Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File:                     VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier:          hCMhepV1MotyTvGQODekmjTOEUfG5Gksmwk+Tw83Nbo=
Subject key identifier:   57:96:8F:43:F9:F7:72:92:AF:10:AC:2F:96:3E:C1:03:A0:16:99:EE
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer:       /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial:       019CAB33F6646187D470B32DDE01AE6D2F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number:          13E0
Signing time:             Sun 01 Mar 2026 21:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:35 +0000
Files and hashes:         1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: 5l8iC9OPE8zmbunWHq9u6sCbsrUzaB1JEhkDb2yPjWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:f6:64:61:87:d4:70:b3:2d:de:01:ae:6d:2f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
        Validity
            Not Before: Mar  1 21:00:35 2026 GMT
            Not After : Mar  2 21:00:35 2026 GMT
        Subject: CN=57968f43f9f77292af10ac2f963ec103a01699ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:20:d0:2d:47:f3:d6:a4:99:aa:f4:9a:5c:
                    6d:fa:31:75:2a:48:92:a4:7d:40:47:6d:40:20:d4:
                    63:9f:d7:c0:24:a6:10:d6:d8:06:62:0d:c0:f5:be:
                    07:ed:d6:c0:2a:6e:fc:0f:98:1a:87:cf:a8:ae:23:
                    3b:f6:34:34:70:ee:42:aa:c0:f8:c0:73:6a:64:a1:
                    94:18:0d:8d:5d:3c:a9:cd:ce:0a:f6:5a:70:c4:ba:
                    d6:71:79:cb:6e:3d:ba:de:00:bc:72:81:12:ca:4c:
                    f9:30:8f:a9:4d:76:64:9c:30:ab:d5:c3:b8:62:d8:
                    1c:9f:31:de:83:9f:9e:9f:47:d3:30:2b:84:8c:9c:
                    b4:91:a9:76:62:53:41:15:96:44:2e:7a:fd:91:3e:
                    d0:0a:51:51:08:b4:c8:a3:fe:f7:3a:e2:cf:9f:f8:
                    54:1d:57:89:d6:5e:66:8b:3f:aa:b1:00:84:4e:9e:
                    20:c1:b5:0b:73:e3:4d:51:36:b1:cc:07:86:ee:00:
                    9e:4b:17:50:20:53:a9:33:ab:4a:e7:e7:89:23:f5:
                    b9:9a:17:51:08:fc:17:cf:25:38:52:d9:25:3c:ea:
                    6e:a3:52:9f:10:79:93:8f:c2:49:cf:ce:03:60:1d:
                    53:07:6e:12:7e:96:1e:36:00:ac:d9:0b:ac:a4:7b:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:8F:43:F9:F7:72:92:AF:10:AC:2F:96:3E:C1:03:A0:16:99:EE
            X509v3 Authority Key Identifier:
                keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:d1:04:39:98:d6:a7:99:32:27:24:f6:cc:a9:06:94:f3:
         13:f8:2c:c5:12:08:c4:3e:c2:1b:9d:b5:57:34:e0:a0:fc:ba:
         7d:9d:39:fa:18:71:5c:25:0f:02:2a:2d:ca:5a:40:88:81:06:
         26:10:f6:a5:57:88:81:f5:49:b5:10:8e:37:4b:af:36:f8:8e:
         74:25:b5:32:d0:41:36:53:62:39:58:75:20:f6:f4:30:3b:63:
         44:d3:bc:c8:df:ed:3b:e9:bb:fa:a2:a1:12:e7:19:07:ec:f1:
         49:44:8d:c9:d7:0c:08:13:92:27:61:1d:85:53:fc:ea:85:82:
         95:86:0d:70:dc:4e:fd:97:26:48:0b:d0:6d:8e:ea:56:88:ef:
         f1:a9:e1:4c:9f:f5:db:ee:04:54:a4:dc:9e:2b:9e:3c:5e:de:
         86:14:e1:c4:6d:b0:f8:c3:17:4f:b7:78:9e:83:da:75:3f:93:
         ea:5d:32:fe:6d:46:5a:46:80:4e:ee:dd:30:41:7c:28:ad:d0:
         7f:48:54:b7:6b:43:94:a2:44:16:b8:cf:5b:c8:21:ee:56:4f:
         eb:27:2e:44:7c:8f:14:a2:af:59:a8:f9:39:c5:70:ef:51:0b:
         ff:f9:c2:95:cf:72:0f:75:d9:46:16:8b:3e:e6:fc:34:0e:70:
         b2:b0:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:12 2026 by rpki-client