Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          C7J9JaC7FFdBZaGhus2apjzle1imsdtGYmrBL8DlVnU=
Subject key identifier:   82:5A:62:C6:F7:8E:7F:BA:36:FA:42:D7:53:6A:6B:CB:4C:94:6D:90
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       019D2884997EB755AF586D41B9D8BBC5252A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: 4V3yiUlfeXaIqZDlRmdJcIdoHMo.roa (hash: F74mnACNWLk6jkDSnPWeJjY0n0VuURivlO3KGnXCfVE=)
                          2: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: EyZoE0aG7ak2uqJD9MjdJGM8zpKKZrm3v1zFfb4wsG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:99:7e:b7:55:af:58:6d:41:b9:d8:bb:c5:25:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=825a62c6f78e7fba36fa42d7536a6bcb4c946d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:3b:d8:f8:d9:3c:d2:3f:ef:b8:e3:89:a2:
                    cb:83:d9:76:2d:76:6d:33:e7:6b:95:73:21:7f:b7:
                    07:ff:95:f1:09:5a:e9:bc:ab:95:a5:01:90:22:af:
                    f5:84:0b:e2:2f:ff:8d:ca:ff:3c:a0:30:e2:69:87:
                    45:c9:3f:31:6b:e8:54:30:7e:6b:8c:bd:dd:d1:ec:
                    36:31:c0:da:aa:32:a7:54:e5:04:32:b5:ce:84:c0:
                    63:05:57:35:2b:47:d0:bb:64:f4:f6:9f:4e:c6:c4:
                    3e:ab:e8:b9:2c:5c:fa:f4:c1:08:74:11:45:f1:a6:
                    e7:39:9a:cd:9b:ee:9c:3d:77:e9:93:1f:4c:6b:b8:
                    86:45:ab:c6:70:e7:86:87:94:31:9d:ea:fd:37:a8:
                    85:ad:8d:38:31:c8:96:37:70:8c:48:88:c4:99:f8:
                    f1:a4:a3:8c:83:cd:31:5c:51:e0:7e:68:59:41:55:
                    19:cf:ab:43:d4:85:95:63:20:57:f2:22:d2:8c:e7:
                    bf:ff:25:d9:35:b1:a4:b4:3c:d9:fc:0e:75:94:13:
                    43:e6:d1:04:5f:92:ed:05:fc:df:7f:e2:5a:cb:82:
                    73:fa:da:22:cf:ba:bd:8e:e9:fd:62:f4:64:c1:a5:
                    b4:ff:f7:8f:a3:7b:36:58:f6:fd:a9:69:bf:29:fc:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:62:C6:F7:8E:7F:BA:36:FA:42:D7:53:6A:6B:CB:4C:94:6D:90
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c4:12:88:24:ad:a9:60:71:ac:2d:29:f8:52:68:50:16:63:
         b4:34:d5:89:6a:81:6d:f4:36:78:90:db:bd:3e:a4:41:a0:aa:
         ad:93:f2:53:16:fb:80:07:0b:5b:fe:84:86:e0:ec:61:f5:f0:
         24:81:ac:d2:14:6c:d3:ae:0d:0e:3d:d4:06:93:57:9b:f2:1f:
         5c:08:5d:0f:bc:c4:d4:cf:d9:f2:ec:68:d9:26:1a:5c:cd:df:
         e1:b1:ff:e4:6c:08:98:a5:a7:02:d6:33:85:d3:26:bb:03:a9:
         c1:01:fc:ab:1c:e4:88:c1:7f:c3:34:7e:b5:69:5f:dd:97:e4:
         39:03:61:ee:65:dd:a5:d8:04:c8:8c:d8:4f:0b:bb:f4:7c:aa:
         f7:3c:13:dd:7e:f4:2b:6a:26:3b:08:fd:46:1d:c5:a2:85:69:
         4c:84:2d:44:7d:1c:25:36:e5:dd:e0:4b:be:73:65:ff:87:47:
         41:51:ab:07:ac:ec:80:0f:45:ca:25:de:84:4e:7d:96:50:8d:
         f4:e2:97:9e:7e:b7:52:64:e5:c0:80:84:62:46:88:8c:3e:73:
         8e:aa:a4:22:99:06:0b:75:15:74:14:0d:f0:0c:f8:0b:c8:a6:
         ea:3b:64:d6:8c:76:41:a8:d3:c3:25:45:7e:23:8f:dd:a8:e3:
         77:5d:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:29 2026 by rpki-client