Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          MR44FDcENrC4KsOxWqXWHmCeTeivbhtixCmuFx97yiM=
Subject key identifier:   D7:99:03:F6:09:22:6F:6C:9C:DB:15:01:84:F7:89:33:95:09:3E:C6
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       019CC14E884442B3EE980F74FA88F616E54F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1850
Signing time:             Fri 06 Mar 2026 04:01:15 +0000
Manifest this update:     Fri 06 Mar 2026 04:01:15 +0000
Manifest next update:     Sat 07 Mar 2026 04:01:15 +0000
Files and hashes:         1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: i//H+VplmKdNCQppBZ4slhtAVj8dnbc1GiSMw106/Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c1:4e:88:44:42:b3:ee:98:0f:74:fa:88:f6:16:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Mar  6 04:01:15 2026 GMT
            Not After : Mar  7 04:01:15 2026 GMT
        Subject: CN=d79903f609226f6c9cdb150184f7893395093ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:27:a3:bb:93:ae:5b:a5:ad:3d:8d:be:db:
                    16:c0:54:d0:81:89:c7:d2:e2:1c:4d:73:22:25:5e:
                    d5:8e:b8:75:80:b5:76:e4:fc:cd:d0:00:1c:ad:39:
                    ce:ae:22:ee:fd:5a:75:2c:99:61:ae:1a:98:e7:3d:
                    a8:64:8e:45:3f:e7:94:2f:ce:7b:ba:93:e7:1d:ba:
                    63:df:2a:ec:9f:cc:15:ba:d4:3c:b0:47:a2:95:47:
                    ce:2e:2e:bd:76:4a:ee:99:8d:84:2f:6b:38:9c:02:
                    c0:82:72:ea:47:be:58:75:3b:10:17:59:52:17:2b:
                    9a:6a:93:15:92:68:da:c0:3f:d4:02:ff:bc:7b:ab:
                    66:15:ca:22:73:9b:f1:8e:90:62:e0:26:e3:89:e8:
                    05:32:d8:9a:54:33:9a:0f:b4:89:f6:5e:a4:9d:d6:
                    c8:dd:0d:6d:db:68:88:55:a5:9d:55:13:77:5a:67:
                    ae:79:fb:09:f8:03:a8:bd:32:1e:03:18:a9:74:98:
                    b6:a9:1b:34:d5:17:25:e4:8c:dd:4b:9d:ad:0d:4f:
                    a6:ce:0c:0d:5c:d7:49:bd:ae:74:71:f3:d5:84:35:
                    33:c8:20:fe:d6:14:56:3e:05:33:0b:d4:66:00:4f:
                    66:54:23:56:c8:45:84:4b:a6:32:7c:5b:05:d6:73:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:03:F6:09:22:6F:6C:9C:DB:15:01:84:F7:89:33:95:09:3E:C6
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:30:b9:d2:c1:d4:15:69:6b:0f:6a:1c:04:82:ee:28:97:9e:
         f3:0a:dd:73:e8:5c:ea:81:06:c7:ba:da:ff:f1:0e:48:82:53:
         ba:cc:04:3a:a2:85:e0:e3:3d:d6:61:75:1b:05:18:6b:35:2a:
         9a:ec:a3:9e:cb:80:27:ae:f5:24:15:29:84:0a:cb:d8:ec:7a:
         89:79:61:00:aa:00:c6:0c:53:df:20:04:3e:31:f8:0c:b9:dd:
         e5:fc:5f:99:86:e2:c9:39:84:e3:6f:b6:23:6d:bc:e7:66:cc:
         f1:35:54:d7:7d:a0:71:8b:83:41:39:ad:3a:fb:6d:e4:ac:b2:
         46:0c:d3:5d:90:9f:e4:2e:b3:64:8c:56:10:76:f8:d7:de:1c:
         46:5e:49:78:4e:ec:f3:8d:78:27:f1:16:a4:9d:4c:a4:a3:42:
         ea:7a:5f:f9:b0:d4:f4:a6:4f:8d:90:c7:8a:ad:fb:8d:6d:67:
         e2:4f:3b:ce:eb:07:c8:d9:41:cd:e9:8e:57:d0:d6:c0:f2:b5:
         ff:d1:b4:fd:12:46:71:de:ec:7e:55:c3:0c:0a:52:43:d7:a3:
         6a:bc:52:2f:c9:13:67:84:f3:38:62:02:ce:3b:11:5d:cc:15:
         d2:e7:10:3e:4b:28:9f:7f:f0:70:8f:ed:51:6e:50:87:52:c7:
         dd:3f:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 08:37:34 2026 by rpki-client