Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File:                     VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier:          U15D60jjcQ3IcgBVg33Tf6Ai4prwE0mBTzMxR7MP484=
Subject key identifier:   07:50:56:8B:91:F8:74:D0:EB:90:F8:0F:EE:84:58:D8:24:22:B8:E5
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer:       /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial:       019CAB6B10B2FFA54DCF2CA30AB0E0C03593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number:          132D
Signing time:             Sun 01 Mar 2026 22:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:46 +0000
Files and hashes:         1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: NClhr0YTwidxKO6cXl/9be3sS6z9gwQHQVoifAbmey8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:10:b2:ff:a5:4d:cf:2c:a3:0a:b0:e0:c0:35:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
        Validity
            Not Before: Mar  1 22:00:46 2026 GMT
            Not After : Mar  2 22:00:46 2026 GMT
        Subject: CN=0750568b91f874d0eb90f80fee8458d82422b8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:12:8f:0c:ab:da:bd:12:3f:61:7b:ea:34:
                    d0:3f:d7:d7:06:e5:7f:3c:b0:18:0f:e2:f6:7a:3b:
                    bc:2a:95:f5:56:99:2d:38:17:f0:a7:93:36:47:36:
                    bc:32:02:69:a4:40:ff:94:ae:4c:a7:40:4c:c6:6a:
                    e4:0e:8b:b6:ea:71:5d:4f:11:2c:a0:9d:a3:86:85:
                    68:7b:00:18:de:1d:2d:af:df:94:8b:2d:e9:6b:2b:
                    52:e7:58:72:21:63:9b:1e:b4:4a:1c:07:44:7b:93:
                    26:ac:9d:a1:f8:ec:de:2a:d8:b6:d4:de:97:bb:30:
                    93:85:67:18:11:dd:0b:2f:b0:b3:28:91:27:44:fc:
                    08:fb:b9:07:3e:e8:52:95:ab:c5:09:54:36:e4:16:
                    a1:a0:ea:16:36:c7:65:15:4a:be:f8:56:71:c5:ea:
                    31:a9:17:90:95:29:c9:3b:a0:32:a3:83:16:e2:c0:
                    93:67:cf:65:70:37:5f:4e:04:e0:f2:01:ee:99:18:
                    51:52:49:02:e2:d4:f9:33:a8:eb:93:69:25:e3:7a:
                    ac:0f:fc:0e:5b:0d:4c:89:b4:8b:f4:00:9e:ab:45:
                    d5:3b:e0:ee:2a:8d:8b:b9:2c:51:d7:0b:68:70:a4:
                    2a:f6:6d:ab:f4:13:ce:ff:89:65:61:b9:3f:98:66:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:56:8B:91:F8:74:D0:EB:90:F8:0F:EE:84:58:D8:24:22:B8:E5
            X509v3 Authority Key Identifier:
                keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:38:86:f9:71:1a:fa:fa:fb:88:38:ed:d3:42:8a:9b:42:d4:
         49:5f:f2:ad:ff:ca:f4:81:d6:2c:75:34:9f:cc:0d:74:44:f3:
         05:59:96:53:fd:20:12:97:cd:64:36:22:c8:ed:b3:f7:90:0f:
         f7:da:76:49:e1:a9:3b:5c:e5:5d:25:b4:a4:8a:3f:f4:0f:6d:
         fb:21:db:aa:cf:78:b1:99:9f:b4:de:be:54:f1:99:4b:4a:10:
         a6:d9:ed:75:a7:58:b2:fd:c9:be:a9:99:fd:6f:8e:38:e1:bb:
         94:a6:e9:98:09:2e:47:c3:38:9c:d0:11:fc:44:fb:20:42:d7:
         21:2a:b7:5f:68:d1:16:ae:0f:6b:53:fb:db:74:af:46:fa:f8:
         ae:b2:cb:7d:b5:fe:9c:00:f3:84:f2:03:51:ee:c9:c1:8a:5b:
         50:3f:4f:f7:3e:c7:d3:51:9b:e0:74:9d:f9:b6:7e:6f:6c:1a:
         3c:8e:7b:e8:97:10:7a:e5:b6:3a:87:eb:b2:40:7b:e2:2b:04:
         8c:5b:50:0d:45:d3:53:e3:0c:fd:48:e1:02:fc:3e:5e:17:39:
         9e:54:7f:e3:2a:e8:b8:1b:0f:76:f9:44:70:e7:fa:74:1a:95:
         4b:ca:1a:5f:83:9f:52:e8:8e:e2:c7:56:5d:d9:9d:47:64:93:
         6e:c8:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:32 2026 by rpki-client