Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          1Up4ksNUnmzTDcgC5GuyN58bQ9bYa1kUE7/QaZGsX+g=
Subject key identifier:   6F:5F:6E:CB:D7:82:9C:6B:BA:9E:66:70:2F:34:2B:77:12:B6:0F:CB
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       019D2B4E0E1F7FD31774D291004519D65036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          151E
Signing time:             Thu 26 Mar 2026 18:00:28 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:28 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:28 +0000
Files and hashes:         1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
                          2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: FxzYIwH10yuIA08Z2dqEIbwOFPwHKw0EsBym6IHs5U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:0e:1f:7f:d3:17:74:d2:91:00:45:19:d6:50:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Mar 26 18:00:28 2026 GMT
            Not After : Mar 27 18:00:28 2026 GMT
        Subject: CN=6f5f6ecbd7829c6bba9e66702f342b7712b60fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:b8:30:37:89:2a:bf:03:1f:aa:fc:3b:a7:
                    e0:34:3c:da:dd:45:a9:6f:e6:f1:0e:68:27:51:41:
                    7f:db:2e:ca:4c:0c:8b:1b:e1:d0:10:7b:f0:40:c4:
                    89:cd:00:e5:e3:37:c0:f4:89:73:42:e6:b3:e9:b9:
                    92:48:08:95:e0:67:43:3a:00:8d:ff:f2:4f:9b:ee:
                    8a:85:c8:3b:a3:f4:5b:dd:d8:11:66:f1:b2:b6:46:
                    20:f2:db:f4:af:8c:48:fe:d4:83:3b:27:5b:a4:5e:
                    e2:eb:32:a4:13:4b:62:c0:bf:d9:ca:59:bc:7f:9f:
                    ca:94:d1:ae:eb:00:1f:34:2a:0b:13:aa:aa:23:38:
                    66:dc:5f:bf:8c:0d:4b:7d:a5:3c:3d:1c:03:3a:54:
                    08:55:81:c1:7b:07:87:dd:e9:02:8f:f4:58:8d:17:
                    8c:a2:ef:41:99:5a:98:73:42:29:14:c0:17:c5:99:
                    57:c7:43:8a:63:15:01:d9:95:c2:a2:35:44:a5:45:
                    f0:7c:fb:06:72:79:6e:a3:9f:31:ba:90:14:72:46:
                    d1:3e:22:fa:db:0f:a9:51:bd:51:7a:be:21:ae:58:
                    6c:3b:a2:25:a4:e1:f8:de:03:e1:60:f3:7f:1d:b3:
                    46:47:61:91:dd:89:4e:20:69:e1:68:d5:ff:57:38:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:6E:CB:D7:82:9C:6B:BA:9E:66:70:2F:34:2B:77:12:B6:0F:CB
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:28:3d:13:17:42:83:6e:6b:99:af:c7:64:ae:a6:d3:9d:
         ef:bb:01:10:62:f9:e7:7f:90:9b:67:30:ad:d4:8b:6d:6b:68:
         91:e0:bd:aa:57:df:2c:69:67:c7:6e:4f:58:f0:9b:87:c8:a5:
         b8:06:49:79:36:68:5d:86:2f:86:6c:20:f7:23:44:50:99:04:
         86:eb:e5:d0:de:5e:3c:7d:97:43:f2:cd:e4:42:b8:4f:3c:0b:
         6a:01:c1:7d:c1:bd:0f:5f:83:e4:12:fd:4f:58:df:d0:e1:58:
         83:d3:6f:07:d4:56:ea:ca:d0:d7:02:97:30:60:55:4e:f7:e7:
         df:6b:a0:a8:30:57:0d:28:89:8d:92:96:1c:3c:72:a4:d2:56:
         3b:a9:ee:f3:c2:f7:01:38:c4:f9:39:44:85:6d:ed:c2:1f:f9:
         3e:05:5f:1e:d2:e2:7a:e8:fc:1d:cd:d7:2e:c0:68:3c:2d:dc:
         20:c3:bf:57:87:d3:ab:81:34:72:ce:b8:f8:6e:6f:e9:e1:98:
         17:d3:02:9e:e2:09:fa:a5:6f:08:a0:d9:b9:53:60:51:11:9a:
         1a:c8:d5:e0:a5:8e:60:58:a8:4e:4d:8d:77:eb:f0:24:1c:a2:
         5a:6e:6f:1b:76:b5:7d:e6:b8:57:a0:e7:70:e3:e2:37:42:f9:
         ee:b3:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:27 2026 by rpki-client