Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          zkERE1LX93WkPPeZfwm2F8273TgbWq0kwSOm2MbiLFU=
Subject key identifier:   70:66:3C:8D:75:FC:C3:71:05:3D:C2:99:BC:B0:32:F9:58:17:1A:59
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       019CAB6BE0A4CA3E4D3705E36333351BF36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          07C5
Signing time:             Sun 01 Mar 2026 22:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:39 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: MX58u0OO2Q9K/FsNtq5uFR3WJOPtna8McuhKchi7ETg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:e0:a4:ca:3e:4d:37:05:e3:63:33:35:1b:f3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Mar  1 22:01:39 2026 GMT
            Not After : Mar  2 22:01:39 2026 GMT
        Subject: CN=70663c8d75fcc371053dc299bcb032f958171a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:5e:30:6d:d2:a0:68:35:20:16:58:14:c8:
                    c9:21:79:65:0a:76:2e:38:a4:e2:28:4d:75:a6:cb:
                    40:09:49:f7:e7:6d:d1:64:3b:35:51:81:9b:9b:29:
                    05:b3:21:da:16:61:d8:c8:c2:13:43:dc:c7:5c:ec:
                    94:2a:d9:87:c7:84:c3:d8:dc:57:67:47:a2:13:33:
                    43:1b:71:5a:45:f2:9c:ce:fb:24:1e:87:cd:b5:b8:
                    22:9a:b5:84:b7:e9:b0:ff:bf:62:bd:cb:c0:73:6f:
                    1e:b6:ad:2a:2b:55:3b:28:61:a5:34:0c:e2:a0:63:
                    3a:75:00:db:98:74:9d:d4:87:dd:f1:30:d5:d3:00:
                    86:b8:ec:80:ad:be:d3:d5:1f:27:fb:66:79:56:76:
                    0c:df:c0:0a:e9:a3:22:2f:44:74:94:9f:b9:39:84:
                    ca:32:36:df:e5:41:ab:f7:df:c9:3a:51:3f:de:e4:
                    19:e9:df:4a:9d:2e:93:76:47:01:6e:2f:65:65:7c:
                    7c:0a:e8:a2:56:58:88:85:9e:72:40:54:2b:2c:8d:
                    d2:1a:47:6b:cd:58:9d:c3:77:dc:e6:f3:4d:5a:86:
                    de:77:41:be:31:6e:19:1f:1d:c3:d3:f7:6a:04:f3:
                    fa:6b:04:e7:ba:f7:e0:91:95:98:d9:d9:04:82:e1:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:3C:8D:75:FC:C3:71:05:3D:C2:99:BC:B0:32:F9:58:17:1A:59
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:c4:c1:6d:b2:5d:6b:b5:9e:0c:60:bd:f2:01:09:33:b2:
         f2:0e:25:b2:20:19:0c:5b:27:ae:92:5c:57:58:5a:91:e7:5d:
         71:79:35:9f:51:08:27:0c:de:1c:24:56:a0:81:9a:d5:92:d9:
         09:6a:d9:c4:98:ee:00:9e:23:04:66:24:4a:2b:ff:b5:f7:f1:
         1c:89:c0:2a:5f:22:66:c9:8a:33:87:f3:80:1f:27:31:5c:1b:
         61:cf:03:37:03:4d:10:ac:af:09:41:4f:93:34:bc:a1:6a:46:
         91:b9:54:58:09:76:45:da:aa:18:9a:92:d3:e4:ef:ca:fb:e0:
         1b:2f:d9:eb:88:bd:dc:f0:bd:1d:25:1b:0e:31:a5:2c:da:41:
         7a:50:60:ee:8f:10:9e:6b:04:2e:bb:76:e0:42:e7:65:d8:4a:
         88:ca:4c:2f:43:7a:fc:18:f6:cd:c7:d0:3d:e8:3a:7d:10:d8:
         dd:17:58:9d:b9:f8:5e:02:f7:96:01:c3:a1:b1:6f:45:fe:ac:
         05:7e:e9:7e:8f:5d:ea:3f:42:6e:42:66:8c:2c:cc:74:55:2f:
         14:25:9f:95:5a:af:ab:d2:e7:5d:4f:d6:2a:6e:95:4f:67:92:
         a4:12:6c:15:77:a1:72:f4:42:ea:81:09:10:8e:9d:ab:a5:d2:
         65:1b:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:56 2026 by rpki-client