Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File:                     VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier:          eyIf5PWJ4x33nYPbmWEjvzXloyEmOlIjQz+ZaOtMnIk=
Subject key identifier:   E2:01:F6:4F:00:62:FE:09:63:DC:38:6A:DC:7C:C5:9A:DF:76:6F:B5
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer:       /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial:       019CAAFD7D679618BD48C290395A238694C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number:          111D
Signing time:             Sun 01 Mar 2026 20:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:05 +0000
Files and hashes:         1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: ZPhvQndJ1Xv0xxgZifZ81IvKljWedjuCE97GiVyWm8Q=)
                          2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:7d:67:96:18:bd:48:c2:90:39:5a:23:86:94:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
        Validity
            Not Before: Mar  1 20:01:05 2026 GMT
            Not After : Mar  2 20:01:05 2026 GMT
        Subject: CN=e201f64f0062fe0963dc386adc7cc59adf766fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e1:c7:58:ad:bb:36:22:da:f6:ae:a5:4d:fa:
                    c0:7d:88:88:85:d5:ad:3e:ca:73:9c:f4:95:88:14:
                    3e:05:db:4e:fc:08:27:e4:99:2f:c2:27:5b:52:57:
                    9f:ba:57:fe:79:2c:04:61:45:dd:fa:7e:0b:a0:a7:
                    c5:0e:4a:49:74:3f:bd:64:8c:85:77:8d:0d:c2:19:
                    10:0e:9b:f5:9e:e3:eb:27:17:6e:a0:17:a5:ca:63:
                    54:ff:00:73:e4:10:70:b2:50:1b:3a:17:47:39:fc:
                    46:7a:ee:fe:61:d3:2d:09:93:4b:4c:e2:37:11:89:
                    d6:09:92:d3:db:09:df:69:ca:8d:60:65:47:f1:d7:
                    03:4c:5c:bf:36:f8:d7:0b:68:dd:d2:87:ec:67:89:
                    a1:ac:dd:6d:ec:b2:b2:74:2b:65:4f:55:8b:c9:80:
                    59:ee:6c:e0:76:00:5c:c1:80:e9:5a:91:ea:34:be:
                    6e:52:81:90:82:46:7e:c4:16:52:ec:33:f8:56:ef:
                    40:4c:b9:46:6f:cd:fc:75:5a:62:d7:73:3e:7a:38:
                    ea:7b:72:0d:01:c4:5b:ba:da:37:72:56:5c:36:21:
                    86:c0:85:a3:04:63:25:82:14:59:1d:2b:ee:10:29:
                    fe:e1:a4:87:6e:ec:ba:33:0b:ed:e0:06:e4:ad:d9:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:01:F6:4F:00:62:FE:09:63:DC:38:6A:DC:7C:C5:9A:DF:76:6F:B5
            X509v3 Authority Key Identifier:
                keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:ea:73:1f:b8:c5:54:0d:66:08:ef:da:49:64:3a:31:bf:
         b2:e7:33:ec:53:9a:45:79:97:05:ab:94:46:03:2c:b5:69:f3:
         56:5f:56:b7:22:c2:02:ce:df:1a:e3:ea:04:a0:e9:ce:ad:ce:
         01:e5:ad:0f:b4:5e:25:3c:9a:93:18:d5:3d:a4:fa:f7:fc:d1:
         b0:ca:bb:7b:bf:04:a0:1f:2d:3a:87:72:60:d4:89:88:ee:a0:
         06:fc:4a:5a:56:6d:ac:81:d8:0e:b9:26:ed:1a:88:b8:11:28:
         18:76:79:22:0c:dc:4d:a7:50:67:00:55:3f:ba:55:9a:1c:3d:
         e7:fe:20:4c:54:af:61:84:e3:f9:ac:20:47:6f:6d:eb:d0:64:
         8f:6d:25:73:2c:00:35:1c:68:aa:ef:da:fc:9f:d3:b2:8d:43:
         5d:3c:f2:13:6a:42:83:96:29:2e:48:79:65:19:99:bf:69:72:
         46:94:19:d2:3b:3f:77:41:f4:3f:50:fb:31:0f:df:c7:47:c8:
         3b:ea:e3:20:9f:d4:84:4d:11:cb:a7:a9:d9:92:2c:07:9b:eb:
         1b:cd:07:c7:ed:36:13:f2:8e:5e:67:10:13:c0:14:19:19:64:
         74:59:e6:c5:0a:46:d2:da:3f:a6:97:db:7a:5d:b3:ab:a4:7a:
         2d:26:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:50 2026 by rpki-client