Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File:                     VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier:          aBK/sCAUXC9sGHLhwWZi9yiWN/VoUmc+jbRvjMj/reM=
Subject key identifier:   52:3E:0E:D6:01:D9:CC:A9:20:0B:FC:C0:62:6E:BA:DC:60:56:CB:16
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer:       /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial:       019E1D90E269978581AF06CF338FE9EB3686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number:          0599
Signing time:             Tue 12 May 2026 19:01:34 +0000
Manifest this update:     Tue 12 May 2026 19:01:34 +0000
Manifest next update:     Wed 13 May 2026 19:01:34 +0000
Files and hashes:         1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: cKN/meq3/U5N90/iaNHK1jHWHqb7WsOyQOIlg0eRTIg=)
                          2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e2:69:97:85:81:af:06:cf:33:8f:e9:eb:36:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
        Validity
            Not Before: May 12 19:01:34 2026 GMT
            Not After : May 13 19:01:34 2026 GMT
        Subject: CN=523e0ed601d9cca9200bfcc0626ebadc6056cb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:b1:d1:0a:dc:2e:1b:b9:3d:cf:8e:96:5a:
                    64:8b:ff:78:9a:0e:dd:21:5c:89:f5:e3:c2:44:6b:
                    37:eb:d2:f1:1c:a0:84:cd:69:59:b6:e1:dc:56:a6:
                    86:4e:f2:d1:6a:ec:f8:86:e3:49:79:06:df:91:1c:
                    70:24:70:85:89:c2:53:c5:d1:65:1e:9a:e6:7c:50:
                    87:35:63:eb:9b:2f:88:57:2c:b1:41:d9:af:19:49:
                    05:d9:bf:62:f3:13:58:e4:e8:0d:e8:19:87:45:49:
                    0c:11:f8:a5:59:0f:a5:c0:a6:f0:e9:eb:44:cd:62:
                    5a:81:5d:96:6b:8e:c3:4c:dc:4f:ab:93:48:ca:61:
                    fa:65:49:ef:55:ec:61:f1:a7:f8:68:ff:8a:cc:a3:
                    f9:87:6c:74:bc:88:de:3b:bb:86:52:75:b6:dd:f7:
                    f0:43:6e:82:5b:91:3b:4a:69:13:29:02:1f:74:31:
                    f5:88:7a:f1:ef:8d:b3:07:8a:b0:10:ff:1a:cd:ed:
                    df:ae:a2:c1:c8:f6:88:b6:7f:2c:95:50:e3:52:bc:
                    93:65:fc:84:72:ec:d7:62:ea:91:6d:e9:34:4d:b8:
                    96:f0:fd:f7:1f:22:bb:41:98:9b:26:ee:8e:2e:13:
                    dd:b2:27:cd:d8:4b:2f:13:51:11:94:e9:25:4a:71:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:0E:D6:01:D9:CC:A9:20:0B:FC:C0:62:6E:BA:DC:60:56:CB:16
            X509v3 Authority Key Identifier:
                keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:76:b2:c4:5e:1b:05:f0:63:0d:5e:d9:bc:0e:de:95:99:
         01:ad:fc:e5:76:15:fc:cb:f3:09:80:57:b4:a3:88:cd:c9:f2:
         21:40:ab:e9:8a:9a:e3:3b:ea:97:7f:63:4c:11:d4:4c:9d:22:
         97:1a:f9:7f:8e:6a:72:14:7c:16:99:0b:0e:42:62:14:b4:16:
         03:6b:d9:71:80:65:1c:51:6c:23:e1:a5:83:70:bc:d7:36:79:
         f1:1b:bd:62:d4:13:76:9e:9e:ff:fb:93:e0:a3:67:1f:c6:3a:
         f3:3d:b5:64:4b:06:78:31:07:55:da:d8:ac:69:15:9f:e7:ac:
         3d:5d:69:f4:2a:31:cc:1c:79:a6:39:39:09:72:d3:08:6f:9d:
         6e:08:d6:ae:c6:cb:76:ad:fb:1e:de:95:45:44:dc:13:c6:29:
         94:22:99:f6:a0:aa:a3:76:be:84:57:d0:3e:2a:07:b8:e6:95:
         72:51:14:6c:0e:62:70:c6:f2:fd:36:e2:58:a3:3d:70:c9:6f:
         5e:8f:25:43:46:39:78:81:32:8d:14:7d:f4:ee:31:9c:03:7f:
         d7:66:62:37:8f:bd:e0:ec:50:b7:20:5b:0e:04:9b:8d:70:20:
         24:e3:fe:f8:0a:48:23:5c:46:4e:7f:3b:a0:5c:4c:b6:07:ad:
         b4:3a:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:32 2026 by rpki-client