Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          exTz//Hjl99CQEH1TPGhmlBAj9lW71GFynnN3uCngCQ=
Subject key identifier:   4E:D4:58:60:44:69:7D:9A:24:D2:3A:D8:F3:33:15:EB:4C:7D:C7:7C
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019CABD922C7D84A16363FE2247C459E82B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          0B29
Signing time:             Mon 02 Mar 2026 00:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:00 +0000
Files and hashes:         1: CzItBfhQLOr19TXshG8xIrAepZo.roa (hash: ZsL/eMEoqm5jb00MeORDPPBuXgnALTUh1B2vg5ljlWY=)
                          2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: Qw35EpCDNogk6gInMrsy4X4foOyUbCjT349p4qT9bnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:22:c7:d8:4a:16:36:3f:e2:24:7c:45:9e:82:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Mar  2 00:01:00 2026 GMT
            Not After : Mar  3 00:01:00 2026 GMT
        Subject: CN=4ed4586044697d9a24d23ad8f33315eb4c7dc77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:3c:7b:6a:c1:52:57:20:19:2f:21:e5:0a:
                    52:4f:12:90:b4:55:e4:c2:d5:9b:84:99:87:bc:2a:
                    3e:91:1b:95:f9:49:f7:76:b0:d3:fd:61:50:e8:65:
                    d8:a7:89:8d:06:4f:06:d9:6e:fd:4a:86:40:a6:44:
                    55:ac:50:ed:d3:42:de:eb:6e:71:71:17:c9:9c:17:
                    6d:17:f2:60:e5:90:15:81:f0:b3:13:02:32:6b:25:
                    5d:50:90:34:17:b4:8a:fb:89:cc:d3:30:7b:31:d5:
                    88:fb:7a:50:01:5f:d8:1d:ff:ce:35:da:a8:8d:3a:
                    70:e9:a1:55:6f:cd:15:9b:43:d5:d6:3f:10:28:6e:
                    1d:df:9f:51:fb:d3:57:57:67:1f:73:6b:c0:05:88:
                    fe:83:ab:c7:f7:63:6a:a7:93:7c:34:12:5e:b0:8d:
                    33:06:38:14:31:b3:26:e0:1b:1c:df:23:7c:e1:95:
                    d3:14:ad:b7:f3:24:87:f1:f5:d5:25:1d:9e:fd:c1:
                    88:69:9c:b7:e8:97:4d:6c:34:65:2c:55:cf:ce:5e:
                    28:52:9d:a0:78:3a:53:96:17:0b:1f:a9:f4:c6:b8:
                    75:dd:5a:ec:41:2e:b3:09:71:3e:99:29:ee:8e:58:
                    f6:bb:a6:fd:5f:12:37:a9:a6:3a:5c:16:27:40:b1:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:58:60:44:69:7D:9A:24:D2:3A:D8:F3:33:15:EB:4C:7D:C7:7C
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:e0:95:93:5e:3b:31:af:84:d4:33:99:2e:e0:cf:31:a3:
         9c:d1:e4:cf:38:80:24:21:b8:90:95:f0:6a:52:52:3b:09:67:
         dd:ae:37:56:78:12:49:a9:0c:98:0d:f3:da:32:27:fa:02:52:
         42:0c:24:3a:19:54:f6:9d:ec:4d:a4:96:02:42:52:99:42:6b:
         45:58:d7:f4:fb:90:29:80:a2:2e:03:d8:8b:60:da:97:33:26:
         b6:dd:f7:66:8d:57:86:67:72:54:4d:0a:7d:92:35:06:2f:ba:
         17:22:10:2b:37:56:89:30:06:f1:3e:80:04:8c:34:6e:09:c2:
         0e:b9:dc:04:67:71:4c:fa:2c:7d:db:4d:13:75:fe:1e:f9:77:
         3e:e4:c1:f2:23:67:92:7f:af:d4:a5:e3:60:c5:1b:ae:ec:b5:
         61:8f:0a:4e:59:8a:f4:74:83:af:a0:09:9f:c6:1b:dd:ee:21:
         08:3a:4a:58:fa:c6:de:5b:10:be:f4:0a:40:e8:59:17:8d:44:
         c6:9c:9f:3e:59:8c:16:18:7a:b6:5f:dc:d1:4b:66:8a:fe:d5:
         16:ef:c0:39:e9:7c:cb:af:07:2c:eb:41:f4:4e:4f:42:ae:a1:
         c8:42:99:a5:3f:bc:79:65:ba:dd:f3:9b:7c:7e:8f:dd:ca:d1:
         9d:b0:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:17 2026 by rpki-client