Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
File:                     VlIv9fvKiFRLh6NC_veNHJH8_ds.mft (raw, json)
Hash identifier:          FaH9MJkJVqFp2uap9gqK5MmRN6Nj+8WAslew01U2kXQ=
Subject key identifier:   64:17:82:1B:56:52:A7:A3:C7:06:D7:09:AE:A1:A1:46:EE:B7:81:17
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Certificate issuer:       /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial:       019CA8A142F8C6CE20ECAF17286DCB7B8A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
Manifest number:          2D
Signing time:             Sun 01 Mar 2026 09:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 09:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 09:01:06 +0000
Files and hashes:         1: VlIv9fvKiFRLh6NC_veNHJH8_ds.crl (hash: glCoHwgWw6vQ1fW+JruPaNHYqDphm51SXpFO+0F44Gg=)
                          2: gz3wYuEOXuJqqRpPdLjCiALthOs.asa (hash: 1dEzjEPopCatS+JC0ngGcqrORku5vAVH5rxpH1uWxME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:a1:42:f8:c6:ce:20:ec:af:17:28:6d:cb:7b:8a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
        Validity
            Not Before: Mar  1 09:01:06 2026 GMT
            Not After : Mar  2 09:01:06 2026 GMT
        Subject: CN=6417821b5652a7a3c706d709aea1a146eeb78117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:01:88:42:10:5c:1d:75:a1:94:32:fe:14:
                    4f:d2:e4:8a:6a:9d:1c:2a:e9:f0:4e:eb:92:61:06:
                    2c:74:56:99:8a:f1:35:e6:37:75:59:83:52:b1:49:
                    30:dc:35:a1:b3:c0:ca:40:05:73:51:a3:79:0b:2d:
                    9a:01:ef:e5:04:e1:63:90:62:bc:d1:53:d2:f2:76:
                    b9:9a:f7:6a:92:69:d8:c3:61:a4:d3:a4:91:27:6d:
                    f6:44:00:d9:15:4c:58:93:62:9f:5a:d7:57:dc:78:
                    58:c5:3c:81:23:3d:f4:ff:99:69:24:14:b6:7e:b0:
                    d6:71:75:80:51:2f:75:2d:c1:0f:7d:05:80:ff:dc:
                    47:d5:67:8a:36:c5:a1:3c:91:5d:21:5f:07:96:a0:
                    3a:9d:1d:50:01:0b:19:8f:ca:31:dd:01:c1:9a:f1:
                    6d:c7:3e:ae:08:c1:24:bd:70:10:34:19:91:16:66:
                    27:5b:05:08:9d:3d:6d:c5:60:be:89:aa:eb:e9:3e:
                    d8:c9:af:83:f3:a7:05:5f:0f:95:52:a1:d4:08:9b:
                    cc:b7:56:fa:00:7b:a1:37:e5:f8:8a:4b:9b:a6:60:
                    b4:9f:c3:bc:70:aa:1a:c7:d5:0f:78:e7:10:22:d5:
                    34:e9:eb:59:39:39:69:20:69:e6:14:5f:90:f5:23:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:82:1B:56:52:A7:A3:C7:06:D7:09:AE:A1:A1:46:EE:B7:81:17
            X509v3 Authority Key Identifier:
                keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:43:9e:12:10:a5:08:fb:33:ac:89:53:af:4e:89:d0:bc:
         33:1a:76:40:c9:42:c6:d1:a1:48:94:1a:aa:e6:a2:c1:12:1c:
         97:1d:83:8e:05:f6:69:71:9e:87:ca:c8:2b:9f:c9:12:1a:56:
         05:88:5d:0f:e2:33:fb:5c:3a:71:07:b9:a0:61:db:12:c0:ba:
         ee:54:02:ed:01:b9:2d:3c:a7:fd:90:3d:7a:9f:ce:78:9b:f9:
         e3:41:df:05:01:4a:78:36:95:1c:d7:8f:26:0c:00:87:ac:b6:
         82:f8:3d:d5:2f:2e:97:ae:43:5f:bb:e9:a6:f4:a4:b9:03:39:
         dd:1e:c7:eb:20:2a:7e:60:8a:52:3b:cc:8d:a6:9a:6c:3d:a3:
         fc:20:5a:aa:65:a1:20:7a:0e:c9:cd:6c:84:50:fc:79:76:d9:
         c8:3e:9d:fe:9c:fd:04:5a:59:90:39:5f:cf:42:74:ee:97:ae:
         8f:70:48:54:c2:42:81:0c:f0:af:53:58:75:87:72:02:59:92:
         c0:7b:a7:0d:55:19:21:19:e7:a7:82:27:f2:93:9c:1e:18:04:
         83:f1:2f:20:b3:0b:60:bd:47:17:3c:ed:a8:d5:10:e8:a9:c6:
         9c:f4:3e:1d:ef:62:29:89:78:b4:8a:97:34:2c:cf:a1:3b:02:
         c5:81:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:47 2026 by rpki-client