Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft
File:                     VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft (raw, json)
Hash identifier:          dV4KSkqRF/A0+VsAbo1uY8C/UPW7Wt8g8CfCdY2apds=
Subject key identifier:   5B:40:44:C0:86:B1:A5:2D:1C:A1:04:9E:A6:92:DC:A0:60:63:FB:F2
Authority key identifier: 55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34
Certificate issuer:       /CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
Certificate serial:       019CADFEB0A73B1C01E7C0C890E7B33C0D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft
Manifest number:          03F3
Signing time:             Mon 02 Mar 2026 10:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:15 +0000
Files and hashes:         1: 6Z8hob1Upqwo2EW6PTUCNBVkao0.roa (hash: MOFWzSd7ItSNB7fFtao0bMERMdYn11je1kVjMRXFl78=)
                          2: VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl (hash: yZHTskQ7beZC4Jtan43Ssb4c7UnzHFo5zf73a6bBChY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:b0:a7:3b:1c:01:e7:c0:c8:90:e7:b3:3c:0d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
        Validity
            Not Before: Mar  2 10:01:15 2026 GMT
            Not After : Mar  3 10:01:15 2026 GMT
        Subject: CN=5b4044c086b1a52d1ca1049ea692dca06063fbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:da:14:a0:91:e6:a8:16:ba:38:f0:5e:0e:
                    6a:f7:12:4c:35:8d:6e:8d:bb:5a:16:fe:4f:17:ac:
                    ca:96:5b:1d:31:c4:7e:e3:a0:74:a3:0b:b1:5b:f2:
                    0a:d6:db:31:db:1e:76:0e:6f:4a:f7:b2:ab:de:1a:
                    74:7d:38:4d:84:91:56:87:bf:3f:a8:ee:d6:1e:80:
                    94:05:98:a5:52:58:0c:d6:48:cb:08:8d:97:a5:58:
                    a1:a3:60:a5:21:c8:3e:6c:88:d0:3d:c3:30:21:e2:
                    a7:16:d0:3e:33:df:17:ad:0f:c8:89:74:85:0a:e8:
                    7a:70:11:ea:f4:09:58:b2:f0:ff:db:98:81:c1:9e:
                    e1:3f:db:ab:44:01:27:f8:14:37:ca:d4:cd:7f:ac:
                    57:3f:be:d1:bc:1b:da:0a:a2:70:54:00:0a:78:74:
                    fc:78:71:8a:47:c3:ee:6c:77:95:c7:62:f5:75:ff:
                    5d:57:a8:39:be:ce:3d:e7:c5:b4:58:35:e2:d2:79:
                    2f:74:c5:77:b2:0e:95:5b:1d:db:97:01:04:fe:28:
                    22:f6:ff:eb:6d:db:c4:19:ae:df:0b:6c:cd:a0:04:
                    75:a6:2d:07:a9:f8:8c:a4:aa:bc:df:f6:90:24:52:
                    af:5b:d2:4b:f7:26:ff:4b:ee:1d:a9:62:80:b1:c5:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:44:C0:86:B1:A5:2D:1C:A1:04:9E:A6:92:DC:A0:60:63:FB:F2
            X509v3 Authority Key Identifier:
                keyid:55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:91:f4:7c:c3:67:f7:7d:79:8f:a0:a7:e2:76:74:96:90:f4:
         cd:a8:ec:4b:57:52:df:78:5d:70:45:3c:5f:6f:51:c4:aa:0c:
         69:59:9c:c8:67:e0:e3:66:92:c9:57:55:37:59:9a:a6:36:55:
         d3:c4:1f:e6:3a:6a:50:2c:12:91:ad:f3:d2:fc:2b:e2:15:4d:
         b7:9a:8f:67:b5:a2:87:eb:11:65:01:bd:1d:7a:8f:24:de:f6:
         7e:63:a2:e8:c2:00:78:10:9e:7b:4e:5b:b2:8f:8c:82:f2:a6:
         e2:9c:31:da:8c:6d:d7:78:b3:1e:e1:b6:6f:79:09:4b:16:0f:
         99:5c:b5:86:22:15:e8:8e:55:16:dd:04:1f:6f:af:15:13:5b:
         4d:ad:09:17:64:e1:72:54:8e:40:ca:df:34:2f:6f:d4:c9:12:
         aa:5a:1b:91:7b:07:a0:90:5e:87:3b:57:2b:50:a3:19:a9:3b:
         be:e2:48:33:9a:41:27:92:ce:f6:7e:07:b0:a9:c1:a6:4d:80:
         d2:4e:06:34:11:f2:cb:aa:7c:a7:68:1b:db:e4:4f:3d:28:a5:
         1f:e0:4d:0f:2d:fd:a7:3b:c7:32:a6:f4:46:d3:05:ba:39:40:
         d6:32:50:a4:19:45:02:e8:b6:bd:17:f4:55:f0:a4:f1:50:c8:
         56:a6:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:54 2026 by rpki-client