Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          m3Nuzo6BFwhNzG9Jyb2utIgEiu7Q6nNdFEkmjJmNmls=
Subject key identifier:   41:0F:44:71:EF:25:C7:39:53:AB:8A:CE:13:59:C5:B0:92:61:AE:77
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       019E1DFE9DBE23D15B01E02C3A0F2A73067C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          0627
Signing time:             Tue 12 May 2026 21:01:26 +0000
Manifest this update:     Tue 12 May 2026 21:01:26 +0000
Manifest next update:     Wed 13 May 2026 21:01:26 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: E1IwgD1WRBWcNz3R/b0Xhg60qSd+QatLHUs5F2jbZvs=)
                          2: e-VizZSv37fu0G6N5sAYEMxdQEA.roa (hash: U52oLGF2TV8xzdfr5dhrBJaNhR6aX14GLZTv3N0JAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:9d:be:23:d1:5b:01:e0:2c:3a:0f:2a:73:06:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: May 12 21:01:26 2026 GMT
            Not After : May 13 21:01:26 2026 GMT
        Subject: CN=410f4471ef25c73953ab8ace1359c5b09261ae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:e1:2b:11:a4:ac:a5:09:2e:68:1f:20:8e:
                    5f:10:b5:92:26:d8:1d:cf:4f:2c:4c:e1:e5:6a:8e:
                    30:45:02:16:7f:fd:45:a6:2e:45:da:1c:7a:6b:43:
                    97:8c:82:92:3e:90:e4:28:d7:9a:ef:b7:78:d8:5b:
                    60:f6:4d:f2:e0:49:d8:68:58:5f:48:74:11:fb:70:
                    9f:b7:10:2a:3f:55:a9:19:b2:1c:bc:a0:2a:fd:ae:
                    46:a3:53:02:b9:32:d1:56:76:44:2d:ea:16:60:16:
                    df:17:8f:2b:ee:1d:39:57:b8:0c:56:1b:e7:ee:de:
                    6e:39:c9:61:d2:ea:e1:1e:cd:46:05:35:bc:b7:c1:
                    e6:df:90:24:8b:38:52:0f:75:3a:28:b2:a5:1b:5a:
                    0c:f7:ee:58:e1:34:52:e2:66:1d:f3:24:dc:e6:40:
                    e9:0a:28:18:e6:4d:53:a0:f7:08:9f:fd:ab:13:40:
                    3d:2f:19:e0:28:d5:74:63:ed:58:d1:5c:09:44:25:
                    ce:da:c3:ee:85:12:5d:4d:15:33:71:25:14:e2:55:
                    fc:60:fa:9c:e7:3d:b2:6f:9e:d8:18:5e:4a:c4:e7:
                    cb:4e:0d:f3:96:cd:3d:cd:37:8b:9e:2a:fc:a7:79:
                    eb:81:59:bc:08:5c:65:64:58:de:70:f8:b7:51:d1:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0F:44:71:EF:25:C7:39:53:AB:8A:CE:13:59:C5:B0:92:61:AE:77
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:00:79:4e:5d:3b:b3:95:22:ac:15:86:a7:82:bd:24:c4:
         63:60:c9:d8:2d:97:10:c2:ea:1b:d1:71:cc:87:a0:c4:46:25:
         da:7b:bb:85:82:80:cf:43:be:d5:cd:b1:13:c3:fe:92:45:b2:
         9b:de:60:28:1c:eb:0a:cc:87:4a:df:8d:0c:c0:89:f9:ff:8f:
         10:16:ec:3e:6a:87:a1:bc:7c:1c:d3:e0:f2:4a:65:05:04:10:
         f9:c3:09:26:c0:4d:3b:75:ee:e4:fc:da:96:46:a5:94:cd:87:
         36:3f:a0:04:19:19:4a:e3:24:12:95:cb:2e:df:90:f0:74:52:
         4c:80:ba:35:6c:43:76:80:78:e4:e1:db:ae:9e:66:e5:0f:38:
         38:48:f0:3a:5a:6b:59:50:2c:24:74:1e:9e:85:8b:9c:2b:a9:
         4f:fd:2b:06:65:fe:34:43:99:a4:ef:14:51:92:0e:75:ac:49:
         be:a1:8e:80:ad:d4:5e:ac:17:a6:fd:1b:ff:ce:53:ee:e5:e1:
         9c:a3:a2:44:e0:c8:41:58:ca:f7:b1:cc:26:7f:dc:a5:6f:42:
         f1:61:77:7d:ae:43:8c:35:66:61:7d:f4:09:d6:d7:f6:0b:7e:
         79:56:09:12:91:66:fd:4f:c1:7e:28:a6:53:95:96:64:ae:00:
         c2:ce:d1:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/p2+I9FbAeAsOg8qcwZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4
ZTBmNmYwHhcNMjYwNTEyMjEwMTI2WhcNMjYwNTEzMjEwMTI2WjAzMTEwLwYDVQQD
Eyg0MTBmNDQ3MWVmMjVjNzM5NTNhYjhhY2UxMzU5YzViMDkyNjFhZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBrhKxGkrKUJLmgfII5fELWSJtgd
z08sTOHlao4wRQIWf/1Fpi5F2hx6a0OXjIKSPpDkKNea77d42Ftg9k3y4EnYaFhf
SHQR+3CftxAqP1WpGbIcvKAq/a5Go1MCuTLRVnZELeoWYBbfF48r7h05V7gMVhvn
7t5uOclh0urhHs1GBTW8t8Hm35AkizhSD3U6KLKlG1oM9+5Y4TRS4mYd8yTc5kDp
CigY5k1ToPcIn/2rE0A9LxngKNV0Y+1Y0VwJRCXO2sPuhRJdTRUzcSUU4lX8YPqc
5z2yb57YGF5KxOfLTg3zls09zTeLnir8p3nrgVm8CFxlZFjecPi3UdElTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEPRHHvJcc5U6uKzhNZxbCSYa53MB8GA1UdIwQY
MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt
ZTBjMmJkZmQ2NTg1LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1
LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICoAeU5d
O7OVIqwVhqeCvSTEY2DJ2C2XEMLqG9FxzIegxEYl2nu7hYKAz0O+1c2xE8P+kkWy
m95gKBzrCsyHSt+NDMCJ+f+PEBbsPmqHobx8HNPg8kplBQQQ+cMJJsBNO3Xu5Pza
lkallM2HNj+gBBkZSuMkEpXLLt+Q8HRSTIC6NWxDdoB45OHbrp5m5Q84OEjwOlpr
WVAsJHQenoWLnCupT/0rBmX+NEOZpO8UUZIOdaxJvqGOgK3UXqwXpv0b/85T7uXh
nKOiRODIQVjK97HMJn/cpW9C8WF3fa5DjDVmYX30CdbX9gt+eVYJEpFm/U/Bfiim
U5WWZK4Aws7RFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:11:45 2026 by rpki-client