Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File:                     VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier:          2B0o+7kLoUjvgv0wz+5UJjCP513OBwikhIBQrg08koA=
Subject key identifier:   5F:1E:F5:0E:2E:B1:EF:E3:41:15:35:C9:3D:34:06:71:4C:23:5D:2B
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer:       /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial:       019E1CB45A504BE62DAFEAF1B5C0E4CE6745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number:          011D
Signing time:             Tue 12 May 2026 15:00:42 +0000
Manifest this update:     Tue 12 May 2026 15:00:42 +0000
Manifest next update:     Wed 13 May 2026 15:00:42 +0000
Files and hashes:         1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: XMzZKvQFv2NeFL1bH0Vb9TkQ2GKAv/mNHLyL+6tYLiY=)
                          2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:5a:50:4b:e6:2d:af:ea:f1:b5:c0:e4:ce:67:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
        Validity
            Not Before: May 12 15:00:42 2026 GMT
            Not After : May 13 15:00:42 2026 GMT
        Subject: CN=5f1ef50e2eb1efe3411535c93d3406714c235d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:b6:5d:ff:07:fd:9e:50:38:02:48:64:56:
                    a8:4a:aa:c1:d7:0b:99:3d:04:86:94:4f:d8:6a:90:
                    a6:78:29:88:05:53:6a:ca:c6:50:ad:be:8b:0d:08:
                    6a:9f:1e:08:ba:69:c0:b2:b1:42:83:9d:a8:4d:6b:
                    ec:c1:bb:80:d6:24:ba:71:97:3f:a2:7a:a6:de:06:
                    89:c8:6e:8c:2d:88:93:8f:5a:2d:ed:ea:6f:98:ae:
                    cc:10:4b:50:18:ea:4c:5f:02:a7:82:07:de:5b:b2:
                    fe:6e:28:28:a8:05:da:55:4c:1c:8d:2c:2c:25:b4:
                    a4:89:3b:84:31:f1:c1:fc:2a:38:18:61:b5:4c:55:
                    dc:ef:8b:9e:79:5d:35:8b:fc:0a:31:5c:56:50:d7:
                    c9:fe:50:d3:67:22:bd:b9:4b:dc:a3:e7:9f:1b:df:
                    48:55:e7:c6:ae:90:12:87:32:0c:9a:65:96:2d:02:
                    84:b3:62:f9:cb:9e:f8:48:9b:4a:d9:35:12:02:9e:
                    a5:2b:29:ce:66:5a:72:d7:d4:2c:ef:39:ef:1d:75:
                    c4:40:c7:88:6b:b0:f1:b8:44:6b:ea:8f:25:50:55:
                    5d:a3:c7:c0:e6:5e:2e:8e:54:0c:f3:cf:6e:67:1c:
                    91:56:bd:49:d7:80:ac:ba:b1:85:ac:be:a6:57:ba:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:F5:0E:2E:B1:EF:E3:41:15:35:C9:3D:34:06:71:4C:23:5D:2B
            X509v3 Authority Key Identifier:
                keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:45:c3:54:85:87:f1:50:a1:92:da:0d:20:25:80:c5:11:1c:
         1f:51:b0:d7:53:a8:d0:73:6e:b6:51:a5:d9:dd:49:6a:be:c0:
         e1:dd:62:21:18:31:ac:0b:8c:1a:f0:d9:9c:32:a8:a0:9b:e7:
         75:4d:1f:44:d8:68:dd:c6:6d:0d:da:e7:85:1c:ec:05:5d:e7:
         4d:5c:59:c5:3e:17:d1:e3:44:4f:0c:39:04:64:7a:3e:86:54:
         9a:21:47:f3:46:9b:c7:8a:ab:22:0e:78:b3:7a:5d:1a:ab:2a:
         a1:28:be:35:a8:85:82:b2:e6:5a:91:5b:d2:39:1f:d0:6c:f8:
         59:66:8b:8f:9b:e0:30:40:b6:76:55:4b:6d:1a:61:c0:61:ad:
         2e:d0:7c:d1:0b:5c:6d:bb:39:bb:01:6f:93:81:3e:34:79:89:
         86:15:03:f2:ff:45:ba:66:b7:2b:94:02:0c:a4:fd:9d:fd:c5:
         83:e6:92:00:ea:f3:ce:6d:73:08:a4:b8:13:50:83:cf:63:99:
         6b:27:81:57:04:5a:18:2c:1f:54:6a:31:cb:24:cc:ed:fe:3d:
         4f:30:d3:73:17:76:ac:5f:8c:5f:95:08:0d:3a:ff:83:e8:08:
         ca:42:1b:42:2e:2f:f2:6c:31:9a:88:cd:3d:c8:cb:b6:20:5d:
         49:71:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:05 2026 by rpki-client