Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          2pTF5ynofJGM5h2T4hDo/OLL69k/1M4t90Jdx25N5us=
Subject key identifier:   B8:AF:1B:D8:76:29:CA:08:A1:BB:81:CB:58:54:06:78:48:B2:29:E8
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       019D38665F2382E266BCA8B419C75A98BA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          0790
Signing time:             Sun 29 Mar 2026 07:02:06 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:06 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:06 +0000
Files and hashes:         1: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: N8QIy4qd5Is+WXoBwZFk02MlB4Y1D/QmTF+KKcFqF5c=)
                          2: da21FZlB-EiwRoOLCN5ITMfxNFo.roa (hash: 1w1sUJ0dtbKqnb7RxW32/zqJ1lJ/MMxyHIhHBbfSnXc=)
                          3: jCXew-LM4stUKDAZjHPkm0CcjHk.roa (hash: OKyuhMm85OLa4bavn5P/TH9jpfhep7ElblfCCsZsrhU=)
                          4: rSBkW65hC7ab29bJ4AU0NuL624g.roa (hash: PQXW1iGB9abxie2k7zu6yoynTk5cvhSDeO4aK1Kj0iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:5f:23:82:e2:66:bc:a8:b4:19:c7:5a:98:ba:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Mar 29 07:02:06 2026 GMT
            Not After : Mar 30 07:02:06 2026 GMT
        Subject: CN=b8af1bd87629ca08a1bb81cb5854067848b229e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:35:df:75:7c:1a:89:7b:9d:60:34:19:06:
                    f7:22:83:e7:be:19:fa:8f:d7:6e:d2:90:62:1d:04:
                    89:c0:36:6e:24:86:c2:5b:78:05:28:a4:23:9b:49:
                    ca:ea:1b:62:f9:40:8d:34:41:cc:3a:2d:c9:c5:ff:
                    88:77:77:a8:63:f1:1a:8b:4d:2c:a4:f5:e9:13:57:
                    d0:33:b1:ab:ae:2b:3c:c3:a3:23:d4:bc:d7:44:03:
                    8e:33:cb:fc:e9:81:cd:3e:a1:7f:6c:ff:98:24:a0:
                    70:e5:b5:ad:b2:73:37:00:93:51:4e:d0:f6:3e:69:
                    47:a5:5b:da:83:c6:d2:e0:a8:d6:36:82:88:b7:e7:
                    46:10:20:85:e1:c4:f0:7d:f2:2e:18:23:68:22:ff:
                    30:91:d0:91:04:c8:84:e8:5a:cb:00:c5:60:e8:a3:
                    3e:fb:10:1e:ab:7e:ed:ea:c6:37:46:71:40:b4:59:
                    3e:33:1f:72:5a:21:97:27:65:d6:b4:5e:cc:1a:d3:
                    a4:49:ab:86:82:32:aa:aa:8d:f6:85:c5:a5:6d:ec:
                    32:82:ee:aa:9f:c1:fc:cc:e8:1d:5e:14:80:87:da:
                    b3:2c:be:94:28:b3:f7:dc:9c:65:84:4c:e8:44:85:
                    f6:e6:eb:23:9f:cc:0c:63:a0:04:19:a8:a1:d6:6d:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:1B:D8:76:29:CA:08:A1:BB:81:CB:58:54:06:78:48:B2:29:E8
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:5f:ac:dc:7c:92:b0:c4:fe:78:2e:df:41:c2:83:e5:f0:
         e3:6f:91:93:e5:c5:c7:da:d4:f3:f8:c7:8c:e6:58:28:22:a2:
         12:ec:04:9d:e5:64:1f:36:46:9e:1a:3f:62:98:06:66:ab:7a:
         56:98:61:3d:d3:50:02:a6:fc:76:bc:a6:e0:19:47:b4:b0:9a:
         d5:47:3c:f2:42:ec:ed:aa:a1:86:f5:f0:65:e1:ca:ef:4f:5d:
         53:8d:06:7d:1a:72:ef:22:ee:bb:65:b2:63:d8:50:ef:bc:38:
         af:16:4e:2e:e5:a7:3f:c1:58:dd:e5:aa:d5:12:b5:75:8a:d7:
         47:29:4f:67:29:74:2d:da:88:6c:f3:14:40:f7:7d:ad:8b:a5:
         d5:07:2c:d8:1d:26:86:77:71:f2:03:73:86:21:3a:ed:da:29:
         2c:f8:d9:31:42:e9:ed:cc:fe:87:22:d9:91:bd:13:ed:5a:72:
         64:97:e9:b5:32:57:21:c6:e6:45:63:94:35:f1:a0:ae:db:bd:
         29:a4:6b:0f:6f:02:23:1f:e6:3d:b8:04:18:b7:5d:8a:e6:b2:
         5f:cc:4b:d3:97:d6:9c:e5:87:f6:f2:2a:0c:2b:71:6c:d1:13:
         bc:02:f0:75:d4:59:2e:2e:05:94:44:2d:fd:62:e8:2c:b0:1c:
         e8:f9:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:07 2026 by rpki-client