Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          3f50xGibV3V1ari1S0VuA2yT00XhctZDUtl7VK3jzkk=
Subject key identifier:   90:26:4C:34:2C:96:7F:46:44:D1:58:EB:03:48:91:E5:9B:D6:AF:96
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       019CABA2632CFCD1D92886A05FC7F521E9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          14B7
Signing time:             Sun 01 Mar 2026 23:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:11 +0000
Files and hashes:         1: TzFMlyGi4zFmCDU2h2qG4O6pMds.roa (hash: TJpZbRVZ7iaxJCXPVUNPAifcE/xvT1lmZtmQUt0op4c=)
                          2: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: 9qYGdR1QPTL43mTUmNo3S9bpKaSNGd3+oULMhI1JD1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:63:2c:fc:d1:d9:28:86:a0:5f:c7:f5:21:e9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: Mar  1 23:01:11 2026 GMT
            Not After : Mar  2 23:01:11 2026 GMT
        Subject: CN=90264c342c967f4644d158eb034891e59bd6af96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:2b:f0:20:ef:c5:25:3d:ba:67:6a:a0:d7:
                    d5:14:0c:fb:6c:cc:e6:26:91:4e:5b:ed:c7:32:4e:
                    3a:07:31:91:80:c9:ed:c1:99:03:ee:68:46:bc:05:
                    02:25:1d:30:a4:ee:83:28:0c:fb:b8:77:54:6e:9a:
                    95:34:a8:62:d2:52:e3:4c:06:1f:26:86:e0:30:b4:
                    b7:dd:5a:a2:ee:25:6d:1b:ed:99:2d:70:cb:c6:52:
                    17:6b:d2:4f:f1:30:f3:2c:62:00:ef:90:5f:f4:3c:
                    7a:c2:66:0f:8e:97:e1:20:97:da:c1:3b:ee:f8:0a:
                    37:45:98:a3:ac:5d:35:c9:63:cf:27:02:6b:b7:c2:
                    77:0d:10:56:b0:7f:fd:ca:85:f6:c7:e9:be:5f:4d:
                    60:f6:6a:1a:bc:83:d9:e9:12:16:b5:68:76:a5:59:
                    42:e5:1a:23:74:aa:9e:81:3a:22:f1:63:49:b4:80:
                    81:93:35:1e:16:b0:a6:e4:57:35:53:05:af:0c:56:
                    f8:60:d1:29:e3:44:17:a3:49:3f:3d:c8:cb:48:e0:
                    59:3b:6f:98:ed:8d:03:53:ca:20:00:5f:d9:dd:5c:
                    05:2a:cf:fa:98:01:37:a6:4a:4d:d0:39:c1:e2:6c:
                    ad:42:66:0c:3f:23:e5:91:8f:aa:87:4a:e2:04:a4:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:26:4C:34:2C:96:7F:46:44:D1:58:EB:03:48:91:E5:9B:D6:AF:96
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:80:32:3c:68:07:1f:be:61:c6:ed:d0:cc:71:e6:c5:5a:9a:
         85:8a:44:d7:31:fb:fb:35:d1:fd:ea:47:d9:63:7c:13:b1:4e:
         1d:93:36:a6:7d:4b:84:26:c5:fa:df:f6:08:17:3c:1c:85:59:
         7f:55:67:c6:b3:61:61:8c:9c:a8:54:f1:b0:21:15:15:59:68:
         a0:08:6f:b9:1d:5e:08:af:6e:c8:73:8a:a7:4f:aa:01:8b:6d:
         c4:ac:1f:04:06:c2:45:44:f8:e7:d8:87:e9:36:c1:99:e6:a7:
         58:5e:9e:b9:86:b4:20:ad:c1:95:a1:22:7b:ff:c9:10:1b:0c:
         74:4d:f7:1d:fb:e5:23:18:6b:b9:2a:2b:e7:07:3d:7c:f5:3a:
         02:d6:01:1b:54:91:3e:aa:f9:66:2c:c6:b1:2b:6c:27:cc:5a:
         f4:1d:38:e8:c4:5d:41:fa:d9:37:65:54:c4:14:26:78:b3:6f:
         35:8c:64:24:b0:f5:59:6e:07:3d:6e:b0:f1:a7:dd:bf:bf:33:
         f1:4e:3d:a3:d2:20:d5:90:0f:01:b6:91:30:62:e6:53:23:c6:
         1c:5b:ae:b5:e4:1e:23:94:89:a8:a8:93:dd:73:21:4b:be:50:
         6a:22:d1:9f:05:8e:3e:64:a2:cf:6f:ec:53:ff:fc:d7:ff:86:
         31:0c:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:43 2026 by rpki-client