Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File:                     vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier:          gmK6c3XrGrAsnNBluks9H3DHtNI0UIbUKEcuoz9eHus=
Subject key identifier:   34:E9:60:13:3C:0B:24:79:F5:77:ED:F9:DA:CB:9D:E3:A3:AB:63:42
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer:       /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial:       019D26CD893AF6DBC00AC58BEB5A0C5E36D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number:          0B1E
Signing time:             Wed 25 Mar 2026 21:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:37 +0000
Files and hashes:         1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: 9Nxw+5EC9uAZWL7MyDJ2/h13c2QC0dgCTJK12vHAc8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:89:3a:f6:db:c0:0a:c5:8b:eb:5a:0c:5e:36:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
        Validity
            Not Before: Mar 25 21:01:37 2026 GMT
            Not After : Mar 26 21:01:37 2026 GMT
        Subject: CN=34e960133c0b2479f577edf9dacb9de3a3ab6342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:f5:04:4f:26:31:96:6e:04:d2:50:e6:43:
                    a4:9b:6e:f5:37:0e:4a:4c:67:96:8d:59:fc:d8:4d:
                    09:fe:f3:51:ce:4a:7d:0c:24:53:18:46:c0:a7:ec:
                    6e:dd:9d:1c:b9:9d:fe:fd:62:79:1c:4e:a5:82:a9:
                    34:b6:9d:19:fb:ac:78:b3:5f:5a:55:21:8a:e0:50:
                    25:00:58:f1:84:d1:f1:a5:e4:ef:72:70:ec:24:54:
                    f1:1c:0d:31:f1:df:1b:f2:70:b4:d9:e5:b9:d9:1b:
                    4b:e5:e6:54:c0:a9:8f:77:94:d9:7b:d6:8e:96:cd:
                    27:d5:23:b5:15:4e:ba:73:41:fd:f3:df:53:58:d7:
                    52:1f:d9:0b:5a:fb:df:58:bb:14:ce:77:db:67:9b:
                    2b:58:94:3c:fb:83:60:a2:ed:f7:14:36:81:32:76:
                    1d:c1:fa:98:46:5d:f4:ad:cd:f0:de:2f:b2:75:8d:
                    c9:dc:19:0d:b2:bd:8f:bb:ea:bf:b0:c3:51:e2:7e:
                    07:bf:3a:91:41:0f:9e:a6:53:d7:63:72:08:90:4a:
                    1a:4c:d9:c9:e1:57:4b:1b:f5:93:a2:49:5d:37:4b:
                    53:d3:f5:c8:e1:0c:e6:0d:3e:ac:ca:a4:ed:45:2f:
                    f2:f9:c0:6c:5e:54:8c:e2:d9:bb:01:c9:9f:87:9f:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:60:13:3C:0B:24:79:F5:77:ED:F9:DA:CB:9D:E3:A3:AB:63:42
            X509v3 Authority Key Identifier:
                keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:13:82:f3:68:f3:d6:af:f0:fe:11:2d:ff:d0:d2:69:cf:6c:
         b6:d1:ba:bb:c8:ab:cf:61:fe:97:89:b9:f4:f3:14:06:60:56:
         56:2c:fb:51:0f:b7:2c:af:ad:3d:60:f4:ef:bb:e4:2f:68:41:
         10:04:3a:46:7a:6d:38:16:0a:6d:7b:12:a3:80:f2:60:34:1e:
         fc:08:7a:09:8e:30:ca:78:90:fa:e6:75:78:7c:75:cd:24:a8:
         8e:2f:c1:4e:fc:e4:fa:f0:ad:15:1f:87:5c:99:19:c8:72:d0:
         a4:be:0f:31:68:e3:6c:00:79:97:f7:76:79:42:e8:4b:e0:0c:
         ec:76:10:11:50:06:e3:1f:85:ac:8d:da:6e:39:d3:e3:89:62:
         82:63:aa:ae:df:23:07:1a:67:5a:d6:07:39:95:a0:5e:94:4a:
         dc:00:c6:4f:d6:b2:f6:40:d1:25:dc:63:4a:11:df:aa:13:cc:
         e5:db:22:a9:30:07:bf:f0:cc:0c:63:bb:a3:b3:d2:81:74:a4:
         34:8c:46:f3:f6:80:63:22:c9:32:23:38:c0:23:49:41:3d:b1:
         ab:a2:c8:7c:94:8a:2c:0f:20:35:7e:10:8f:a4:f4:e4:dd:8f:
         f5:da:2f:b4:ed:1c:82:a6:90:ce:09:df:f3:d1:65:70:e3:18:
         7a:8e:80:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYk69tvACsWL61oMXjbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTlmZmNmYjRjNjliNzlkOWFjZGNiZTZhOTRkYjg5ZDUy
MzYwOGUwHhcNMjYwMzI1MjEwMTM3WhcNMjYwMzI2MjEwMTM3WjAzMTEwLwYDVQQD
EygzNGU5NjAxMzNjMGIyNDc5ZjU3N2VkZjlkYWNiOWRlM2EzYWI2MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMP1BE8mMZZuBNJQ5kOkm271Nw5K
TGeWjVn82E0J/vNRzkp9DCRTGEbAp+xu3Z0cuZ3+/WJ5HE6lgqk0tp0Z+6x4s19a
VSGK4FAlAFjxhNHxpeTvcnDsJFTxHA0x8d8b8nC02eW52RtL5eZUwKmPd5TZe9aO
ls0n1SO1FU66c0H9899TWNdSH9kLWvvfWLsUznfbZ5srWJQ8+4Ngou33FDaBMnYd
wfqYRl30rc3w3i+ydY3J3BkNsr2Pu+q/sMNR4n4HvzqRQQ+eplPXY3IIkEoaTNnJ
4VdLG/WTokldN0tT0/XI4QzmDT6syqTtRS/y+cBsXlSM4tm7Acmfh59e1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTpYBM8CyR59Xft+drLneOjq2NCMB8GA1UdIwQY
MBaAFL5Z/8+0xpt52azcvmqU24nVI2COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2Et
OWI2YTBmMzY5YmNkLzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2EtOWI2YTBmMzY5YmNk
LzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxOC82jz
1q/w/hEt/9DSac9sttG6u8irz2H+l4m59PMUBmBWViz7UQ+3LK+tPWD077vkL2hB
EAQ6RnptOBYKbXsSo4DyYDQe/Ah6CY4wyniQ+uZ1eHx1zSSoji/BTvzk+vCtFR+H
XJkZyHLQpL4PMWjjbAB5l/d2eULoS+AM7HYQEVAG4x+FrI3abjnT44ligmOqrt8j
BxpnWtYHOZWgXpRK3ADGT9ay9kDRJdxjShHfqhPM5dsiqTAHv/DMDGO7o7PSgXSk
NIxG8/aAYyLJMiM4wCNJQT2xq6LIfJSKLA8gNX4Qj6T05N2P9dovtO0cgqaQzgnf
89FlcOMYeo6AHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:45 2026 by rpki-client