Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File:                     VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier:          PV27e+IfyHiNl2Xcj1OzfBLiy6/fT6ulWx2RIl/H0Mk=
Subject key identifier:   3C:CC:B9:CC:85:01:7E:21:0E:C9:D1:15:E9:13:80:41:CA:62:31:F5
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer:       /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial:       019CAE6C3E92E2B8A9AD7A3C80CB6E474974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number:          1798
Signing time:             Mon 02 Mar 2026 12:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:55 +0000
Files and hashes:         1: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: f3dQJwf564qSvi0KpMvW648EONXxPuFzTcjdbRFDpe8=)
                          2: wFPcFTfLNLeeu52DTqhU-V8PVts.roa (hash: NDGhqeRV7hsYmZ5mOPeghOQaf73uDqp19ZwPDNgT1mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:3e:92:e2:b8:a9:ad:7a:3c:80:cb:6e:47:49:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
        Validity
            Not Before: Mar  2 12:00:55 2026 GMT
            Not After : Mar  3 12:00:55 2026 GMT
        Subject: CN=3cccb9cc85017e210ec9d115e9138041ca6231f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:8a:cb:c4:8b:d7:19:e5:ff:75:f0:f2:6d:
                    1a:01:f1:ab:be:54:58:62:50:77:ac:27:2d:5e:52:
                    7a:0a:67:11:d3:1e:0a:b3:8e:ea:f2:4d:ce:bc:a6:
                    e9:bd:d9:2d:be:32:1c:48:66:fe:0e:42:d5:33:c0:
                    23:e0:c1:31:23:19:7a:5b:87:58:1d:2f:cd:8b:8b:
                    8b:e3:de:a6:a5:d1:0a:4e:15:d7:5c:78:e3:39:8d:
                    63:7a:85:05:db:d2:3f:31:f6:fc:40:31:eb:d7:8f:
                    d0:45:ba:c3:98:51:e7:5f:a0:bb:31:2b:66:40:75:
                    0b:88:d5:d1:86:db:6e:8a:bf:08:13:56:d9:85:df:
                    35:b2:d7:90:4f:89:e0:b2:b0:01:cb:df:43:f5:ae:
                    72:83:70:22:fa:35:5e:62:28:ac:24:d3:ee:5f:ae:
                    a4:be:1b:ee:43:01:f7:9b:67:9e:a0:28:02:f1:92:
                    a9:4f:a8:d8:90:94:00:d4:0e:40:23:d9:44:cf:1c:
                    8d:c6:59:d7:92:60:81:dd:29:b6:25:b9:8e:b4:34:
                    12:85:56:29:73:bb:d4:5c:22:56:73:fd:56:cb:68:
                    8c:02:77:66:19:e1:71:ad:7b:4d:d4:e4:56:fe:91:
                    3a:bb:f1:c6:46:50:33:7d:f8:0f:63:f5:34:e9:af:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:B9:CC:85:01:7E:21:0E:C9:D1:15:E9:13:80:41:CA:62:31:F5
            X509v3 Authority Key Identifier:
                keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:a3:4c:0f:d9:3e:a1:69:12:df:92:80:5d:4c:a8:72:b0:
         f9:16:fd:7d:66:d7:2c:0f:5f:4c:4c:0a:0e:34:66:fc:04:de:
         a4:4a:8b:65:0f:3e:46:4c:b9:ac:db:df:59:1e:bb:b3:04:27:
         8c:e2:2c:81:d2:81:46:56:7e:6a:71:a9:40:02:0c:dc:fa:9c:
         7a:77:54:2c:dc:28:ba:1e:0d:a1:fc:88:f0:99:b0:bf:e0:be:
         56:ab:e2:df:48:21:0f:52:54:f9:43:87:a6:8f:18:1b:20:fb:
         69:28:c8:60:79:c5:19:cc:b5:45:af:5b:66:b4:d1:72:53:56:
         03:ec:9c:bf:20:77:55:f3:9f:84:ef:bf:2e:20:fc:ff:32:66:
         20:b4:a9:6e:65:9d:a7:59:37:44:2a:43:21:55:2a:0a:9c:9b:
         3d:d1:e6:2d:a1:7b:b7:fa:c5:8b:33:ab:3f:b1:0a:c0:d0:8d:
         be:91:97:7f:0b:20:63:aa:4e:a1:17:f9:dc:90:8f:fa:d7:ed:
         0f:39:37:be:92:3a:9b:48:a4:20:19:86:dd:77:4d:5d:71:38:
         f5:a3:b7:c3:4f:85:22:e6:cb:87:7f:75:0f:44:8b:5e:2e:7e:
         e4:55:8e:d3:23:76:f0:9d:b3:75:8d:18:f6:bc:48:fe:f9:39:
         2a:46:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:36 2026 by rpki-client