Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File:                     VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier:          vrpas4Nin2qcbIqRDgJSZk2pNVGstbjKV7AaNZyKX40=
Subject key identifier:   AD:85:27:23:31:62:9E:A1:AE:D8:CB:FF:99:58:37:68:3D:3B:98:4E
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer:       /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial:       019D2AA979A5786C85F24EAB3901DEDD3007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number:          050B
Signing time:             Thu 26 Mar 2026 15:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:42 +0000
Files and hashes:         1: IpSnJJcRk0rVaIinr9MzfOMamE4.roa (hash: sJC1dVz6+49l7Xv9i824Gl0XhIuWekON6If1soCkGf8=)
                          2: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: uHzYejKLJ0R/f/F3oAXhT89LHzOusvDXdDEm3KEew1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:79:a5:78:6c:85:f2:4e:ab:39:01:de:dd:30:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
        Validity
            Not Before: Mar 26 15:00:42 2026 GMT
            Not After : Mar 27 15:00:42 2026 GMT
        Subject: CN=ad85272331629ea1aed8cbff995837683d3b984e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:0f:29:f6:4c:d4:0b:aa:a2:a1:8b:bc:3d:
                    a5:02:db:78:61:c7:67:dc:ca:1b:f7:80:11:41:4d:
                    2b:61:b4:73:f2:ee:a9:c1:a5:d4:fc:45:1d:11:7f:
                    f8:b6:92:a0:1b:f5:2d:fb:9c:9e:5b:65:3f:e0:88:
                    a9:ef:6e:47:23:61:38:38:4b:94:3c:a0:5f:16:cb:
                    e0:0f:1d:1a:60:6b:a0:e4:13:16:06:36:d6:df:16:
                    66:32:03:15:1a:73:fd:e6:00:21:e3:7f:37:f8:4d:
                    25:cc:c9:70:60:9a:97:23:32:e5:4e:dc:07:ea:c2:
                    c3:1e:93:82:6f:58:4f:09:73:61:8d:b5:d6:90:6a:
                    d2:df:b0:08:0e:05:d6:60:9e:0a:35:df:11:e3:30:
                    40:b2:30:93:bd:4c:31:c7:74:89:07:79:3d:a5:02:
                    55:14:77:57:c3:c1:50:17:fa:57:7f:dd:7c:4c:39:
                    e3:99:76:98:98:ec:fd:dd:22:d0:ce:7b:bf:67:c0:
                    49:c9:0f:bf:b2:dc:39:96:c4:7d:e2:3a:9b:9a:52:
                    9f:8d:69:35:e3:29:9c:a1:f5:4b:3e:bf:b9:67:74:
                    ff:58:dd:d2:7b:86:7e:9b:6f:14:dc:1d:7d:f1:e1:
                    a5:a1:13:ee:66:30:05:af:88:b6:31:af:47:00:99:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:27:23:31:62:9E:A1:AE:D8:CB:FF:99:58:37:68:3D:3B:98:4E
            X509v3 Authority Key Identifier:
                keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:4e:03:88:e1:f9:84:02:9d:ae:71:71:6c:95:ea:f6:15:
         3e:3d:6d:c4:d4:d3:08:52:77:42:00:9e:1b:b0:77:2a:8d:c6:
         2f:4c:1c:6f:d2:66:31:6d:1a:50:30:5b:d0:20:89:e7:3a:03:
         98:b2:cb:34:54:a5:65:14:58:16:a8:7c:59:53:b8:22:4e:40:
         17:79:69:73:ff:e6:fa:a6:08:d5:78:1c:b8:f4:b7:1c:6b:f8:
         73:b1:f5:c9:2c:e8:e9:94:82:87:6d:09:de:e5:6f:30:66:ac:
         70:33:dc:52:ea:f8:3b:02:fc:eb:12:64:c4:4b:14:98:cd:63:
         c7:cf:3d:4f:66:1e:ad:2f:8e:57:14:18:94:c8:02:19:09:05:
         2e:74:00:60:71:d5:ab:d5:5a:da:28:f0:fd:5e:e1:3c:9a:f9:
         a2:21:cc:7e:b7:bf:8f:17:89:39:64:28:ae:6c:04:4c:a8:6e:
         d1:a1:3b:17:58:72:65:99:42:7d:5f:43:7c:52:a5:a3:d3:46:
         15:9c:34:b1:9a:17:b3:23:79:fc:7a:d7:e0:e2:25:8f:3e:40:
         d9:a8:b6:83:d3:56:06:e6:83:a0:82:7c:3a:79:28:e7:4c:36:
         8f:04:9f:c4:28:8f:54:81:ab:7d:45:5a:0d:cf:ad:78:e7:c5:
         07:f8:06:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqXmleGyF8k6rOQHe3TAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjYwMzI2MTUwMDQyWhcNMjYwMzI3MTUwMDQyWjAzMTEwLwYDVQQD
EyhhZDg1MjcyMzMxNjI5ZWExYWVkOGNiZmY5OTU4Mzc2ODNkM2I5ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFQPKfZM1AuqoqGLvD2lAtt4Ycdn
3Mob94ARQU0rYbRz8u6pwaXU/EUdEX/4tpKgG/Ut+5yeW2U/4Iip725HI2E4OEuU
PKBfFsvgDx0aYGug5BMWBjbW3xZmMgMVGnP95gAh4383+E0lzMlwYJqXIzLlTtwH
6sLDHpOCb1hPCXNhjbXWkGrS37AIDgXWYJ4KNd8R4zBAsjCTvUwxx3SJB3k9pQJV
FHdXw8FQF/pXf918TDnjmXaYmOz93SLQznu/Z8BJyQ+/stw5lsR94jqbmlKfjWk1
4ymcofVLPr+5Z3T/WN3Se4Z+m28U3B198eGloRPuZjAFr4i2Ma9HAJlaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2FJyMxYp6hrtjL/5lYN2g9O5hOMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUtOA4jh
+YQCna5xcWyV6vYVPj1txNTTCFJ3QgCeG7B3Ko3GL0wcb9JmMW0aUDBb0CCJ5zoD
mLLLNFSlZRRYFqh8WVO4Ik5AF3lpc//m+qYI1XgcuPS3HGv4c7H1ySzo6ZSCh20J
3uVvMGascDPcUur4OwL86xJkxEsUmM1jx889T2YerS+OVxQYlMgCGQkFLnQAYHHV
q9Va2ijw/V7hPJr5oiHMfre/jxeJOWQormwETKhu0aE7F1hyZZlCfV9DfFKlo9NG
FZw0sZoXsyN5/HrX4OIljz5A2ai2g9NWBuaDoIJ8Onko50w2jwSfxCiPVIGrfUVa
Dc+teOfFB/gGiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:42 2026 by rpki-client