Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File:                     VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier:          USxYPJQhOa5itFJamSex15Vn0A0eDb9YSJaAdI7tCQE=
Subject key identifier:   AF:08:51:44:E0:F2:92:ED:0D:54:2B:E8:A8:DE:10:F9:9F:DA:DC:FD
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       019CAB34429AAADDDA6CFE8BF0DD58FACBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number:          0CC7
Signing time:             Sun 01 Mar 2026 21:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:54 +0000
Files and hashes:         1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: y6rbmFKCCFk6XRRq/L3r+26Pb4bA7BSXpD3t1ooBRm0=)
                          2: vtiv1SuCImBiDyE_Yf93wTvMNSc.roa (hash: bNgzXmW67ESZNvtBeddoTaG7/VeqNg+fCmp6on+qafA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:42:9a:aa:dd:da:6c:fe:8b:f0:dd:58:fa:cb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Mar  1 21:00:54 2026 GMT
            Not After : Mar  2 21:00:54 2026 GMT
        Subject: CN=af085144e0f292ed0d542be8a8de10f99fdadcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:9c:24:77:5a:e3:86:3d:91:c5:9a:29:3a:
                    26:71:f9:fa:fe:d6:32:e8:77:a3:9c:5a:b5:4f:7e:
                    d0:3b:38:44:3f:01:4d:94:8a:bb:ed:d2:85:c0:19:
                    f2:86:6c:50:05:44:ec:eb:5b:09:f8:c2:2b:0e:db:
                    56:e9:43:3e:8e:9a:5b:24:61:a6:8c:4b:99:98:8a:
                    04:38:33:ad:9d:45:5e:9f:25:98:66:af:46:c1:c4:
                    40:6c:38:d1:31:37:ad:79:c8:ed:a5:b8:64:3a:12:
                    f2:d8:c2:75:0b:cd:b8:14:5c:a2:23:e2:0a:66:d7:
                    77:d2:e5:b0:f1:58:b7:29:70:a0:5d:5d:b1:39:35:
                    e4:57:71:83:37:0a:c7:f4:21:f4:a4:21:a3:66:cc:
                    67:17:e7:bd:3a:1f:29:cf:18:d1:07:58:dd:4a:e5:
                    52:11:3e:7a:f5:c2:93:b6:70:49:33:63:08:cf:8e:
                    e3:4d:ce:62:16:45:8c:8f:12:94:1c:c8:db:b5:c1:
                    23:06:25:18:80:a9:0b:ba:bc:e6:32:6e:47:0f:02:
                    dd:8a:87:af:54:0b:d9:5c:38:23:a1:b0:d5:3a:6e:
                    fd:b5:f2:3f:ad:8b:30:31:b6:af:ee:d7:3a:5a:20:
                    7f:70:bf:0d:62:5e:7e:86:86:84:ec:15:d0:ed:d7:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:51:44:E0:F2:92:ED:0D:54:2B:E8:A8:DE:10:F9:9F:DA:DC:FD
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:71:85:5d:e6:f3:64:3a:e7:e5:86:e0:fb:47:5f:0b:0d:
         82:54:b4:ff:3c:92:9f:7e:0d:32:e0:5d:a5:80:d0:21:d0:2b:
         eb:3e:be:9c:dc:73:1d:c5:64:d8:47:99:90:dc:52:64:76:3b:
         30:36:33:77:51:0d:c5:9b:04:7a:7c:57:2d:d9:99:bb:4b:39:
         8b:d2:56:46:a1:38:d7:8d:49:6e:2c:c1:53:f0:62:1f:c3:91:
         70:f5:1b:0f:d2:20:11:53:88:bc:88:33:ee:c1:da:64:6a:23:
         fe:b9:a3:82:5c:5b:cd:07:93:3e:a3:7e:ea:b9:16:ca:62:03:
         28:a1:3a:9c:66:1f:38:cf:b5:34:6c:71:c4:aa:de:37:8b:f9:
         e4:75:d8:d3:fc:97:b1:86:65:b2:ba:b6:ae:70:e0:73:d8:7c:
         b6:4b:00:e6:75:07:67:2d:7a:68:19:3b:dc:1f:52:da:0c:2c:
         f2:80:27:9a:a9:e0:63:4f:ec:bc:5b:13:5a:82:0e:0c:11:59:
         c9:a7:69:da:f0:e6:c6:6e:1e:ed:6a:1e:94:15:79:eb:b5:ab:
         2a:71:54:f4:54:eb:02:ee:1b:7e:f3:0d:6c:36:1b:fe:29:aa:
         ad:8e:95:e2:ce:2e:b0:20:92:5a:23:7c:f3:94:71:9f:69:cd:
         ae:bc:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:09 2026 by rpki-client