Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          7rzHZfTRCRsqmpoA3D8m8iR/v7l3xkFEsH49U534WQw=
Subject key identifier:   E3:E6:1B:CF:5A:34:AB:D5:8C:9D:CC:B3:95:BB:D8:C9:73:FB:5B:0D
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       019D28BBC5D357A5B9F9261D8490145365D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          064D
Signing time:             Thu 26 Mar 2026 06:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:27 +0000
Files and hashes:         1: MK2noUVGla3OTUx2ogGw2XUu6Gs.roa (hash: veceQ15vq5ia7EiqoqV8aOxRd8PGbXJRsqwiJKSo+Tg=)
                          2: PkSRo3CWKUx4NQN2EIynL2VXNY8.roa (hash: 7UyCEKaWuR4pgq0/Sue24UhPGmnjwf7e/JUg7VpH6TM=)
                          3: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: Wyn5KpfFRfRuFkXGxYgtJJehnDgj6XckGwWUjyNxUpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c5:d3:57:a5:b9:f9:26:1d:84:90:14:53:65:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Mar 26 06:01:27 2026 GMT
            Not After : Mar 27 06:01:27 2026 GMT
        Subject: CN=e3e61bcf5a34abd58c9dccb395bbd8c973fb5b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:21:60:21:9d:8f:16:6a:8a:91:44:81:80:
                    27:31:54:96:33:aa:e8:b4:7d:c3:0d:b1:fe:58:c3:
                    c3:93:ba:62:49:81:83:a8:56:08:8f:4f:5b:98:01:
                    52:59:68:d6:d8:06:63:6a:90:36:b1:44:b9:e2:c6:
                    e7:6f:e9:c7:54:d4:e2:3b:96:a4:bd:db:8f:0f:9f:
                    0d:09:0c:55:19:38:92:fe:1a:23:d4:2f:32:26:af:
                    f4:11:3e:95:9d:0b:45:cf:c2:15:7b:f0:2e:70:49:
                    c5:a1:b7:31:d3:5b:d7:37:5c:52:dd:27:40:84:36:
                    36:b9:36:80:51:f4:5e:e4:84:c0:5b:3b:ce:3a:20:
                    0a:96:c2:c0:ef:90:c4:f4:9d:d2:48:66:68:cb:de:
                    88:53:bf:0f:1b:78:27:95:c0:61:00:83:59:44:08:
                    c4:e9:81:56:e2:41:13:29:53:8e:fc:09:77:d6:f9:
                    14:d7:4e:59:58:44:9e:4b:b6:75:8f:df:da:30:46:
                    46:36:5c:e2:75:70:33:b7:5c:49:40:d1:c2:fa:4a:
                    cd:01:60:c3:68:8b:11:4d:f8:fc:5d:6e:9d:6c:19:
                    4f:96:9f:6f:58:a3:9c:1d:3a:a0:ac:dc:46:76:a3:
                    8d:b4:8c:ef:d1:35:ab:de:68:5c:d4:9b:ab:72:ed:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:1B:CF:5A:34:AB:D5:8C:9D:CC:B3:95:BB:D8:C9:73:FB:5B:0D
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:3d:13:6b:19:f2:57:58:9f:dd:c8:0e:32:94:b4:57:7f:
         7c:dc:f8:20:59:ff:ca:43:98:33:ba:76:46:50:dd:b8:25:5e:
         45:6c:2b:0f:20:67:58:70:19:70:aa:f0:30:35:23:03:a6:38:
         68:18:cd:c1:43:9a:e5:2d:52:91:7c:6f:4b:13:4c:82:03:6e:
         8e:58:bc:14:b7:78:ac:43:82:b6:79:21:30:b3:7f:6e:2f:e3:
         71:2a:a0:7b:d3:b0:cd:20:64:6a:8c:65:66:0d:96:cf:b4:30:
         da:7b:f0:f7:af:22:fb:6e:ed:5e:8e:cd:9a:bb:5b:6b:f3:25:
         0b:62:bc:1e:45:fc:ac:b8:3e:ef:e1:14:3a:10:46:94:86:de:
         fd:01:10:82:46:5e:d1:ef:2a:79:71:94:12:d9:5e:21:42:4d:
         73:00:cd:e1:9b:9e:a2:06:93:33:17:8e:c8:a7:79:dc:ff:09:
         1c:23:5e:e1:44:a7:69:76:79:5c:35:59:bc:66:67:35:88:4a:
         c8:02:a0:50:cb:d6:df:7e:c5:d4:5e:ce:71:74:fd:67:be:b7:
         9e:84:ca:b6:dc:73:83:7b:24:87:d1:99:5a:53:fa:76:24:8f:
         68:0d:a3:29:e0:72:81:b5:30:96:3e:52:69:11:63:72:99:cc:
         96:11:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:51 2026 by rpki-client