Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          6h450nzT/fsl8+3UnQZuLHyCO/64uaiIKTn2egDTrgU=
Subject key identifier:   97:0D:5D:D5:BF:01:35:9C:E6:C4:DD:11:F8:87:15:2D:4B:89:D8:66
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       019CAD59EB05A29AB1519D4CB9C01977DD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          0637
Signing time:             Mon 02 Mar 2026 07:01:17 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:17 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:17 +0000
Files and hashes:         1: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: DzsE2jLfNNyfd1127iPdIwPpU6mp9CIs66kPFnMggP4=)
                          2: fphIDTC90BjghJ8c2O8eRDnnu2Y.roa (hash: eHm6xVBmCu2Lzre/Y4v2NYmdtDCG2u8NjYt++Pqi/5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:eb:05:a2:9a:b1:51:9d:4c:b9:c0:19:77:dd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Mar  2 07:01:17 2026 GMT
            Not After : Mar  3 07:01:17 2026 GMT
        Subject: CN=970d5dd5bf01359ce6c4dd11f887152d4b89d866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:8b:61:c9:b5:26:06:2d:c4:77:9c:b9:75:
                    9b:57:ea:9f:98:db:f8:71:83:b2:2b:cf:95:77:84:
                    65:3c:ec:0b:81:4f:e2:b2:7d:1a:1b:18:a6:f0:ff:
                    86:45:a0:e2:48:8f:b5:aa:3f:75:4f:6e:45:69:fe:
                    5b:1e:56:4b:79:cb:57:30:94:ae:76:68:5b:0b:93:
                    64:ec:47:2f:44:5f:ec:d9:fb:37:91:c4:b5:40:38:
                    7b:d7:6e:84:e4:80:dd:00:c3:87:bb:69:b2:3c:1b:
                    c2:d2:4e:b9:fb:93:26:2d:04:55:57:50:85:68:18:
                    f2:45:13:21:b5:16:47:f1:29:3d:5c:1b:b9:be:16:
                    fa:36:3e:e9:d3:bd:a7:23:5c:f0:05:29:6e:e8:34:
                    e6:a4:e6:49:ef:ad:31:09:78:f8:ce:5a:72:40:f0:
                    c4:42:49:12:7c:b3:6d:fd:a4:e8:dc:b1:4a:da:5a:
                    ce:9e:1d:a1:9e:af:bb:8c:1b:64:93:e2:e7:1b:aa:
                    b1:9a:53:99:87:22:24:55:39:42:3b:f2:b7:2b:2c:
                    e4:3e:24:0b:eb:0b:3e:94:f7:5f:bf:df:2d:77:bc:
                    62:47:4e:d3:9f:87:69:f4:67:11:64:94:16:46:b7:
                    b0:15:44:e1:d9:08:2b:49:d7:06:df:00:fe:1f:e2:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0D:5D:D5:BF:01:35:9C:E6:C4:DD:11:F8:87:15:2D:4B:89:D8:66
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5b:32:5d:22:09:6e:8b:55:03:72:25:5e:ca:a7:fd:66:5c:
         71:ab:7e:f1:d3:e6:05:c8:8a:d3:86:8c:ff:87:33:b2:c0:71:
         74:10:bb:5a:cc:31:9c:3c:bb:77:ca:b3:ae:66:10:8f:be:2b:
         84:35:c7:68:07:62:ca:9e:42:64:ae:7c:9b:98:8e:6d:e5:64:
         65:64:4d:e6:e0:93:c7:6c:aa:f0:99:9a:72:cf:3e:4f:34:2d:
         2e:4e:74:21:d8:dd:b3:82:2f:2d:7b:20:92:1b:ce:10:fa:61:
         64:a1:0e:23:f2:f8:b4:ff:4d:c8:3d:a7:46:3a:ad:36:d3:4a:
         cc:7f:68:dc:f4:c3:ae:5e:e2:e8:f4:bc:fe:0a:63:60:6b:58:
         2e:e9:aa:45:0e:8a:21:c9:99:fd:28:29:b4:4a:27:e6:a9:55:
         7d:92:83:7b:6e:17:1d:40:93:51:9b:b7:69:0b:22:02:84:ec:
         31:0c:8e:8e:64:c7:c1:cf:d5:b0:b1:99:e1:7f:65:f7:3a:d6:
         ea:8e:60:33:91:e6:1c:cf:f3:11:69:d6:59:e7:a9:b3:20:e9:
         a3:af:df:3a:19:ca:dc:43:af:d9:90:c5:ef:38:24:4d:78:23:
         59:1d:57:7b:50:19:c2:fc:7a:e2:4c:1d:2c:80:53:7a:04:b0:
         24:55:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:36 2026 by rpki-client