Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File:                     vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier:          FwS4QKlBXtlXPNwyRUF1RREtckv+5h6pgaETSSBxJBk=
Subject key identifier:   32:56:EF:EA:33:BC:EB:84:1F:88:8D:16:DF:7B:A3:C6:44:A9:2F:63
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer:       /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial:       019CAAC66C9093F9E2D1DEDE89363E8EDA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 19:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:56 +0000
Files and hashes:         1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: w/2QmI8f8W3XBx+5PgNTh1aYkwJ0T6dBCMTI5tUsWro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:6c:90:93:f9:e2:d1:de:de:89:36:3e:8e:da:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
        Validity
            Not Before: Mar  1 19:00:56 2026 GMT
            Not After : Mar  2 19:00:56 2026 GMT
        Subject: CN=3256efea33bceb841f888d16df7ba3c644a92f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:7e:90:43:34:93:01:05:e9:e6:3b:40:c0:
                    ab:aa:24:e8:64:66:2b:2d:ce:e0:29:be:6d:cb:82:
                    f2:18:72:7e:a5:ce:95:6f:7d:27:d7:bc:f2:19:52:
                    36:b0:11:fa:78:66:41:82:ff:85:26:26:65:a1:a7:
                    32:01:86:84:e6:22:e2:a3:45:d9:a2:67:ed:71:a2:
                    90:bd:1a:34:c6:52:2c:63:d6:29:3e:24:06:e7:e7:
                    33:63:d3:83:10:95:f2:30:87:66:19:6a:c5:c1:c3:
                    36:42:b4:57:da:78:94:7b:c3:f5:5d:4c:3e:d4:37:
                    80:23:80:98:60:ac:73:d5:e1:91:14:c7:61:90:b8:
                    89:42:ab:cd:13:6e:23:b9:39:af:0d:aa:0d:18:11:
                    bc:2c:a6:88:96:14:06:41:b8:2f:c9:c2:ef:fe:a8:
                    8b:67:95:fa:31:6f:95:da:10:2c:71:06:b9:76:cb:
                    bf:5d:98:16:f9:89:84:7e:1c:45:4f:8c:8b:46:f5:
                    65:d5:6f:0f:f5:f7:b4:02:a2:80:b1:52:cd:58:28:
                    4d:70:2b:48:14:14:45:c6:56:13:6d:d8:96:6b:0c:
                    1d:85:dd:74:4f:03:f8:de:2a:db:ba:8d:3f:65:65:
                    a7:a2:34:09:d3:d2:c7:85:aa:93:cf:3a:27:5d:82:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:EF:EA:33:BC:EB:84:1F:88:8D:16:DF:7B:A3:C6:44:A9:2F:63
            X509v3 Authority Key Identifier:
                keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:a5:33:7a:20:20:3a:4e:c9:9c:d6:ca:da:e2:79:3f:a6:
         c7:aa:8c:0c:f6:c3:ac:59:e5:e8:85:e8:06:55:89:2c:8c:c1:
         c5:fe:63:5f:38:07:53:65:5d:a5:01:36:e1:47:b9:49:fc:29:
         00:09:1e:de:e7:f8:5c:88:31:ee:46:e2:2e:da:79:db:72:84:
         67:0a:bb:a2:87:73:7f:85:d6:e6:d5:0e:54:9e:66:ad:29:ae:
         ae:f4:be:41:9f:6b:ff:71:4c:9c:49:cf:1f:3e:67:7c:61:27:
         d4:d5:7c:2b:26:1e:0a:e2:4e:14:5a:b6:7e:49:36:20:e4:43:
         f8:0d:1c:6a:1d:78:30:dc:8b:80:01:89:9f:0b:d8:52:3d:05:
         b4:bd:32:eb:24:a9:50:41:be:28:d5:83:e9:c5:31:02:4a:0d:
         ac:3e:b8:90:36:4a:ca:fb:f7:1a:38:ab:9e:f7:d6:df:d9:30:
         33:f9:84:80:bd:8c:02:13:fd:7f:2b:17:59:d4:bd:f7:e6:12:
         48:4e:b0:40:d6:48:95:f4:3f:f7:01:be:86:0b:b6:33:7a:61:
         5e:d6:c5:b5:95:36:ee:49:38:4a:3f:93:e5:39:a6:77:98:bf:
         39:77:ae:a3:b9:aa:bd:e9:15:6d:e6:fe:81:7c:45:53:40:f5:
         ac:47:6b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmyQk/ni0d7eiTY+jtoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjNhOWQzNTIzZjRmMTU2NTg5YmEwYWEyNDlmZDM1MjVj
ODVmNmIwHhcNMjYwMzAxMTkwMDU2WhcNMjYwMzAyMTkwMDU2WjAzMTEwLwYDVQQD
EygzMjU2ZWZlYTMzYmNlYjg0MWY4ODhkMTZkZjdiYTNjNjQ0YTkyZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhh+kEM0kwEF6eY7QMCrqiToZGYr
Lc7gKb5ty4LyGHJ+pc6Vb30n17zyGVI2sBH6eGZBgv+FJiZloacyAYaE5iLio0XZ
omftcaKQvRo0xlIsY9YpPiQG5+czY9ODEJXyMIdmGWrFwcM2QrRX2niUe8P1XUw+
1DeAI4CYYKxz1eGRFMdhkLiJQqvNE24juTmvDaoNGBG8LKaIlhQGQbgvycLv/qiL
Z5X6MW+V2hAscQa5dsu/XZgW+YmEfhxFT4yLRvVl1W8P9fe0AqKAsVLNWChNcCtI
FBRFxlYTbdiWawwdhd10TwP43irbuo0/ZWWnojQJ09LHhaqTzzonXYKkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJW7+ozvOuEH4iNFt97o8ZEqS9jMB8GA1UdIwQY
MBaAFL7zqdNSP08VZYm6CqJJ/TUlyF9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAt
ZGZlYWRlM2Q1NjQxLzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAtZGZlYWRlM2Q1NjQx
LzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrqlM3og
IDpOyZzWytrieT+mx6qMDPbDrFnl6IXoBlWJLIzBxf5jXzgHU2VdpQE24Ue5Sfwp
AAke3uf4XIgx7kbiLtp523KEZwq7oodzf4XW5tUOVJ5mrSmurvS+QZ9r/3FMnEnP
Hz5nfGEn1NV8KyYeCuJOFFq2fkk2IORD+A0cah14MNyLgAGJnwvYUj0FtL0y6ySp
UEG+KNWD6cUxAkoNrD64kDZKyvv3GjirnvfW39kwM/mEgL2MAhP9fysXWdS99+YS
SE6wQNZIlfQ/9wG+hgu2M3phXtbFtZU27kk4Sj+T5Tmmd5i/OXeuo7mqvekVbeb+
gXxFU0D1rEdrsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:03 2026 by rpki-client