Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
File:                     vue3VIWfbTyHDSKveE8jRPy6pjA.mft (raw, json)
Hash identifier:          wZN/OkvpxiZMNdYKmccqOVvV24jSOjxjvJrrMOuOSZw=
Subject key identifier:   AD:39:CD:8D:E9:F6:A1:9C:A7:1A:33:A3:36:C9:AF:A0:C7:B2:D8:E6
Authority key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30
Certificate issuer:       /CN=bee7b754859f6d3c870d22af784f2344fcbaa630
Certificate serial:       019D288495548294F1D9E901D4CE31C182F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
Manifest number:          011F
Signing time:             Thu 26 Mar 2026 05:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:10 +0000
Files and hashes:         1: 8opqSQFWn_CI2ZlcfZ1AN0aFK1w.roa (hash: vXfeL+0RKgCPsIija90RHF8JebjeFtVHh8+GzMyNBJE=)
                          2: vue3VIWfbTyHDSKveE8jRPy6pjA.crl (hash: KEfpdnXtLGwhW8aUNPHhZVaLrsolLlqNfN7iwYcTMx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:95:54:82:94:f1:d9:e9:01:d4:ce:31:c1:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee7b754859f6d3c870d22af784f2344fcbaa630
        Validity
            Not Before: Mar 26 05:01:10 2026 GMT
            Not After : Mar 27 05:01:10 2026 GMT
        Subject: CN=ad39cd8de9f6a19ca71a33a336c9afa0c7b2d8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:2d:55:10:68:ce:b8:64:24:41:11:1a:9e:
                    c8:a3:65:b2:70:8b:6e:67:90:88:46:ec:80:14:20:
                    e4:11:b3:85:53:58:51:15:70:2b:82:99:07:23:d9:
                    ea:07:ad:9b:93:02:95:8d:01:62:93:2b:9e:0e:a8:
                    b3:84:82:f0:53:1d:57:3e:d4:c0:14:cd:93:66:88:
                    22:35:4d:45:04:f6:e9:dc:91:61:86:95:75:26:da:
                    75:a8:a5:3e:16:6a:76:e4:52:ee:1f:bc:20:0e:77:
                    92:2c:f8:70:b9:ff:95:fa:db:67:2f:d7:c5:4d:c9:
                    18:cc:64:ef:30:1d:9e:cd:29:b1:a1:1e:61:1c:9c:
                    24:f1:d6:3c:45:3b:be:4a:f0:91:83:75:89:a1:6f:
                    fc:e6:c7:fc:27:93:ce:e9:7c:0c:70:a1:22:60:78:
                    fa:2d:15:3f:3c:56:cb:b5:4f:b9:4a:7a:41:4c:85:
                    64:d1:58:8a:e3:b7:68:3b:89:c5:70:cc:39:b3:e1:
                    74:cd:81:94:d5:82:e9:b5:00:88:fe:fc:eb:c3:75:
                    64:db:19:11:9c:16:ef:a0:3b:f2:4a:8e:34:58:32:
                    1a:3b:6e:ef:83:3a:9a:96:b1:4d:b6:5c:52:73:9c:
                    74:27:d2:f1:fe:b8:6d:f3:34:66:7e:5f:b6:16:10:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:CD:8D:E9:F6:A1:9C:A7:1A:33:A3:36:C9:AF:A0:C7:B2:D8:E6
            X509v3 Authority Key Identifier:
                keyid:BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:d4:9d:1a:fb:d3:40:2f:f2:9a:55:22:aa:29:04:00:f2:
         20:31:7c:0e:de:5c:1b:cf:c2:f9:f3:01:50:48:cd:e6:a1:51:
         48:9e:5c:c6:5d:9d:80:df:c3:40:30:91:9a:32:40:7d:bf:94:
         ea:ed:ef:a3:29:70:0b:ee:66:35:95:87:15:ce:ed:94:ba:c0:
         40:17:02:aa:05:eb:98:47:a0:1b:f4:a5:05:98:c5:0c:7f:4a:
         bc:48:5d:ea:96:97:35:a7:ba:15:3f:6a:8a:bd:25:d5:4b:88:
         58:a9:3d:62:78:f7:4d:07:83:15:11:d1:44:89:8e:86:0c:b1:
         e6:50:c4:6e:3f:ee:4b:3b:77:fd:40:3c:0f:b4:f1:16:62:f9:
         44:26:32:be:63:d0:dc:d0:1f:1f:9d:1c:7b:40:33:a3:fe:e1:
         38:57:b4:d0:54:62:e7:cb:0d:b7:97:99:ef:47:01:1e:93:84:
         ca:98:0e:76:6e:ab:57:92:bd:82:9b:b3:d7:e7:6f:5a:e8:01:
         44:89:94:85:fc:d3:e8:e5:6c:92:36:f2:1a:65:14:8d:60:88:
         d9:9d:4a:cb:9b:8f:11:9c:10:32:6d:30:9e:3f:16:a1:84:c7:
         b2:88:8a:74:ab:4c:92:61:c0:dc:d2:0a:b0:07:23:6c:a4:eb:
         dd:6a:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:15 2026 by rpki-client