Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          u3QcqtVc5bpkrCK78W4gTZkz1pbGbLrkAuUr7G32nEo=
Subject key identifier:   6D:B7:F0:42:56:6F:3D:C5:47:AF:0A:F1:26:53:30:70:26:FB:47:F6
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01A0ED0B00C85EB272ECA216DFF67CAF5EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          1710
Signing time:             Tue 29 Sep 2026 12:01:56 +0000
Manifest this update:     Tue 29 Sep 2026 12:01:56 +0000
Manifest next update:     Wed 30 Sep 2026 12:01:56 +0000
Files and hashes:         1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
                          2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: GfbXYn/jVIlKTGUEdJFQp4KEeICgubBzIZYp9G+nKXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:0b:00:c8:5e:b2:72:ec:a2:16:df:f6:7c:af:5e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Sep 29 12:01:56 2026 GMT
            Not After : Sep 30 12:01:56 2026 GMT
        Subject: CN=6db7f042566f3dc547af0af12653307026fb47f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:00:16:c7:bb:d1:65:a3:fd:38:81:32:bb:
                    9a:3d:50:a5:67:18:cb:a4:78:11:7a:c5:90:15:55:
                    2a:a8:eb:2f:b5:41:7a:7c:0e:52:82:ac:ff:53:86:
                    4a:de:97:0c:54:46:15:4d:87:f1:f6:04:65:92:5e:
                    7e:34:92:1f:71:7d:b1:b2:76:95:16:78:6a:1a:c8:
                    e0:c3:c8:5d:f2:9a:05:2f:21:b9:f1:55:11:35:54:
                    7b:bf:04:43:91:52:87:79:2d:f7:23:df:de:f2:d0:
                    fa:e7:fa:75:37:6e:86:7e:ef:93:28:6b:94:f1:72:
                    de:cd:46:73:43:5b:cd:af:24:6d:06:1a:7d:d5:4e:
                    a8:4b:17:eb:d4:26:84:fd:78:72:82:cc:02:4b:12:
                    5d:32:c3:53:6a:ba:d4:3d:b9:0c:71:9c:4d:26:b1:
                    e6:76:b9:f3:8f:90:26:48:e8:69:42:22:13:08:0b:
                    ab:31:78:6e:07:b1:e6:51:2e:d6:29:0b:83:f5:d9:
                    a0:0e:1c:b2:03:4e:36:29:d4:70:77:24:2a:8c:d2:
                    2f:8c:4c:2a:24:7b:1d:4d:ec:06:1b:46:80:11:61:
                    55:c3:e9:71:06:15:ff:0f:f0:0a:69:38:6a:8c:eb:
                    2a:ba:0e:0a:0c:35:89:90:9e:7a:d2:59:78:8b:da:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:F0:42:56:6F:3D:C5:47:AF:0A:F1:26:53:30:70:26:FB:47:F6
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f4:02:22:f5:f3:b5:b2:52:c9:76:27:db:49:57:81:63:81:
         cf:91:79:55:05:3f:58:94:15:b8:48:5d:4c:1f:17:cf:5f:4e:
         ef:46:2a:0f:85:8f:56:78:2a:ff:6c:10:1c:82:c4:b8:8d:49:
         a1:8e:ba:1e:4e:1b:8f:b3:3c:90:be:15:f4:81:50:fb:f8:7d:
         9b:2f:3e:d4:51:99:c2:47:95:c0:fb:99:5c:0c:58:c0:5e:d3:
         19:9f:99:9a:ec:37:3e:bc:5c:ad:e7:58:25:06:e7:43:5c:ee:
         91:60:c4:b6:9b:4c:8a:5b:03:47:e8:b5:45:c9:48:17:ff:02:
         d0:c7:62:c7:f6:8b:7c:97:0a:f9:07:61:7a:65:9b:03:b5:b8:
         b7:3c:f6:99:8d:1b:70:83:4e:0c:ac:1a:17:54:30:a6:a2:5a:
         b1:bc:eb:a9:ce:cb:8b:85:2c:a5:5b:d6:3a:d3:13:84:69:5e:
         f1:46:06:bc:84:6c:87:88:32:cb:6f:00:50:73:2a:96:6c:df:
         22:2e:c4:b2:2c:56:f0:e2:08:ca:ae:57:8e:ab:fa:6b:fc:33:
         fe:c4:f9:33:ef:97:d5:02:a1:a3:e2:71:fc:8e:d1:99:d7:d9:
         00:a6:09:a5:db:9a:52:48:0e:8a:ec:e3:af:6f:8f:b6:81:05:
         b0:e8:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:31:37 2026 by rpki-client