Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          b9Kh6khjQyRfqmH20XvQkW8apKTHfwPvz5i5eFAGkvs=
Subject key identifier:   22:30:C0:72:52:00:C0:0E:56:E0:DC:E1:6C:52:6F:FD:CC:D2:75:82
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       019CADC83F93614A09D8651A75BBDBAF7A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 09:01:47 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:47 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:47 +0000
Files and hashes:         1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
                          2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: nTvWPtQIlATop1t7apMVY6nSGgQV2ZqfXoC5RNV8K9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:3f:93:61:4a:09:d8:65:1a:75:bb:db:af:7a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Mar  2 09:01:47 2026 GMT
            Not After : Mar  3 09:01:47 2026 GMT
        Subject: CN=2230c0725200c00e56e0dce16c526ffdccd27582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:23:4b:ca:7c:64:0e:87:da:f5:11:8b:6a:
                    0c:81:ac:fc:d4:3f:8d:2a:1a:91:18:3c:4c:63:52:
                    b3:2e:de:50:4c:03:d2:a7:c5:e1:3a:a1:1d:ee:bc:
                    0d:ba:27:e6:77:61:a0:fe:43:ab:2b:6e:41:c5:6d:
                    29:81:0e:37:b2:48:0d:d7:59:f8:c7:2a:c3:50:75:
                    07:2f:30:bc:a3:66:59:9f:1d:b8:8a:46:3b:1f:ac:
                    e6:42:76:86:52:fb:eb:ac:9b:30:39:aa:ee:75:5e:
                    5b:eb:90:91:f5:47:67:c7:69:b9:82:95:67:81:07:
                    e0:9a:eb:f6:7e:49:3e:21:12:b3:f7:31:65:5f:9e:
                    4c:91:f7:b9:f2:2d:70:ea:e4:7a:68:c5:48:9a:f4:
                    dc:43:9b:a4:8b:11:43:ce:eb:e3:3b:24:98:7e:3c:
                    a8:52:9c:43:42:4b:e3:29:09:88:fd:d7:2a:82:b8:
                    07:4f:77:d0:b5:87:ad:41:10:d4:03:98:bb:37:03:
                    e9:12:dd:ad:ed:fd:60:fa:b2:89:77:1c:ff:ed:f7:
                    53:33:f6:8c:e4:e1:bf:99:eb:4b:ed:8a:a7:24:0a:
                    82:e5:24:88:ad:6c:05:ba:ea:95:64:45:75:8a:be:
                    06:c8:d2:64:23:9a:cc:01:61:5b:c6:cc:01:0a:f3:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:30:C0:72:52:00:C0:0E:56:E0:DC:E1:6C:52:6F:FD:CC:D2:75:82
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b5:57:7c:1f:4f:01:bc:a4:f1:b1:5a:d0:71:7d:b7:77:b5:
         df:5a:52:03:9e:c8:b9:91:b1:1f:4d:81:9e:71:90:85:40:a2:
         a1:89:5e:60:ed:20:89:57:e1:d5:31:88:02:28:18:58:70:9b:
         49:35:51:cb:2f:f1:11:df:43:52:a6:87:6a:6f:a8:57:61:4b:
         b9:a0:1c:2a:e9:3b:1e:2f:44:98:27:52:33:68:f4:46:e4:b2:
         ba:32:09:07:38:99:aa:62:e6:92:38:d8:78:cb:3f:5b:99:5c:
         60:46:70:c8:80:9c:2f:87:5e:bf:27:e3:1c:dd:d6:bf:11:1d:
         19:93:8f:04:4d:3e:51:78:c4:82:1e:e9:e4:12:a4:b5:b3:90:
         9c:95:47:83:05:f9:8b:e5:40:64:73:f9:6b:82:28:3e:6a:89:
         83:02:00:42:6b:7d:98:36:42:87:ca:8e:df:6a:c1:f5:a3:0f:
         83:cb:78:d9:68:49:5b:00:5d:d7:00:4f:ca:ce:ec:bb:c2:bf:
         d9:a5:de:2e:66:ff:54:6c:16:4b:64:ee:2e:26:12:0a:f6:22:
         6e:8f:ec:14:ce:0b:c7:ee:51:cd:cf:c4:69:a0:2f:c2:4e:04:
         12:14:4d:dc:d6:3e:95:a4:04:9b:29:f9:4e:44:fd:33:e0:b6:
         4c:c5:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:25 2026 by rpki-client