Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File:                     VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier:          mlK9ln4JVgZU9km3YCIu9FgvOE6DwbQOzHzE/4pjT4c=
Subject key identifier:   3D:B2:E4:49:D9:2D:81:38:63:D0:C8:7D:5C:D3:43:B7:6F:14:5E:FB
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer:       /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial:       019CAEDA05A8DB0A1FEC2A4A7160D70267B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number:          0E99
Signing time:             Mon 02 Mar 2026 14:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:49 +0000
Files and hashes:         1: FUHCBWvFrD-fPGoF0u_Zgw_7R3c.roa (hash: UgfMlpZ5XPwvnxTFMVPwY/dmDGcrnRN+mSGfC57sWfg=)
                          2: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: F7rC1oDjoITG+zoXPFdFfr7iiZXJaZdSfkdCDLHfTFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:05:a8:db:0a:1f:ec:2a:4a:71:60:d7:02:67:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
        Validity
            Not Before: Mar  2 14:00:49 2026 GMT
            Not After : Mar  3 14:00:49 2026 GMT
        Subject: CN=3db2e449d92d813863d0c87d5cd343b76f145efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:2f:c5:3e:c3:e1:f5:26:d7:05:57:f9:c1:
                    62:70:0d:fa:79:23:51:98:c2:6e:30:33:f2:3d:4a:
                    36:40:d5:4f:00:4d:d8:1f:61:fc:50:71:80:e8:52:
                    49:a6:b8:4c:21:09:ac:c2:cb:91:6e:b8:56:67:c7:
                    53:6b:b6:22:6d:83:f5:4b:6e:00:75:fb:a9:8c:23:
                    3f:b7:59:cd:bc:54:b8:8f:52:04:ad:3b:c2:8e:e3:
                    81:3e:89:ea:e6:89:84:3e:18:9d:bd:86:bc:f4:36:
                    8c:b6:14:df:40:35:25:df:6d:85:1f:85:de:cc:87:
                    a6:1a:d5:51:98:05:d1:72:61:ba:de:3c:4f:5c:36:
                    b9:14:8e:76:c1:8c:8f:22:49:45:69:b0:1e:5a:7e:
                    cd:ce:72:ad:b4:bd:01:ea:4e:c6:ba:32:dd:fc:8c:
                    6d:d2:9d:cb:39:91:37:8f:26:29:a4:cd:50:83:15:
                    d9:f7:b5:9b:a0:18:37:04:6f:37:a1:57:75:98:82:
                    db:53:1a:0c:df:27:37:b6:2a:2e:a7:be:58:4a:08:
                    44:8a:5d:47:50:04:fd:28:33:6b:a9:36:23:c4:88:
                    63:79:94:bc:ba:01:bc:c5:c2:80:a4:ab:cb:a1:30:
                    1d:fe:a0:e0:33:b4:c7:a0:ef:1b:67:47:ae:9c:f1:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:E4:49:D9:2D:81:38:63:D0:C8:7D:5C:D3:43:B7:6F:14:5E:FB
            X509v3 Authority Key Identifier:
                keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:44:6f:b2:34:57:59:fb:c2:57:b2:d2:81:53:b5:46:ea:15:
         56:76:71:ea:06:a0:d9:1d:72:96:ea:d2:58:a4:e2:a4:b3:a2:
         8e:6b:34:54:80:34:93:7f:97:71:1c:1f:f2:4d:d2:97:85:96:
         9e:56:1c:03:f7:e9:d5:e1:8e:2f:20:6f:7d:83:c6:66:5e:55:
         a3:11:26:d9:92:28:23:93:ef:05:84:17:0f:34:84:2a:f8:f1:
         fd:35:ad:74:39:e9:3a:ce:2e:81:f1:ba:48:fc:a5:5d:45:f3:
         69:99:ff:0b:77:f1:49:c1:51:8d:70:6a:c3:81:ce:a9:cf:89:
         b1:bc:d0:f5:83:15:f8:59:e9:0e:9f:ea:88:24:84:b7:45:03:
         cf:c4:d7:38:c7:c1:39:09:b5:20:c3:63:d5:8e:fa:cb:db:fb:
         c2:b8:ae:98:36:86:87:48:63:c3:f3:41:69:b2:25:61:3c:a4:
         df:f3:63:09:15:4b:8c:29:1a:19:1b:d6:8d:04:fc:1d:23:9a:
         42:1b:ee:3e:03:e1:ef:7b:58:62:74:77:92:47:45:7f:b3:63:
         b0:a9:20:7f:b2:24:bd:0e:43:b4:04:11:27:54:60:9d:b5:f1:
         c9:7c:1b:a9:22:3c:a0:ee:88:e9:51:dc:48:49:4c:19:11:ab:
         8a:e8:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:12 2026 by rpki-client