Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          jlRyAS/VWDR1S7aDVLXbqlk4VLfYMQqaKocg/7o+N5A=
Subject key identifier:   EA:66:8D:F7:A2:E9:B7:01:B1:96:73:DA:28:18:2F:59:7C:C7:AC:B0
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       019CABA1B86E49B91499D0F97B471014439D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          1553
Signing time:             Sun 01 Mar 2026 23:00:28 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:28 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:28 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: gJ9KqtwkYIR/Dp2TV89R5JxoX9/gm9vlezfrHXGpQuU=)
                          2: t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa (hash: y8z5xcdOoisg3/Lhw/UJq/FRgFg1letqfgFD0/0tbNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:b8:6e:49:b9:14:99:d0:f9:7b:47:10:14:43:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Mar  1 23:00:28 2026 GMT
            Not After : Mar  2 23:00:28 2026 GMT
        Subject: CN=ea668df7a2e9b701b19673da28182f597cc7acb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:95:5b:cb:e8:32:22:f8:11:5e:e9:80:b4:08:
                    9a:a9:31:af:04:99:ce:a3:d1:7b:fa:16:f2:44:1c:
                    c7:31:77:3a:33:80:bc:b9:71:6b:ad:b0:27:43:11:
                    b3:47:73:c4:7e:f5:f5:d2:c6:1d:be:69:0b:5d:46:
                    7e:9e:77:a5:6e:2f:49:2a:9d:07:d7:74:d5:7f:8e:
                    01:9c:91:06:13:35:88:ef:1e:06:1f:b5:2d:44:3d:
                    7f:a1:fb:82:ea:20:be:12:63:0e:ea:31:06:ba:66:
                    18:b9:b3:30:8b:76:f3:97:fd:1d:e1:a8:a9:0f:b7:
                    2d:50:c6:8c:3f:3e:a8:97:7c:6f:24:77:b7:37:94:
                    d8:96:01:cc:db:ee:5e:28:3b:87:bc:f6:c9:96:ed:
                    33:ca:ed:54:af:24:aa:b4:eb:7d:c3:45:6e:4f:c3:
                    8f:bd:d4:1c:e1:fe:21:38:4c:61:a9:71:50:59:c4:
                    d4:8e:ef:be:86:c0:e7:03:df:a6:7a:76:79:b8:95:
                    45:d0:e8:01:65:5c:28:8e:1e:98:6b:cc:ea:4c:12:
                    d3:7e:33:49:eb:42:af:c4:d2:78:ca:91:7e:bb:fa:
                    43:ee:99:2d:9f:bc:93:f9:6f:3d:b0:63:26:bc:ba:
                    91:35:2c:a0:d2:18:32:b7:4a:61:ba:24:c7:c1:bd:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:8D:F7:A2:E9:B7:01:B1:96:73:DA:28:18:2F:59:7C:C7:AC:B0
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:f3:5a:7f:8c:9c:61:87:71:97:3d:eb:f5:9d:c9:a3:c1:
         f0:14:4d:ca:70:5a:06:49:38:e8:37:ba:0c:8f:c0:47:4b:e2:
         11:65:03:a2:8d:92:fd:01:81:a2:bf:46:24:60:0b:28:c6:ee:
         b7:df:c0:71:91:28:75:5a:92:a7:4c:13:32:5a:ac:79:57:3e:
         00:58:91:3b:a0:a6:a1:ba:1b:5f:1f:0c:26:c0:b0:be:2e:c4:
         15:bd:13:ce:f1:06:0e:62:3c:79:08:d3:53:95:71:ba:64:1e:
         be:57:21:30:06:5e:97:0c:1b:71:0b:af:69:88:29:14:d0:9c:
         d7:5d:fc:71:12:b6:fd:74:38:26:7c:05:38:55:1b:a1:92:ce:
         05:56:68:84:96:31:aa:79:b3:94:2c:83:08:a0:d9:d3:41:e7:
         7b:75:c9:a8:71:15:35:a9:47:2e:40:91:3f:82:dc:52:f7:c2:
         bf:3c:ac:d3:ac:d3:df:e7:aa:91:6f:33:a9:cb:a3:5d:64:15:
         7d:ec:63:43:09:21:ee:a0:bc:51:f8:a3:d5:d9:cb:7f:a8:71:
         52:08:ca:9c:6f:bd:20:45:dd:19:ed:32:22:1e:72:98:a8:bc:
         9d:f2:a8:51:f5:16:03:7b:0e:8a:00:bd:ac:89:ee:20:10:46:
         af:7d:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:22 2026 by rpki-client