1:15:90:30:9b:9b:f8:ec:43:70:56:f0:7e:10:58:a4:d1:
         97:3b:d4:44:1f:e3:3c:f2:20:ae:c3:81:55:88:d2:63:c5:a5:
         6f:81:2d:88:ae:83:4e:14:cb:c9:1c:6b:f6:8c:71:fc:cc:07:
         35:59:8e:72:6a:f1:0d:49:15:c5:90:f4:fe:25:a6:47:a8:83:
         ac:56:9d:4e:ba:a3:3c:2f:17:2a:26:ff:23:8a:01:7d:04:c7:
         08:80:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:47 2026 by rpki-client