Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
File:                     VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json)
Hash identifier:          nMuWNz3nYT8sAuVC3GTxP/buhtAG4bTWidjFoyNfuE4=
Subject key identifier:   30:91:C1:D7:99:59:4E:B9:68:58:EA:B2:58:0D:E5:63:A5:A4:AA:79
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Certificate issuer:       /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial:       019CAA217A14EC9302D40DBA27412E37F4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
Manifest number:          0343
Signing time:             Sun 01 Mar 2026 16:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:46 +0000
Files and hashes:         1: 7ovLPyCR5ut7hFIeX8yhOKcgGZo.roa (hash: kDW/D2+IDkqljXXSh0ESXvcR+Pz06Mimm2yJyZtpkGA=)
                          2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: sntzGJTCU+wjLEZUAZ+GCc7F22RuCdnNLZPmP3ZmYZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:7a:14:ec:93:02:d4:0d:ba:27:41:2e:37:f4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
        Validity
            Not Before: Mar  1 16:00:46 2026 GMT
            Not After : Mar  2 16:00:46 2026 GMT
        Subject: CN=3091c1d799594eb96858eab2580de563a5a4aa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:34:85:aa:15:82:6f:e8:18:b8:07:77:60:
                    12:55:d2:cc:2d:05:4d:a4:79:6b:8d:80:89:11:62:
                    1c:bd:34:bd:a9:9c:06:0c:73:6b:a8:e1:31:2a:77:
                    df:20:a9:2c:5b:d5:07:bd:3b:f0:1f:d8:49:3b:39:
                    d9:54:5b:2f:d2:dd:00:1e:12:54:0f:9b:9a:e7:b7:
                    4d:0a:b6:45:ef:e9:a6:22:1c:ca:ae:74:83:f1:8e:
                    21:be:77:7c:ee:47:95:33:41:cc:f6:93:e1:c9:15:
                    10:53:75:de:6e:96:ca:1f:4c:85:8b:6b:a0:56:01:
                    97:92:9f:7a:75:28:e6:09:fa:66:6f:aa:7d:5a:00:
                    d4:55:c5:5d:75:b9:db:d9:15:3a:70:22:d2:58:7f:
                    ad:58:fb:60:71:eb:d6:82:c9:28:69:09:a4:93:af:
                    d5:67:f4:e9:b9:78:77:e8:61:e4:7e:86:57:ad:f4:
                    d5:6c:15:48:94:df:26:16:76:ac:b9:dd:31:fc:e2:
                    f9:7c:4d:62:e6:bd:8c:92:d4:9f:93:e3:07:57:49:
                    67:08:97:2d:2f:d7:97:90:ad:e7:b2:a6:e6:30:28:
                    84:90:f7:a3:45:f7:01:8a:7b:6c:ff:27:fe:4f:3b:
                    f9:c8:e3:15:6c:0c:80:43:64:19:d1:64:ad:d2:6f:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:91:C1:D7:99:59:4E:B9:68:58:EA:B2:58:0D:E5:63:A5:A4:AA:79
            X509v3 Authority Key Identifier:
                keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:65:c6:fb:36:aa:eb:80:a4:3c:e0:94:2c:e1:e4:53:3e:7d:
         df:64:1a:0f:23:72:5b:4b:cf:23:9b:cf:8a:df:d0:21:7e:7d:
         69:66:b9:10:ea:fb:e7:42:66:16:73:71:a4:8d:1a:41:1a:8b:
         2f:9f:1c:a1:3a:5d:96:e9:13:12:ed:31:7e:1d:63:71:49:c2:
         70:05:fd:34:17:9c:a6:b2:ab:e2:da:c4:93:f7:c9:5a:68:b4:
         a3:99:a4:96:13:0a:22:9e:d5:39:97:50:a5:69:5e:d1:cf:5f:
         93:68:c0:76:24:d8:3e:db:a5:bf:ab:a1:ad:c9:e3:2d:ed:80:
         0b:22:ef:d1:eb:13:c0:77:e6:9e:05:29:6b:56:fc:e6:5a:75:
         58:af:f0:1e:c3:62:55:0f:ba:7b:68:e0:9d:02:07:5d:7d:bf:
         00:b7:7b:46:e8:69:0d:60:e1:4e:1a:c8:87:b9:53:61:13:3d:
         6b:c0:ad:95:ae:f3:53:69:c2:e0:cc:bc:f9:33:c5:a8:93:69:
         07:1c:bb:fd:6d:78:37:38:25:4c:76:ae:09:9c:90:a5:4a:d2:
         60:d6:73:cd:cd:8f:4a:a7:a3:7f:76:cd:37:d1:8e:1d:cb:d2:
         11:bf:aa:60:2a:22:91:d4:be:a3:4f:79:5a:5e:8b:4a:41:16:
         4c:9b:e7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIXoU7JMC1A26J0EuN/TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWJmM2QxZDQ1ODgyNTg3ZjNiZmJhMjc0YjJmOGI5YTQ1
YmM4OTkwHhcNMjYwMzAxMTYwMDQ2WhcNMjYwMzAyMTYwMDQ2WjAzMTEwLwYDVQQD
EygzMDkxYzFkNzk5NTk0ZWI5Njg1OGVhYjI1ODBkZTU2M2E1YTRhYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U00haoVgm/oGLgHd2ASVdLMLQVN
pHlrjYCJEWIcvTS9qZwGDHNrqOExKnffIKksW9UHvTvwH9hJOznZVFsv0t0AHhJU
D5ua57dNCrZF7+mmIhzKrnSD8Y4hvnd87keVM0HM9pPhyRUQU3XebpbKH0yFi2ug
VgGXkp96dSjmCfpmb6p9WgDUVcVddbnb2RU6cCLSWH+tWPtgcevWgskoaQmkk6/V
Z/TpuXh36GHkfoZXrfTVbBVIlN8mFnasud0x/OL5fE1i5r2MktSfk+MHV0lnCJct
L9eXkK3nsqbmMCiEkPejRfcBints/yf+Tzv5yOMVbAyAQ2QZ0WSt0m+bWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCRwdeZWU65aFjqslgN5WOlpKp5MB8GA1UdIwQY
MBaAFFVb89HUWIJYfzv7onSy+LmkW8iZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEt
ZTIwYmI2MGEyNzkzLzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEtZTIwYmI2MGEyNzkz
LzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmXG+zaq
64CkPOCULOHkUz5932QaDyNyW0vPI5vPit/QIX59aWa5EOr750JmFnNxpI0aQRqL
L58coTpdlukTEu0xfh1jcUnCcAX9NBecprKr4trEk/fJWmi0o5mklhMKIp7VOZdQ
pWle0c9fk2jAdiTYPtulv6uhrcnjLe2ACyLv0esTwHfmngUpa1b85lp1WK/wHsNi
VQ+6e2jgnQIHXX2/ALd7RuhpDWDhThrIh7lTYRM9a8Ctla7zU2nC4My8+TPFqJNp
Bxy7/W14NzglTHauCZyQpUrSYNZzzc2PSqejf3bNN9GOHcvSEb+qYCoikdS+o095
Wl6LSkEWTJvnng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:43 2026 by rpki-client