Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File:                     VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier:          3LPC9L2OcfSV9j9aqT26pdL3dQOBk6+X8+uAMjvf0qw=
Subject key identifier:   55:6A:C3:49:75:73:BD:A2:06:97:1B:B1:ED:56:15:67:B5:74:17:AB
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       019D27E0067D590A292D4E3951E6E68A1B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number:          0C52
Signing time:             Thu 26 Mar 2026 02:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:26 +0000
Files and hashes:         1: C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa (hash: n8yzv8xHg2NtYJD4BaB2U0HQGcbp6eAIylk5+xYZg2A=)
                          2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: lPgti0E1qy6+srB5C8m+ZauuwuhfWWkwfrIZQy8uBL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:06:7d:59:0a:29:2d:4e:39:51:e6:e6:8a:1b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Mar 26 02:01:26 2026 GMT
            Not After : Mar 27 02:01:26 2026 GMT
        Subject: CN=556ac3497573bda206971bb1ed561567b57417ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:8b:55:2b:2c:f9:f8:38:22:1a:48:d9:bf:
                    dc:38:38:bf:61:4c:08:22:19:c6:58:42:64:e8:23:
                    ad:28:8d:c5:f9:b8:14:4b:5c:9f:bf:4a:ec:36:1c:
                    3b:d2:d8:cc:6a:8b:c2:0e:25:cd:2f:0d:ee:4a:95:
                    c2:e4:dd:5f:fa:2d:b1:46:94:f2:f7:14:ad:f5:de:
                    ea:81:a8:32:a9:bb:d0:b7:40:21:2d:47:38:20:02:
                    c3:5f:e8:36:70:9f:a2:f2:0c:f9:9c:10:3b:b5:6f:
                    54:12:ae:0a:9f:fa:f5:34:16:56:59:39:ca:12:c1:
                    4a:90:47:80:50:8c:c0:e1:c5:77:69:c3:f1:09:ce:
                    84:6c:ea:ee:40:66:38:71:69:79:7e:7f:8f:1a:ce:
                    38:d1:7e:49:91:db:b2:ba:03:42:10:36:3d:ef:16:
                    62:6d:da:c3:05:16:1e:6b:24:96:b5:a6:2e:f2:f0:
                    e2:c2:93:4e:5c:b4:cc:29:41:08:43:6f:3d:27:df:
                    b9:7d:21:95:d1:52:36:97:a0:25:23:2b:e2:81:9e:
                    14:be:6b:f9:ef:ff:19:ae:ee:f1:72:b7:a0:ac:11:
                    0e:a3:2a:03:cc:0c:58:1a:ea:47:75:2e:15:aa:26:
                    44:9b:82:e9:4c:f6:09:72:0f:7f:35:20:14:0f:ed:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:C3:49:75:73:BD:A2:06:97:1B:B1:ED:56:15:67:B5:74:17:AB
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:49:ea:84:b4:c3:59:ae:3f:43:88:d2:ff:d6:a5:4e:ee:7a:
         f8:b9:43:83:90:b2:8b:5b:bd:20:ae:06:b9:c4:a3:96:a6:a3:
         71:1a:50:2e:b0:39:15:18:4d:bb:11:04:6e:28:a3:6f:0a:68:
         e8:35:2a:92:dc:ee:58:7f:1f:f7:5e:fb:e7:f9:f7:e6:a0:3e:
         cd:2e:e7:72:0f:57:26:f4:d2:e2:f8:97:54:84:17:8e:b3:93:
         c5:07:5f:e7:46:c2:27:fb:b8:d9:b0:a6:43:ed:66:a6:a4:33:
         52:4f:ca:23:f7:96:8f:72:02:0c:85:41:e4:6a:73:ef:3d:11:
         9a:a3:a7:0b:4b:86:fc:c6:d0:24:0d:b0:28:17:00:2b:e2:74:
         57:66:fc:40:ae:49:12:e2:cd:43:9a:d1:e9:0e:18:89:10:94:
         31:96:4b:df:32:9d:5f:53:a4:ae:d8:8a:d7:91:fc:70:ae:2f:
         fc:52:8c:0b:a6:b9:7b:95:80:fe:6b:06:fe:9c:09:00:72:10:
         e9:0b:96:af:ae:ae:43:fd:e9:b9:bf:39:c9:02:d6:2f:bc:c9:
         c5:f0:93:05:ad:fd:25:19:9f:44:46:db:6f:23:f0:0b:e1:3e:
         71:d5:a7:71:7b:c8:86:85:36:43:98:80:83:17:49:8f:05:c2:
         6f:e6:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:34 2026 by rpki-client