Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File:                     VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier:          iv5dxDz+a0BAs7uo7BnOKE6BlYd9Pghcpvj/lyusYAE=
Subject key identifier:   C3:DC:5A:67:15:9E:9C:24:74:5B:2C:4E:80:61:64:F3:2D:C8:16:BC
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer:       /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial:       019CAD5A04D30C7175E97E4E9ADD0A8D8A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number:          14DB
Signing time:             Mon 02 Mar 2026 07:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:23 +0000
Files and hashes:         1: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: Jg+TVrZXc0UfXU3Z8UHZH3r0FJ2beni3DuRYoiuo79c=)
                          2: o-24i514DTkuFUh3dDk5UW1qU8I.roa (hash: 7BA95YKGV9RSAxhcO9Aev+WO5G9yWtM2WyXAovo8PLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:04:d3:0c:71:75:e9:7e:4e:9a:dd:0a:8d:8a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
        Validity
            Not Before: Mar  2 07:01:23 2026 GMT
            Not After : Mar  3 07:01:23 2026 GMT
        Subject: CN=c3dc5a67159e9c24745b2c4e806164f32dc816bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:77:ae:f3:c2:af:0c:f9:52:46:d4:20:f4:
                    df:69:e4:6b:28:2c:2a:aa:9d:02:db:f8:c1:43:9c:
                    7a:88:27:4b:52:5f:79:b6:af:0a:5d:12:88:a9:bd:
                    ff:e2:f7:f6:dc:cb:f0:4c:be:80:f2:f1:a6:22:83:
                    34:45:02:35:d4:ca:d0:0f:fc:64:ae:fe:e0:7c:e0:
                    d4:3c:56:bb:80:da:cf:65:ef:55:22:a6:68:f1:92:
                    f5:01:80:44:cc:62:18:f8:f6:de:f7:c7:ea:af:6c:
                    8b:c4:fe:3e:6d:aa:1c:0d:1d:b7:c5:33:0e:6f:36:
                    05:46:8b:2e:e3:2f:7a:b9:c5:55:0d:95:28:ca:9d:
                    e1:31:8d:b1:ce:5c:27:dc:8c:28:28:96:f7:23:08:
                    6a:a4:22:48:4f:8c:57:4e:14:61:9e:b1:43:d7:0e:
                    1a:7d:05:c8:81:d6:95:c9:9c:9a:4d:e7:e4:b6:24:
                    4a:3b:1b:3d:d9:00:72:c3:c4:f5:bf:b6:21:d7:98:
                    50:0b:35:34:2b:f5:71:7c:be:3f:67:19:65:ce:02:
                    13:39:8c:b3:45:4d:3c:66:d4:17:7e:6c:fb:fb:ff:
                    46:a7:35:74:39:36:61:b5:9c:63:cf:65:7e:8b:9c:
                    f3:7f:6c:18:f0:49:43:4e:1e:bd:f2:ae:8f:c4:df:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DC:5A:67:15:9E:9C:24:74:5B:2C:4E:80:61:64:F3:2D:C8:16:BC
            X509v3 Authority Key Identifier:
                keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:02:f3:d9:dd:82:0d:98:87:14:c0:a9:99:6b:4e:e7:a0:9e:
         3b:5b:ef:f9:46:e7:fe:45:61:f6:14:1a:a2:d2:5d:86:16:e4:
         53:62:69:f7:00:ef:34:d9:28:8e:ef:55:b6:35:54:bd:bf:98:
         56:48:8c:d7:c4:9e:cd:ed:c2:0a:69:c0:7d:c8:4f:c1:74:84:
         66:bc:c8:12:25:af:97:c1:82:df:52:6d:54:6d:3d:17:7e:b3:
         1d:03:a9:5b:c5:c7:6d:dd:02:eb:63:e0:ea:aa:23:14:90:e8:
         71:07:68:0e:fb:2d:85:86:65:4f:25:d0:85:d7:be:e8:9d:e1:
         e0:8b:ef:e4:c3:1e:86:90:46:52:f2:a8:ed:c5:e9:7d:26:83:
         2d:b4:68:d0:86:78:b6:47:9b:27:df:43:5c:c4:a2:0b:cd:e9:
         ed:69:42:f3:cc:2e:da:2c:1c:6d:d3:96:3f:4b:5a:0f:c2:e2:
         d1:4f:dc:7e:1f:b4:e3:23:bc:ab:67:81:e0:7c:56:4e:ff:a3:
         fa:d2:dd:d1:9a:52:1d:4e:ed:7f:11:98:f6:15:b6:58:22:38:
         2d:98:ef:5f:b4:81:82:e5:39:ff:32:d9:d5:c4:65:65:af:5a:
         69:af:fd:cd:fc:f3:63:46:ca:b6:0e:35:56:f4:7d:55:8b:d8:
         9c:80:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:27 2026 by rpki-client