Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          LHGmDneygV6ExgduaS+4wnkzUUKzdlryiyIbSrYqx88=
Subject key identifier:   F0:E3:32:67:57:98:01:8C:1D:FD:23:5A:10:31:A9:D7:03:D1:4C:1C
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       019CAAC7083D9CF713A099BB9F64667D8095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          01E0
Signing time:             Sun 01 Mar 2026 19:01:36 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:36 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:36 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: LG1qedaV+EpS9N5tVmheWuRDvC1M926ILl29SlC/Llw=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:08:3d:9c:f7:13:a0:99:bb:9f:64:66:7d:80:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Mar  1 19:01:36 2026 GMT
            Not After : Mar  2 19:01:36 2026 GMT
        Subject: CN=f0e332675798018c1dfd235a1031a9d703d14c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:67:f7:12:4e:fa:6f:a4:b7:ff:a2:c0:34:
                    eb:92:80:06:9c:ad:94:c6:2f:7e:a9:98:2a:f3:b8:
                    05:7b:63:bd:61:6e:2d:3a:05:fa:bf:16:c5:93:f8:
                    db:ff:b1:6b:14:78:f7:42:a9:c1:18:d4:4a:07:99:
                    fd:14:41:2e:90:9e:8f:9c:c7:18:5c:40:c2:b5:3a:
                    d4:c9:65:95:60:54:5b:a7:65:ee:b9:8f:fb:eb:76:
                    7a:30:ee:34:f3:96:21:4f:e8:69:32:30:9a:29:09:
                    ed:e0:80:e8:1d:eb:38:61:94:fc:81:5d:2f:08:b0:
                    44:1c:d8:34:b8:2f:c5:28:a0:17:67:c5:5e:2a:5b:
                    6c:3a:19:72:e9:be:98:0f:46:4e:ec:7d:25:d8:0c:
                    c5:fb:2f:0e:91:23:d0:7d:45:32:32:ae:5c:14:fd:
                    44:b1:82:c6:b6:45:e8:dd:9c:54:e0:58:b1:44:ce:
                    1e:72:0f:99:99:f7:37:db:b7:44:6b:8d:fd:87:d8:
                    14:2b:2d:c7:93:99:b8:d6:60:1a:78:85:8c:b4:67:
                    df:08:6e:26:02:51:0f:75:04:a9:6d:7c:9b:fa:71:
                    46:21:9b:53:fc:5f:55:ed:c4:29:f7:e9:31:7b:0b:
                    c5:27:3b:bd:5f:f6:05:fb:47:a4:ae:e7:1c:e9:6a:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:32:67:57:98:01:8C:1D:FD:23:5A:10:31:A9:D7:03:D1:4C:1C
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:b5:b2:d9:13:8e:c2:67:f7:59:a2:b1:0c:f9:0e:79:1f:
         86:bb:5f:7b:ae:df:06:e2:1c:42:b0:9c:ab:4c:47:59:14:93:
         28:41:d0:fd:75:05:63:4a:c5:88:40:e5:b7:bf:c4:80:22:53:
         6c:5d:ec:be:a7:2e:8f:08:aa:ab:33:8d:71:e5:1c:6d:8c:ee:
         1c:19:9c:a9:4d:8f:44:2e:8b:af:b7:dd:52:9e:16:99:7e:30:
         76:e2:cb:37:a4:ec:0a:a4:63:37:1d:19:ba:a1:cb:b1:64:64:
         dc:c7:34:97:d5:33:65:6a:32:55:77:b7:e2:1f:95:d7:62:5b:
         10:be:b0:ef:23:71:0e:42:4c:61:d6:18:5d:ea:26:bc:36:62:
         64:60:0f:ba:3a:6e:eb:4a:9b:7f:d1:2e:4a:66:0d:a8:bb:be:
         2e:66:fb:73:15:92:cb:8f:c6:1c:6c:7e:46:c2:f8:ba:40:9c:
         87:40:ae:fb:1d:39:4f:24:4d:a4:b6:f6:f8:41:e9:dd:5e:e3:
         87:cb:8a:cc:64:98:f4:7c:34:cd:8c:00:f0:56:37:fa:0f:20:
         f7:d9:34:4a:53:12:2c:3e:ed:16:32:5f:b9:85:89:9c:87:f8:
         58:98:a6:d5:e3:e6:e6:70:53:34:3f:0d:ff:4c:64:b5:78:f3:
         ad:ef:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:59 2026 by rpki-client