Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File:                     VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier:          DG0IzvUFH+FsDPlFtoi3T59duhqw6qACZY3qCIzWCCU=
Subject key identifier:   57:99:BA:11:37:E1:D6:E0:C9:AA:89:C8:3B:A9:D7:63:1B:8C:56:6F
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer:       /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial:       019DFCBBD60D0CDCD0CB1AAFDECA444AA7CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number:          072D
Signing time:             Wed 06 May 2026 10:01:01 +0000
Manifest this update:     Wed 06 May 2026 10:01:01 +0000
Manifest next update:     Thu 07 May 2026 10:01:01 +0000
Files and hashes:         1: LbD094gia2V-CM9R1s_eaxUYrLA.roa (hash: qpCuUSL2x3JZyrYkw1LLZ2ApxVtSu8qTNSF8qZkIL9c=)
                          2: UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa (hash: UfnTgECqiB69+vQOPwrym36fQCF1IKiWDwU9p+yi/X4=)
                          3: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: SVrwbQQu0+nPJ+ELNcpowkD4LZoUewi7pLNLF3vCPlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fc:bb:d6:0d:0c:dc:d0:cb:1a:af:de:ca:44:4a:a7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
        Validity
            Not Before: May  6 10:01:01 2026 GMT
            Not After : May  7 10:01:01 2026 GMT
        Subject: CN=5799ba1137e1d6e0c9aa89c83ba9d7631b8c566f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:85:47:6a:99:fa:a7:b1:75:d1:03:e0:1f:
                    7f:e3:93:7d:6f:9d:2c:cd:18:a8:26:9f:de:4f:7e:
                    ad:2a:1d:1f:b0:e6:55:78:30:84:34:14:f7:aa:dd:
                    42:49:df:48:99:b0:79:17:87:b9:92:fc:dd:d5:8a:
                    cd:d4:5e:5b:20:3f:f0:4a:79:b8:e7:10:62:0d:83:
                    07:07:9c:4f:b5:1e:fb:69:3a:32:d5:d7:56:97:bb:
                    f6:cd:d2:ab:9d:02:56:89:d6:c4:55:e5:08:9d:c3:
                    04:05:89:93:2d:ea:c6:fc:b6:c3:90:26:91:73:8f:
                    b4:79:d1:c1:9d:2d:a1:7f:26:94:02:51:cb:1a:5e:
                    8c:cf:42:5b:d8:ba:24:c7:a7:6a:65:3d:4e:3b:bf:
                    ba:bc:10:a4:93:1c:26:f0:2a:6f:29:3f:e3:a1:cd:
                    f5:4a:c9:0a:e5:ab:d1:01:09:23:54:57:10:21:6b:
                    6a:ee:4b:2d:4f:ae:e5:5d:76:6d:cd:1b:69:d7:88:
                    f1:28:ed:db:00:39:bf:c8:26:a0:c6:c5:53:19:59:
                    5a:39:ca:c2:54:fb:1c:68:9b:ff:34:c5:14:bd:0f:
                    87:4e:a9:32:5a:fd:0b:34:6e:37:17:3a:39:97:26:
                    60:68:7b:18:58:6e:44:67:1a:20:6e:07:e5:85:f3:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:BA:11:37:E1:D6:E0:C9:AA:89:C8:3B:A9:D7:63:1B:8C:56:6F
            X509v3 Authority Key Identifier:
                keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:1d:41:9f:83:b1:ee:7b:8c:af:ae:7c:4c:9c:a2:b1:59:
         7e:1f:27:56:ee:57:49:00:5f:f8:c0:a4:65:25:bd:07:40:9b:
         38:9d:1a:cb:d5:b5:9d:7f:99:80:78:dc:b9:70:3b:6a:38:52:
         48:94:b9:07:02:01:3e:4e:ab:4f:27:fd:c6:b7:e5:ac:2c:ca:
         a8:33:f8:53:c4:3b:0f:74:e2:54:2b:31:26:a4:1f:fa:e5:28:
         c7:3f:58:e4:98:29:e6:c0:c1:ea:73:30:04:e6:03:14:10:fc:
         c2:94:4b:35:56:70:54:77:e6:4d:ea:f8:9e:97:a2:a9:52:7c:
         f5:68:1a:5b:15:06:d2:80:54:88:41:7b:85:9d:ed:b3:f8:7c:
         e5:92:56:78:b5:99:fc:0b:2a:e4:63:e5:d6:5a:2a:74:b2:5a:
         ec:06:0b:23:98:71:82:6b:f3:5f:ef:a7:21:22:66:dd:0e:06:
         c5:7e:52:0f:c6:14:69:8e:ef:f9:e3:b5:02:05:87:50:fd:00:
         bc:4e:ea:7d:8a:9e:89:3b:f0:b4:ce:8c:f2:d1:29:96:9c:6a:
         64:63:88:92:30:30:b6:6a:0c:a4:51:03:84:37:5d:52:89:0a:
         62:fd:ac:06:ae:91:cd:dc:4f:11:5e:c7:95:08:87:bb:d0:3e:
         3f:e2:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:23:02 2026 by rpki-client