Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File:                     vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier:          hBMyDh8XzdjU35W4MLtYd+szERKu2G+wz89BIq25Thg=
Subject key identifier:   73:5B:0C:A4:DD:3C:7A:0B:E5:0C:2A:34:3F:8B:9E:DA:1C:82:6B:ED
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer:       /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial:       019D27721E44F0EB2049BBA74C98E24328A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number:          17C7
Signing time:             Thu 26 Mar 2026 00:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:23 +0000
Files and hashes:         1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: VhPiTCITgvRF0EYxTkw5yZzT3RVlDTsjvFKkb5GAy5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:1e:44:f0:eb:20:49:bb:a7:4c:98:e2:43:28:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
        Validity
            Not Before: Mar 26 00:01:23 2026 GMT
            Not After : Mar 27 00:01:23 2026 GMT
        Subject: CN=735b0ca4dd3c7a0be50c2a343f8b9eda1c826bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:c3:2e:5b:ba:6d:8d:1a:c1:de:7f:47:4f:
                    c4:54:50:38:91:90:2b:b8:ca:8a:fe:4f:67:9c:d1:
                    77:1a:c8:85:10:93:ba:2b:be:9d:9e:1a:d1:d4:a5:
                    87:fb:83:da:3d:d2:e0:95:b9:a5:a8:34:b2:27:2d:
                    36:07:d0:16:6f:56:8d:1d:09:73:a6:44:1f:19:7c:
                    81:15:e2:2f:eb:33:6c:bb:01:6f:91:c8:74:f6:83:
                    3d:90:b6:c7:3f:15:99:84:f0:e3:b8:78:9d:7a:94:
                    3a:4d:49:c9:65:02:40:0f:57:b9:87:a3:d2:72:5c:
                    5b:2e:b5:21:9b:5c:97:f5:fc:58:d8:2c:5f:05:23:
                    9b:06:dd:9f:4d:c4:69:a4:62:dc:ca:f6:ef:72:22:
                    37:f9:a2:41:5c:53:e1:43:80:81:ac:a9:43:40:30:
                    24:5e:fd:5b:4a:b7:c2:d7:2c:67:dc:74:fe:ba:3e:
                    d6:2e:de:4f:e6:c4:12:42:42:e4:26:6b:a4:02:b7:
                    3b:fa:b6:43:a5:69:4f:63:58:1d:60:50:ee:a9:60:
                    f2:bd:76:23:66:3d:74:79:84:f6:f3:44:74:44:ab:
                    ac:f9:11:79:5b:3f:7b:a0:7f:1d:ee:80:97:cf:9d:
                    83:fe:d6:08:80:06:46:d2:49:36:a0:4b:9b:8c:56:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:0C:A4:DD:3C:7A:0B:E5:0C:2A:34:3F:8B:9E:DA:1C:82:6B:ED
            X509v3 Authority Key Identifier:
                keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:19:cd:f6:aa:6f:09:bf:a7:a7:bd:2d:e8:4d:41:a7:dd:
         14:b5:e7:cf:92:88:41:88:4a:2d:5b:9a:02:49:ca:e5:98:7e:
         a6:31:d4:7c:50:e6:88:46:15:3f:54:da:43:bf:a5:5d:00:5a:
         38:84:0c:f7:d8:4f:99:19:a2:e4:fc:ca:bb:18:c8:39:9a:d3:
         3d:16:58:14:16:57:42:9f:13:b1:4c:c5:ca:5d:92:80:46:dd:
         c6:7d:bd:e7:3e:3c:fb:8c:a8:a1:6a:d4:60:68:e4:2b:27:58:
         c2:70:a8:50:b5:11:1a:f6:40:17:1d:d4:34:68:29:80:a9:86:
         cc:68:9a:3f:c3:08:00:52:c8:4a:e5:aa:28:73:7f:8d:60:57:
         29:c6:c9:a8:a4:ac:cb:e8:21:c0:9a:52:68:11:74:6c:7f:bd:
         47:05:27:e6:70:10:5b:1c:df:63:9b:20:1d:7e:ec:bc:86:10:
         a8:71:39:4a:19:8b:b2:5c:e1:59:a5:49:4f:39:09:20:84:c2:
         20:a2:93:84:96:32:9d:53:26:32:9e:bd:6c:f1:11:a3:50:d2:
         33:01:b5:bf:9f:4b:f5:2b:79:f2:49:8f:3d:49:07:e9:e3:b3:
         d5:d3:de:32:09:2b:3a:bb:02:f3:cc:51:e0:73:27:ff:b7:8b:
         07:67:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:01:00 2026 by rpki-client