Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          8ojEuBk6rYjLQ4BaoyWmFSx79b7syPFSRaNmStJ6NKQ=
Subject key identifier:   6E:AB:74:39:D2:6B:25:39:9A:E0:24:22:02:01:54:59:AC:F1:62:C0
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       019CAD59984571F219CE15145DB0A58E7872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 07:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:55 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: YKZjYZYEdKUs0PZZc/5hqtXP3GScupwekDHytskgK7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:98:45:71:f2:19:ce:15:14:5d:b0:a5:8e:78:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: Mar  2 07:00:55 2026 GMT
            Not After : Mar  3 07:00:55 2026 GMT
        Subject: CN=6eab7439d26b25399ae0242202015459acf162c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:db:f1:a5:07:b4:1d:db:65:e9:33:48:1a:
                    b9:e5:a6:a8:17:df:b1:7a:22:6f:81:65:e1:42:08:
                    7b:1b:bc:37:1a:1f:29:e2:20:0a:a9:e4:55:0f:5b:
                    4e:05:d4:ca:16:7c:4d:51:37:e9:48:d9:cb:74:3b:
                    6c:2c:15:1e:91:41:38:f7:b1:25:9b:53:93:24:8b:
                    d0:31:b4:0c:e0:13:0d:85:a1:79:bf:d3:7c:96:97:
                    42:84:68:c0:d0:cd:db:21:7b:44:2d:6b:24:52:54:
                    06:72:2c:c1:a7:e3:65:78:74:e5:a9:c8:c5:0f:f7:
                    d6:63:cb:55:6a:ff:ee:c8:04:8c:7d:fb:dd:13:d0:
                    bb:0b:5e:1d:76:89:a3:97:f3:49:ed:4e:5e:ee:c0:
                    2e:7e:5a:ff:e2:e0:77:77:b0:90:e2:4d:b2:c8:b3:
                    98:a9:9a:72:3f:31:91:0b:e5:44:1b:25:83:f3:86:
                    9b:ed:3e:77:2d:b4:97:44:fc:2b:1c:18:3f:64:13:
                    41:04:03:93:35:c4:f3:27:c4:c6:44:f5:36:de:6e:
                    31:d7:6c:27:81:ce:2a:cf:13:90:4f:94:07:fc:0e:
                    90:d9:b4:65:51:7f:f5:a3:00:5c:61:c9:59:80:af:
                    e9:2d:0e:e6:84:c2:d8:b6:0e:3e:f6:03:b7:b7:a3:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:74:39:D2:6B:25:39:9A:E0:24:22:02:01:54:59:AC:F1:62:C0
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c8:ed:36:89:82:00:a4:81:5c:88:79:19:15:62:cb:18:bb:
         51:07:73:ff:ab:b6:8c:9e:e1:f2:a3:13:a5:e6:2c:4f:af:69:
         94:70:44:74:eb:63:5a:eb:cf:b2:bf:d2:b9:41:d6:c2:49:46:
         43:50:e2:b3:d2:26:9a:9a:55:a0:e3:a4:bc:65:30:ed:1b:e4:
         cb:0f:1d:fd:46:98:21:2a:39:a4:ec:4d:59:7a:31:f7:33:c2:
         f3:75:61:83:70:27:d0:25:f2:06:33:aa:da:67:2a:6a:26:08:
         96:21:e4:51:1c:4c:54:52:67:d8:90:05:b7:4e:ae:25:03:4f:
         ee:f4:9b:cc:00:f4:cb:4a:37:84:7d:7b:5f:25:05:5f:51:02:
         33:90:c4:a2:82:19:6c:8e:b0:0d:c6:81:8b:17:3a:4c:e7:7a:
         dd:96:ef:86:d2:4e:4c:6e:d8:be:0f:0d:d4:a3:6b:15:45:fe:
         58:1d:34:10:9e:21:93:71:8e:ee:62:fb:5a:c1:18:69:dc:00:
         5c:53:56:63:9e:91:fd:5d:ba:18:e9:9e:7c:f1:20:93:d2:b0:
         52:21:70:89:e9:0e:08:e3:6b:e9:7c:99:40:a1:82:b6:69:98:
         f8:ee:97:ad:02:f4:25:22:e5:63:47:24:90:ea:1f:9f:c1:8e:
         24:91:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:28 2026 by rpki-client