Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File:                     VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier:          Obvx+HT0uXDo09IdRcatRhI1yE26Ll08IimQljZz+4Q=
Subject key identifier:   0E:BF:C9:5E:03:B4:99:B6:83:FA:16:0D:FF:51:FB:A3:DF:27:B8:C2
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer:       /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial:       019CAA8F79EE488660956DA2F4D5B48FEA90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number:          06A1
Signing time:             Sun 01 Mar 2026 18:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:55 +0000
Files and hashes:         1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: wRI86Y9dgaOjqVVAu1SzP1Tz9SseWovmJI5gvMdlXDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:79:ee:48:86:60:95:6d:a2:f4:d5:b4:8f:ea:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
        Validity
            Not Before: Mar  1 18:00:55 2026 GMT
            Not After : Mar  2 18:00:55 2026 GMT
        Subject: CN=0ebfc95e03b499b683fa160dff51fba3df27b8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:a3:73:dc:99:18:c3:cf:6f:62:4a:34:b8:
                    49:22:e5:99:e1:d9:37:8b:aa:b2:c5:12:0e:98:32:
                    2f:09:a3:a5:96:9d:8a:0b:94:fd:69:a6:c9:fc:ed:
                    e9:d7:f7:8d:76:73:41:86:1b:a8:d9:95:fb:86:5a:
                    72:e9:03:dd:b8:58:dc:ec:5f:97:c9:7a:70:2b:e7:
                    3c:79:7e:ab:c3:a2:ce:32:63:5c:69:29:56:4f:84:
                    80:f6:b3:fa:14:48:96:b3:f7:e8:4e:c0:39:08:4a:
                    26:1a:3b:79:e6:b5:d2:e6:12:71:23:c1:8c:ed:94:
                    14:12:ec:57:9e:33:8e:83:38:26:08:a1:17:5b:46:
                    f4:46:08:a2:5c:ef:a3:96:5e:67:63:e2:2b:fb:e5:
                    0d:aa:79:82:09:77:20:d9:99:09:64:b6:d3:d5:b8:
                    33:86:c8:11:c3:be:72:61:38:3e:6d:6f:d4:22:5d:
                    49:9c:6f:f4:c4:bb:9b:ab:49:2f:1d:71:db:13:4e:
                    f8:d5:61:5b:d0:6c:f5:93:c6:d9:b7:55:bc:7b:46:
                    c3:76:aa:77:63:58:55:f3:c1:44:44:b3:ae:07:6a:
                    46:99:ce:b7:eb:ac:18:38:1b:e2:74:d3:6b:bd:fe:
                    eb:01:4e:8c:82:2a:7b:cd:d9:18:79:c8:71:e8:1d:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BF:C9:5E:03:B4:99:B6:83:FA:16:0D:FF:51:FB:A3:DF:27:B8:C2
            X509v3 Authority Key Identifier:
                keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:cf:64:45:a9:f3:48:85:19:21:d9:a4:08:d7:2e:79:b3:79:
         9d:bd:98:51:9e:6b:46:e1:99:80:a1:2a:fb:37:f3:cd:ac:97:
         6a:99:e3:fe:fc:6a:7c:99:15:f7:4c:33:8b:a7:75:d6:e7:b5:
         15:00:cb:17:83:50:3f:37:af:47:03:f6:56:b8:48:b0:08:60:
         e5:86:00:51:a0:28:ae:27:8f:7e:7b:51:42:e5:c5:b9:de:ee:
         b5:a3:18:cb:d1:63:a4:92:86:96:98:0b:94:fe:26:c4:bc:7a:
         a4:dc:d8:0c:0e:e4:8d:f7:a4:63:be:6e:55:a4:78:92:57:28:
         b8:b8:a8:cc:e2:63:8b:e4:1e:a7:f4:58:0c:a5:48:ed:06:1d:
         50:23:9d:e5:09:d2:3f:f2:d4:5d:3f:ea:e1:f9:bc:ac:bd:d8:
         a3:dd:e5:29:6f:94:4c:15:bf:be:be:8c:af:49:8a:51:61:88:
         1f:f3:77:aa:59:6d:e5:b4:a0:54:2a:6b:44:c5:16:06:d1:c7:
         72:67:3a:44:98:4d:d0:03:f2:f7:02:b8:25:74:68:03:36:96:
         b4:8a:59:85:3f:51:d8:b9:17:33:1b:87:bc:ec:79:f6:5b:1b:
         3b:fc:c5:fb:35:04:72:36:82:94:4f:05:9c:7a:90:a7:b8:40:
         33:a2:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:31 2026 by rpki-client